Join DomainVMware vCenter to Domain

[mocansey]

Dear Team,

I trust you're all doing well.

I'm in the middle of joining our VMware vCenter Server to local domain controller but having an error message as below

 "java.lang.reflect.InvocationTargetException"

Can you advise what I should do to get the issue resolve?

Best regards

Michael 

[Nick Merlevede]

Hi Michael,

Did you also tried joining using command line?

1. Connect vCenter Server Appliance with SSH. (Login to PSC Appliance in case of External PSC)

2. Type "shell" to go to shell prompt.

3. Execute  "/opt/likewise/bin/domainjoin-cli join [domain] [user name]"

    Example: /opt/likewise/bin/domainjoin-cli join mylab.com labadmin"

4. Enter the password of the AD user you specified in the command.

5. Reboot the Appliance with command "reboot"

6. Login again via ssh and verify AD join status with below command.

    /opt/likewise/bin/domainjoin-cli query

 

Regards

[Mark Edwards]

 - Note that whilst your command will work, it will drop vCenter into the Default Computers container, unless the AD Computer object has been pre-staged first.

As long as you have sufficient permissions in AD, you can use the --advanced switch below to control placement of the computer object

 

/opt/likewise/bin/domainjoin-cli join --advanced --ou "OU=VMware,OU=Servers,DC=domainname,DC=com" domainname.com "[e-mail]"

 

HTH 

[Narinder Sidhu]

Tried that but I am getting this error:

 root@localhost [ ~ ]# /opt/likewise/bin/domainjoin-cli join MyDomain.LOCAL adm_sidhun

Error: Invalid hostname [code 0x000004ba]

The hostname may not be 'linux' or 'localhost'.

[vmware]

To resolve this issue please, ensure the vCenter appliance is getting assigned proper hostname and FQDN is resolved both forward and reverse lookup. 

[vmotiontheinfo]

Active Directory uses Kerberos for authentication. Kerberos requires unique and properly registered domain names (like vcenter.yourdomain.com) for secure communication. 

Assign a unique name to your vCenter via the VAMI UI (5480 port).

Other than this, you can also check Time sync between vCenter and your local DC. Also, check the account used to join the domain must have the appropriate permission in AD

[Alex_Romeo]

Hi,

check hostname via VAMI.

regards,

Alex