登录 vCenter Server 失败并显示错误：Cannot complete login due to an incorrect user name or password

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
免责声明：本文为 Logging in to vCenter Server fails with the error: Cannot complete login due to an incorrect user name or password (2065134) 的翻译版本。尽管我们会不断努力为本文提供最佳翻译版本，但本地化的内容可能会过时。有关最新内容，请参见英文版本。

---

• 无法登录 vCenter Server。
• 使用 vSphere Client 登录 vCenter Server 失败并显示错误：
  
  由于用户名或密码不正确，无法完成登录 (Cannot complete login due to an incorrect user name or password)。
  
  
• 使用 vSphere Web Client 登录 vCenter Server 失败并显示错误：
  
  无效凭据 (Invalid Credentials)。
  
  
• 在 imsTrace.log 文件（位于 C:\Program Files\VMware\Infrastructure\SSOServer\logs）中，您将看到类似以下内容的条目：
  
  The used by: javax.resource.spi.ResourceAdapterInternalException: Unable to create a managed connection 'ldap://domain-name:3268' with 'GSSAPI' Reason: javax.resource.spi.ResourceAdapterInternalException: Unable to create managed connection GSSAPI
at com.rsa.ims.connectionpool.jca.common.AbstractManagedConnectionFactory.createManagedConnection(AbstractManagedConnectionFactory.java:292)
at org.apache.geronimo.connector.outbound.MCFConnectionInterceptor.getConnection(MCFConnectionInterceptor.java:49)
at org.apache.geronimo.connector.outbound.SinglePoolMatchAllConnectionInterceptor.internalGetConnection(SinglePoolMatchAllConnectionInterceptor.java:88)
at org.apache.geronimo.connector.outbound.AbstractSinglePoolConnectionInterceptor.getConnection(AbstractSinglePoolConnectionInterceptor.java:80)
at org.apache.geronimo.connector.outbound.ConnectionHandleInterceptor.getConnection(ConnectionHandleInterceptor.java:43)
at org.apache.geronimo.connector.outbound.TCCLInterceptor.getConnection(TCCLInterceptor.java:39)
at org.apache.geronimo.connector.outbound.AbstractConnectionManager.allocateConnection(AbstractConnectionManager.java:77)
at com.rsa.ims.connectionpool.jca.common.InitialContextFactoryImpl.getInitialContext(InitialContextFactoryImpl.java:99)
...39 more
Caused by: javax.resource.spi.ResourceAdapterInternalException: Unable to create managed connection GSSAPI
at com.rsa.ims.connectionpool.jca.ldap.ManagedConnectionFactoryImpl.createLdapContext(ManagedConnectionFactoryImpl.java:170)
at com.rsa.ims.connectionpool.jca.ldap.ManagedConnectionFactoryImpl.newManagedConnection(ManagedConnectionFactoryImpl.java:82)
at com.rsa.ims.connectionpool.jca.common.AbstractManagedConnectionFactory.createManagedConnection(AbstractManagedConnectionFactory.java:277)
...46 more

Environment

VMware vCenter Server 5.1.x

Cause

在以下情况下可能出现该问题：

• 无法在标准 LDAP 端口（通常为 TCP/389）上查询域控制器
• 域控制器不响应 LDAP 查询。

Resolution

要解决该问题，将在域控制器上运行的防火墙配置为允许 TCP/389 用于入站连接。

如果问题依然存在，尝试在域控制器上重新启动操作系统。

Additional Information

要验证该问题是否影响 LDAP 与域中的特殊域控制器或域控制器群集的连接，请尝试将备用域控制器配置为测试。有关配置备用域控制器的说明，请参见 vSphere Installation and Setup Guide 中的“添加 vCenter Single Sign-On 标识源”部分。Logging in to vCenter Server fails with the error: Cannot complete login due to an incorrect user name or password