Logging into vCenter Server using the vSphere Client fails with the error: Incorrect username or password

Products

• VMware vCenter Server

Issue/Introduction

If the user account is on a domain, verify that the account has the appropriate access restrictions configured.

Symptoms:

• Cannot log in to vCenter Server using the vSphere Client
• Logging in to the vCenter Server using the vSphere Client fails
• You see the error:
  
  Incorrect username or password
  
  
• In the vpxd.log file, you see entries similar to:

[2011-08-13 14:07:18.517 05524 info 'App' opID=E1DE016B-00000004] [VpxLRO] -- BEGIN task-internal-20687912 -- -- vim.SessionManager.login -- 25D8EA1E-AD49-4EB7-A75F-C3C50D4B67DB
[2011-08-13 14:07:18.651 05524 info 'App' opID=E1DE016B-00000004] Error 1329 authenticating user Domain\Username.
[2011-08-13 14:07:18.651 05524 error 'App' opID=E1DE016B-00000004] Failed to authenticate user <Domain\Username>
[2011-08-13 14:07:18.651 05524 error 'App' opID=E1DE016B-00000004] vim.fault.InvalidLogin

• You have verified that the:
  
• • The username and password entered are correct and no characters are missing
  • The account is not locked or removed from the Active Directory
  • Account permissions are set for administrator roles and have local administrators membership for vCenter Server

Environment

VMware vCenter Server 4.0.x
VMware vCenter Server 4.1.x

Cause

This issue may occur if the Windows Active Directory account restrictions does not allow this account to access vCenter Server.

Resolution

To resolve this issue, verify if there are account restrictions for this user when accessing vCenter Server.

To verify the account restrictions:

1. Log in to the domain controller and open Active Directory Users and Computers.
2. Navigate to the user account and open its properties.
3. Select Logon Workstations and verify that the System or NetBIOS name of the vCenter Server's domain is listed and is correct.