Cannot perform tasks requiring directory search after adding an OpenLDAP directory as an Identity Source in vCenter Single Sign-On

Products

• VMware vCenter Server

Issue/Introduction

After adding an OpenLDAP directory as an Identity Source in vCenter Single Sign-On (SSO), you experience these symptoms:

• You experience difficulties searching for Users, Groups, or both when adding permissions or other tasks that require a directory search
• You are unable to log in to the vSphere Client or vSphere Web Client
• Logging in to the vSphere Client or vSphere Web Client fails with the error:
  
  Invalid username or password.

Environment

• VMware vCenter Server 5.1.x
• VMware vCenter Server 5.5.x

Resolution

When configuring OpenLDAP as an identity source, there are specific OpenLDAP schema requirements for SSO to validate these credentials. Ensure that your OpenLDAP Directory Service meet these requirements.

Additional Information

• Definition of the inetOrgPerson LDAP Object Class
• Lightweight Directory Access Protocol (LDAP): Schema for User Applications
• OpenLDAP schemas supported in VMware vCenter Single Sign-On