vCenter HA cluster was out of sync after joined AD

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
- vCenter HA cluster status reported out of sync after joined AD.

• Appliance configuration is out of sync.
• Automatic failover is not allowed, Manual failover is allowed.

Environment

VMware vCenter Server 7.0.x

Resolution

This usage of SSHD support for GSSAPI is not a supported configuration for VCHA.

1. Log on the vCenter Server Appliance via DCUI(console)
2. Change the shell

   Command> shell

3. Execute the below command
4. vi /etc/ssh/sshd_config
5. Uncomment the line

#GSSAPIAuthentication no

6. Confirm that the line below is commented

#GSSAPIDelegateCredentials no

7. Save and exit using command ":wq!"
8. Restart SSH service

service sshd restart


Note: vCenter will still continue to allow AD as an identity source for SSO