vCenter HA cluster was out of sync after joined AD

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
- vCenter HA cluster status reported out of sync after joined AD.

• Appliance configuration is out of sync.
• Automatic failover is not allowed, Manual failover is allowed.

Environment

VMware vCenter Server 7.0.0
VMware vCenter Server 7.0.3
VMware vCenter Server 7.0.x
VMware vCenter Server 7.0.1
VMware vCenter Server 7.0.2

Resolution

This usage of SSHD support for GSSAPI is not a supported configuration for VCHA.

1. Log on the vCenter Server Appliance via DCUI(console)
2. Change the shell

   Command> shell

3. Execute the below command
4. vi /etc/ssh/sshd_config
5. Uncomment the line

#GSSAPIAuthentication no

6. Confirm that the line below is commented

#GSSAPIDelegateCredentials no

7. Save and exit using command ":wq!"
8. Restart SSH service

service sshd restart


Note: vCenter will still continue to allow AD as an identity source for SSO