Joining the vRealize Automation appliance to the domain overrides the Network Time Protocol server settings configured in the virtual appliance management interface
Article ID: 314819
Updated On:
Products
VMware Aria Suite
Issue/Introduction
Symptoms:
vRealize Automation(vRA) virtual appliances do not stay synchronized with the Network Time Protocol(NTP) server configured in the virtual appliance management(VAMI) interface.
The NTP server configured in the vRA appliance VAMI interface can be checked under the Admin -> Time Settings tab.
The NTP server configured in the vRA appliance VAMI interface can be checked under the Admin -> Time Settings tab.
Environment
VMware vRealize Automation 7.5.x
Cause
When a directory is added as type Integrated Windows Authentication(IWA) this requries the vRA appliances in the environment to join the domain.
Once this happens, the NTP source for the appliances becomes one of the Domain controllers chosen using the DNS Service Location method.
If the vRA appliance is configured to use an NTP server, the NTP settings in vRA VAMI are not respected in favour of the NTP server preferred by the DNS service location method.
Once this happens, the NTP source for the appliances becomes one of the Domain controllers chosen using the DNS Service Location method.
If the vRA appliance is configured to use an NTP server, the NTP settings in vRA VAMI are not respected in favour of the NTP server preferred by the DNS service location method.
Resolution
This is by design, domain join is a hard requirement for leveraging the IWA directory type in vRA.
To alleviate the issue make sure your domain controllers are configured to provide consistent time data in order to achieve better accuracy.
To alleviate the issue make sure your domain controllers are configured to provide consistent time data in order to achieve better accuracy.
Feedback
Yes
No
Powered by
