VMware Database Management Essentials Fails to Deploy due to Missing SSO Domain

Products

• VMware Data Services Manager

Issue/Introduction

Symptoms:

• The RDS on VMware Installer was deployed and the installation was successfully initiated.
• The RDS Edge Router device displays the following VPN status on the console:
   
  Status: IKE SA authenticated; IPsec SA authenticated; VPN tunnel is up.
   
• The RDS Connector repeatedly deploys and is then destroyed.
• In the vdme-deployer-service.log file from the RDS on VMware Installer log bundle, you see an entry similar to the following where the administrative user is listed as the calculated SSO domain:
   
  2019-12-08 11:43:32.541  INFO 1124 --- [pool-1-thread-2] c.v.r.d.installer.helper.OVFParamHelper  : Calculated vCenter SSO domain name [<admin username>]

Environment

VMware Database Management Essentials 1.x

Cause

If the vCenter administrator username specified in the vCenter Configuration section of the RDS on VMware Installer web interface is part of the default identity source in the vSphere SSO configuration, authentication and validation will succeed without specifying the domain. For example, the username [email protected] would successfully authenticate using only rds_admin if mydomain.local is the default identity source in vSphere.

During the deployment, additional SSO users are created. If the SSO domain is missing from the specified administrator account, these accounts cannot be generated correctly and attempts to complete the configuration fail.

Resolution

This is a known issue impacting VMware Database Management Essentials 1.0 and additional validation will be included in a future release to prevent this from occurring.

In order to successfully deploy RDS for VMware, restart the onboarding process and use the full user principal name (e.g., username@domain) when specifying the Administrator Username in the vCenter Configuration section of the web interface of the RDS on Vmware Installer.