After upgrading to VMware vCenter Server Appliance 6.0 users are unable to view the inventory in the vSphere Web Client
search cancel

After upgrading to VMware vCenter Server Appliance 6.0 users are unable to view the inventory in the vSphere Web Client

book

Article ID: 315203

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

Symptoms:
  • After upgrading the vCenter Server Appliance to 6.0, Active Directory user accounts show an empty inventory when logging into the vSphere Web Client.
  • This issue is not seen in the vSphere Client.
  • Accounts that are part of the vsphere.local identity source do not have this issue.
  • Attempting to remove the user account(s) permissions does not resolve the issue.


Cause

This issue occurs when permissions for Active Directory user accounts were added in vCenter Server 5.x based on the NetBIOS alias of the domain. As of vSphere 6, permissions are now added based on the domain specified in the user's User Principal Name (UPN) and any users added prior to vSphere 6.0 will retain the NetBIOS alias.

Resolution

This issue is resolved in VMware vCenter Server Appliance 6.0 Update 2, available at VMware Downloads.
 
To work around the issue without upgrading, correct the permission entries in the vCenter Server Appliance database to have the full domain name.
  1. Open the console of the vCenter Server Appliance.
  2. Stop the vCenter Server service. For more information, see Stop, Start, or Restart the VMware vCenter Server Appliance 6.0 Service (2115730)
  3. Back up the vCenter Server Appliance database. For more information, see Back up and restore vCenter Server Appliance/vCenter Server 6.0 vPostgres database (2091961)
  4. Run this command to access the vCenter Server Appliance database: 

    /opt/vmware/vpostgres/current/bin # ./psql -d VCDB -U postgres
     
  5. Run these commands to update the domain entry: 

    update CIS_KV_KEYVALUE set KV_KEY = replace(kv_key,'DOMAIN%5C','DOMAIN.COM%5C'); 

    update CIS_KV_KEYVALUE set KV_VALUE = replace(kv_value,'DOMAIN\','DOMAIN.COM \'); 

    Note: where DOMAIN is the original domain alias and DOMAIN.COM has the full domain name.
     
  6. Use the \q command to quit the database.
  7. Reboot the vCenter Server Appliance.


Additional Information



Stopping, starting, or restarting VMware vCenter Server Appliance 6.x services
升级至 VMware vCenter Server Appliance 6.0 后,用户无法在 vSphere Web Client 中查看清单
VMware vCenter Server Appliance 6.0 にアップグレードした後、ユーザーは vSphere Web Client のインベントリを表示できない