VSAN and/or VLCM views are missing in vSphere Client
search cancel

VSAN and/or VLCM views are missing in vSphere Client

book

Article ID: 322342

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

The purpose of this article is to fix the missing views for vSAN, single image (VLCM), missing Lifecycle Manager from the main menu, Baselines, VMware Tools and VM Hardware from the Update Tab.

Symptoms:

  • vCenter is missing views on all clusters related to vSAN monitoring as well as anything other than "services" under "configuration". Views related to managing the clusters with a single image are also missing.
  • In /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log you find the following error message:
    [YYYY-MM-DDTHH:MM:SS] [ERROR] tp-nio-127.0.0.1-5090-exec-7 70000142 100008 200008 com.vmware.vise.mvc.controllers.PluginServiceController A general error occurred while evaluating plugin (com.vmware.vlcm.client:8.0.1.22088981:1467385155) dynamic extensions info from the vSphere Client platform. com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {
    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
    id = vapi.security.authorization.invalid,
    defaultMessage = Unable to authorize user,
    args = [],
    params = <null>,
    localized = <null>
}],
    data = <null>,
    errorType = UNAUTHORIZED



Environment

VMware vCenter Server 8.0.x

Cause

The reason for this is the 'administrators' group is missing from the 'SystemConfiguration.Administrators' group

Resolution

To solve this issue use the vSphere Client SSO administration page to re-add the 'administrators' group to the 'SystemConfiguration.Administrators' group:

  1. Login in vSphere Client using the default SSO administrator account (administrator@vsphere.local, the domain part might be different, depending on how you named the SSO domain)

  2. Change into Administration > Single Sign On > Users and Groups > Groups

  3. Find the SystemConfiguration.Administrators group and click on EDIT to add the Administrators back in it:

If the issue still persists, verify if the required plugins are loaded, by looking in Administration > Solutions > Client Plugins:

  • VMware vCenter Server Lifecycle Manager (remote)

  • VMware vSphere Lifecycle Manager Client (remote)

  • VMware vSphere Lifecycle Manager (local)

Should one or more of these plugins be missing, please reboot the VCSA. It is possible that it was not properly registered due to the administrators group missing previously.

After the reboot, open vSphere Client in a new browser tab and verify that the missing views are now visible. 

 

If you do not have access to the Single Sign On administration page, as a workaround:

  1. Select the VC where the issue is present

  2. Go in Administration > Solutions > Client Plugins

  3. Click on the VMware vSphere Lifecycle Manager Client (remote) plugin

  4. Click on the HIDE button and refresh the browser. This will revert the VLCM UI plugin from remote to local, and should work around the issue until the administrators group can be added correctly.




Additionally, we can check if the Builtin Administrator member attribute user is present or not by accessing an elevated SSH session to the vCenter Server and run the following commands:

  •  /usr/lib/vmware-vmafd/bin/dir-cli group list --name 'SystemConfiguration.Administrators'
    • Output should look like below:
      Enter password for administrator@vsphere.local:
CN=machine-b22d9c57-cc84-4db2-922d-89edcdfa001a,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vpxd-b22d9c57-cc84-4db2-922d-89edcdfa001a,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vpxd-extension-b22d9c57-cc84-4db2-922d-89edcdfa001a,CN=ServicePrincipals,DC=vsphere,DC=local
CN=hvc-b22d9c57-cc84-4db2-922d-89edcdfa001a,CN=ServicePrincipals,DC=vsphere,DC=local
cn=Administrator,cn=Users,dc=vsphere,dc=local
CN=hvc-644b4ae9-6221-4fd3-b042-d12ac7ea6e7f,CN=ServicePrincipals,DC=vsphere,DC=local
CN=machine-e61e9853-5536-4db0-b828-2edcf03e779b,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vpxd-e61e9853-5536-4db0-b828-2edcf03e779b,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vpxd-extension-e61e9853-5536-4db0-b828-2edcf03e779b,CN=ServicePrincipals,DC=vsphere,DC=local
CN=hvc-e61e9853-5536-4db0-b828-2edcf03e779b,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vSphereClientSolutionUsers,DC=vsphere,DC=local
CN=vsphere-ui-b22d9c57-cc84-4db2-922d-89edcdfa001a,cn=ServicePrincipals,dc=vsphere,dc=local
CN=vsphere-webclient-b22d9c57-cc84-4db2-922d-89edcdfa001a,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vsphere-ui-e61e9853-5536-4db0-b828-2edcf03e779b,cn=ServicePrincipals,dc=vsphere,dc=local
CN=vsphere-webclient-e61e9853-5536-4db0-b828-2edcf03e779b,CN=ServicePrincipals,DC=vsphere,DC=local
CN=vpxd-svc-acct-b22d9c57-cc84-4db2-922d-89edcdfa001a,cn=ServicePrincipals,dc=vsphere,dc=local
CN=vpxd-svc-acct-e61e9853-5536-4db0-b828-2edcf03e779b,cn=ServicePrincipals,dc=vsphere,dc=local
CN=vmware-applmgmtservice-e61e9853-5536-4db0-b828-2edcf03e779b,cn=ServicePrincipals,dc=vsphere,dc=local
CN=vmware-applmgmtservice-b22d9c57-cc84-4db2-922d-89edcdfa001a,cn=ServicePrincipals,dc=vsphere,dc=local
CN=hvc-svc-e61e9853-5536-4db0-b828-2edcf03e779b,cn=ServicePrincipals,dc=vsphere,dc=local
CN=hvc-svc-b22d9c57-cc84-4db2-922d-89edcdfa001a,cn=ServicePrincipals,dc=vsphere,dc=local
  • If the entry cn=Administrators,cn=Builtin,dc=vsphere,dc=local isn't present, then run the following command to add the Builtin Administrator member attribute to the SystemConfiguration.Administrators group:
    • /usr/lib/vmware-vmafd/bin/dir-cli group modify --name SystemConfiguration.Administrators --add Administrators
  • Then, open vSphere Client in a new browser tab and verify that the missing views are now visible. 
Powered by Wolken Software