ESXi 6.x host disconnects from vCenter when configured for DCUI Smart Card Authentication
Article ID: 324277
Updated On:
Products
VMware vSphere ESXi
Issue/Introduction
Symptoms:
- Configuring DCUI Smart Card Authentication on the esxi 6.x host will cause it to disconnect from vCenter after ~12 hours of being enabled.
- Out of Memory errors are seen in likewise logging (if enabled) or in syslog.
20190407172959:VERBOSE:lwreg-ipc: (assoc:0x877dc60) Dropping: Out of memory
Environment
VMware vSphere ESXi 6.7
Cause
This issue occurs due to an unreachable domain and Likewise logs shows an error repeatedly until it eventually exhausts memory.
20190322044644:INFO:netlogon: Looking for a DC in domain 'DOMAIN.COM', site '<null>' with flags 0
20190322044644:INFO:netlogon: Looking for a DC in domain 'DOMAIN.COM', site '<null>' with flags 0
Resolution
This is known issue.
Workaround:
To workaround this issue, on the ESXi host set the following likewise registry key to ignore trusted domains.
Restart lwsmd after running the above command.
Workaround:
To workaround this issue, on the ESXi host set the following likewise registry key to ignore trusted domains.
/usr/lib/vmware/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lsass\Parameters\Providers\ActiveDirectory]' "DomainManagerIgnoreAllTrusts" 1
Restart lwsmd after running the above command.
Feedback
Yes
No
Powered by
