A problem occurred while - Starting VMware Authentication Framework. Vdcsrp failed. Error[9114] - Unwilling to perform Make sure the UPN and password are correct - while upgrading vcenter from 6.7 to 7.0

Products

• VMware vCenter Server

Issue/Introduction

• vmafd firstboot fails 
• vmafd-firstboot.py_#####_stderr.log:
  
  [YYYY-MM-DDTHH:MM:SS]  password:
[YYYY-MM-DDTHH:MM:SS]  Vdcsrp failed. Error[9114] - Unwilling to perform
Make sure the UPN and password are correct
[YYYY-MM-DDTHH:MM:SS]  <class 'SystemExit'>
[YYYY-MM-DDTHH:MM:SS]  <class 'SystemExit'>
  
  
  vmdird-syslog.log:
  [YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: VmDirMDBGetNextUSN: failed with error (13),(Permission denied)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: InternalModifyEntry: VdirExecutePostModifyCommitPlugins - code(9114)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: VmDirSendLdapResult: Request (Modify), Error (LDAP_UNWILLING_TO_PERFORM(53)), Message (Get next USN), (0) socket (127.0.0.1)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: VmDirMDBGetNextUSN: failed with error (13),(Permission denied)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: InternalModifyEntry: VdirExecutePostModifyCommitPlugins - code(9114)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: VmDirSRPSetIdentityData (Administrator@########.local) failed, (9114)
[YYYY-MM-DDTHH:MM:SS] err vmdird  t@140370486695680: VmDirSrvSetSRPSecret failed (9114)(Administrator@########.local)
[YYYY-MM-DDTHH:MM:SS] info vmdird  t@140370520266496: Backend state set to NORMAL
[YYYY-MM-DDTHH:MM:SS] info vmdird  t@140370520266496: _VmDirCpMdbFile: completed making snapshot with file size 2162Mb in 18 seconds; data transfer rate: 120.1MB/sec, db last tid: 6166413

Environment

VMware vCenter Server 6.x

VMware vCenter Server 7.x

Resolution

1.  Take a snapshot of source vCenter
   
   
2. Log in as root through an SSH or console session on the Source vCenter Server Appliance.
   
   
3. Run this command to enable the shell :
   
   shell.set --enabled true
   
   
4. Set the CopyDbIntervalInSec registry value using this command
   
   /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\vmdir\Parameters]' "CopyDbIntervalInSec" "0"
   
   
5.  Restart the vmdird service
   
   service-control --restart vmdird
   
   
6. Perform the Upgrade

On the target (upgraded) VCSA:

     1 Log in as root through an SSH or console session on the Source vCenter Server Appliance.

     2. Run this command to enable the shell:

         shell.set --enabled true

     3. Set the CopyDbIntervalInSec registry value back to 60 sec using this command

     /opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\vmdir\Parameters]' "CopyDbIntervalInSec" "60"

     4.  Restart the vmdird service

          service-control --restart vmdird