将 ESXi 主机连接到 vCenter Server 时失败并出现超时错误

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:
免责声明： 本文为 Connecting an ESXi host to vCenter Server fails with a Timeout error (2121116) 的翻译版本。 尽管我们会不断努力为本文提供最佳翻译版本，但本地化的内容可能会过时。 有关最新内容，请参见英文版本。

---

• 无法将 ESXi 主机连入 vCenter Server。
• 在 /var/log/vpxa.log 文件中，您会看到类似以下内容的错误：

-> backtrace[01] rip 1d642698 Vmacore::System::SystemFactoryImpl::CreateQuickBacktrace(Vmacore::Ref<Vmacore::System::Backtrace>&)

--> backtrace[02] rip 1d5e10c5 Vmacore::Throwable::Throwable(std::string const&)

--> backtrace[03] rip 1dc7f2d6 Vmomi::SoapStubAdapterImpl::InvokeCommon(Vmomi::MoRef*, Vmomi::ManagedMethod*, Vmacore::RefVector<Vmomi::Any> const&, Vmomi::RequestContext*, bool, Vmacore::Ref<Vmomi::Any>&)

-<YYYY-MM-DD>T<time>Z [5FA21B90 verbose 'hostdcnx' opID=C3D17DC4-00001F27-fa-f8] [VpxaHalCnxHostagent] Authenticate succeeded: userName=vpxuser</time>

<YYYY-MM-DD>T<time>Z [5FA21B90 error 'vpxavpxaVmomi' opID=C3D17DC4-00001F27-fa-f8] [VpxaClientAdapter::InvokeCommon] Got exception while invoking retrieveContent on vim.ServiceInstance:ServiceInstance: 'Invalid state', backtrace:
--> backtrace[00] rip 1d81c333 Vmacore::System::Stacktrace::CaptureWork(unsigned int) </time>

--> backtrace[04] rip 1dc7f728 Vmomi::SoapStubAdapterImpl::Invoke_Task(Vmomi::MoRef*, Vmomi::ManagedMethod*, Vmacore::RefVector<Vmomi::Any>&, Vmomi::RequestContext*, Vmacore::Ref<Vmomi::Any>&)

--> backtrace[05] rip 0a6d6134 /usr/lib/vmware/vpxa/bin/vpxa [0xa6d6134]

--> backtrace[06] rip 0a6d64c8 /usr/lib/vmware/vpxa/bin/vpxa [0xa6d64c8]

<YYYY-MM-DD>T<time>Z [5FA21B90 error 'hostdcnx' opID=C3D17DC4-00001F27-fa-f8] [VpxaHalCnxHostagent] Failed while trying to connect to hostd on the sdk port: vmodl.fault.HostCommunication</time>

<YYYY-MM-DD>T<time>Z [5FA21B90 info 'commonvpxLro' opID=C3D17DC4-00001F27-fa-f8] [VpxLRO] -- FINISH task-internal-9 -- -- vpxapi.VpxaService.login --</time>

<YYYY-MM-DD>T<time>Z [5FA21B90 info 'Default' opID=C3D17DC4-00001F27-fa-f8] [VpxLRO] -- ERROR task-internal-9 -- -- vpxapi.VpxaService.login: vmodl.fault.HostCommunication:</time>

--> Result:

--> (vmodl.fault.HostCommunication) {

--> dynamicType = <unset>,

--> faultCause = (vmodl.MethodFault) null,

--> msg = "",

--> }

--> Args:

• 在 vCenter Server 的 vpxd.log 文件中，您会看到类似以下内容的错误：
  
  注意： 有关详细信息，请参见 vCenter Server 日志文件的位置 (2075135)。

<YYYY-MM-DD>T<time>Z [7FE1CFAED700 error 'HttpConnectionPool-000001'] [ConnectComplete] Connect failed to <cs p:00007fe1c0234b80, TCP:gasonesxi02.gason.local:443>; cnx: (null), error: N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception:</time>

Verification parameters:

--> PeerThumbprint: FA:2A:6A:AB:B4:44:EA:45:31:0F:8B:98:9B:F5:C9:E0:4C:B6:97:64

--> ExpectedThumbprint:

--> ExpectedPeerName: gasonesxi02.gason.local

--> The remote host certificate has these problems:

-->

--> * Host name does not match the subject name(s) in certificate.

-->

--> * unable to get local issuer certificate)

<YYYY-MM-DD>T<time>Z [7FE1CEF56700 error 'vpxdvpxdInvtHost' opID=C3D17DC4-00001F99-84] [VpxdInvtHost::HandlePreRemovalCleanup] Failed to reconnect to cleanup before host removal : N3Vim5Fault14SSLVerifyFault9ExceptionE(vim.fault.SSLV</time>

erifyFault)

<YYYY-MM-DD>T<time>Z [7FE1CEF56700 warning 'vpxdvpxdMoLicenseManager' opID=C3D17DC4-00001F99-84] [LicMgr] Trying to remove licenses. Host was never registered with the license manager.</time>

<YYYY-MM-DD>T<time>Z [7FE1CEF56700 error 'linuxvpxLdap_linux' opID=C3D17DC4-00001F99-84] [LDAP Client] [LDAP Client] Failed to delete LDAP entrycn=host-2186:DABC2789-DD44-4E18-A280-ABFDDA1D1A94,ou=LicenseEntities,ou=Licensing,dc=virt</time>

ualcenter,dc=vmware,dc=int: 0x32 (No such object)

<YYYY-MM-DD>T<time>Z [7FE1CEF56700 error 'licenseldapStorage' opID=C3D17DC4-00001F99-84] [LicMgr] Failed to remove assignment</time>

<YYYY-MM-DD>T<time>Z [7FE1CEF56700 error 'Default' opID=C3D17DC4-00001F99-84] (Log recursion level 2) vmodl.fault.SystemError</time>

Environment

VMware vSphere ESXi 5.5
VMware vSphere ESXi 5.1
VMware vSphere ESXi 5.0

Cause

如果主机证书存在以下问题之一，会出现该问题：

• 主机名称与证书中的主题名称不匹配。
• vCenter Server 无法识别本地颁发者证书。

Resolution

要解决此问题，请重新生成 ESXi 主机证书。

要为 ESXi 重新生成新的自签名证书，请参见 vSphere Security 指南中的“生成 ESXi 的新自签名证书”部分。

Additional Information

Connecting an ESXi host to vCenter Server fails with a Timeout error