Connection failure message when running the esxcli vSphere CLI under Linux

Products

• VMware vSphere ESXi

Issue/Introduction

When you run an esxcli command on a Linux system that is using SELinux enhanced security, the command reports Connect to 1.2.3.4 failed, and records the following message in /var/log/messages:

setroubleshoot: SELinux is preventing esxcli from loading /usr/lib/vmware-vcli/bin/esxcli/_ssl.so which requires text relocation

Environment

VMware ESXi 4.0.x Embedded
VMware ESXi 4.0.x Installable
VMware ESX 4.0.x

Resolution

You can resolve this issue by making one of these changes on the system on which you run esxcli commands:

• Run the following command to resolve the text relocation issue:
  chcon -t textrel_shlib_t /usr/lib/vmware-vcli/bin/esxcli/_ssl.so

• Disable SELinux or change the SELinux policy to permissive.

Note: Disabling or changing SELinux policy to permissive is a significant change to the security of the client system. Do not make this change unless you have in-depth knowledge of SELinux and your local network security policies.

For instructions to disable SELinux and to change the SELinux policy to permissive, see:

• How do I disable SELinux?
• Guide/Mode SELinux Wiki.

Note: The preceding links were correct as of September 23, 2011. If you find the link is broken, provide feedback and a VMware employee will update the link.