Determining the ownership of VMware vCenter Server 6.0 Components within the VMware vSphere domain

Products

• VMware vCenter Server

Issue/Introduction

This article provides information on determining Solution User ownership for a vCenter Server 6.0 instance (or multiple instances) in an embedded or distributed deployment.

For similar information specific to vSphere 5.x, see Determining the ownership of VMware vCenter Server 5.1/5.5 components within vCenter Single Sign-On (2046600).

Environment

VMware vCenter Server 6.0.x
VMware vCenter Server Appliance 6.0.x

Resolution

In vSphere 6.0, VMware Authentication Framework Daemon (VMAFD) APIs were introduced to simplify the identification of solution users within an environment.

To determine the ownership of vCenter Server 6.0 components, perform these workflows:

To check usernames in vSphere Web Client 6.0:

1. Log in to vSphere Web Client 6.0 as [email protected].
2. Click Administration.
3. Under the Single Sign-On, click Users and Groups.
4. Click the Solution Users tab. Solution User objects and descriptions are listed.
5. Make a note of the object names.

Solution User Identification

vCenter Server Appliance and Platform Services Controller Appliance

1. Initiate an SSH connection to the vCenter Server Appliance or Platform Services Controller Appliance.
2. Log in as the root user and enter the password when prompted.
3. Run this command to enable the Bash shell:
   
   shell.set --enable True
   
   
4. Run this command to access the Bash shell:
   
   shell
   
   
5. Run this command to list all of the Solution Users in the vSphere Domain:
   
   /usr/lib/vmware-vmafd/bin/dir-cli service list
   
   
6. When prompted, enter the [email protected] password.
7. Run this command to extract the GUID of your vSphere component for either the vCenter Server or Platform Services Controller:
   
   /usr/lib/vmware-vmafd/bin/vmafd-cli get-machine-id --server-name localhost
   
   Note: The preceeding command is supported only to run against Localhost.
   
   For example:
   
   vcsa1:~ # /usr/lib/vmware-vmafd/bin/vmafd-cli get-machine-id --server-name localhost
   bf048b3a-231e-40b0-96ea-e5792f7fa65b
   
   
8. Using the unique GUID for the vSphere component, run this command to extract a subset of the Solution Users in your vSphere Domain
   
   /usr/lib/vmware-vmafd/bin/dir-cli service list --password <[email protected]> | grep <GUID>
   
   For example:
   
   /usr/lib/vmware-vmafd/bin/dir-cli service list --password VMw@re123 | grep bf048b3a-231e-40b0-96ea-e5792f7fa65b
   
   You see output similar to:
   
   machine-bf048b3a-231e-40b0-96ea-e5792f7fa65b
   vpxd-bf048b3a-231e-40b0-96ea-e5792f7fa65b
   vpxd-extension-bf048b3a-231e-40b0-96ea-e5792f7fa65b
   vsphere-webclient-bf048b3a-231e-40b0-96ea-e5792f7fa65b

vCenter Server and Platform Services Controller for Windows

1. Connect to vCenter Server or Platform Services Controller for Windows remotely.
2. Open an elevated command prompt.
3. Run this command to list all of the Solution Users in the vSphere Domain:
   
   "%VMWARE_CIS_HOME%"\vmafdd\dir-cli service list
   
   
4. When prompted, enter the [email protected] password.
5. Run this command to extract the GUID of your vSphere component for either the vCenter Server or Platform Services Controller:
   
   "%VMWARE_CIS_HOME%"\vmafdd\vmafd-cli get-machine-id --server-name localhost
   
   Note: The preceding command is supported only to run against Localhost.
   
   For example:
   
   C:\Windows\system32>"%VMWARE_CIS_HOME%"\vmafdd\vmafd-cli get-machine-id --server-name localhost
   86ca3bf1-9201-11e3-8f19-000c29562ae2
   
   
6. Using the unique GUID for the vSphere component, run this command to extract a subset of the Solution Users in your vSphere Domain.
   
   "%VMWARE_CIS_HOME%"\vmafdd\dir-cli service list --password <[email protected] Password> | findstr <GUID>
   
   For example:
   
   "%VMWARE_CIS_HOME%"\vmafdd\dir-cli service list --password VMw@re123 | findstr 86ca3bf1-9201-11e3-8f19-000c29562ae2
   
   You see output similar to:
   
   machine-86ca3bf1-9201-11e3-8f19-000c29562ae2
   vpxd-86ca3bf1-9201-11e3-8f19-000c29562ae2
   vpxd-extension-86ca3bf1-9201-11e3-8f19-000c29562ae2
   vsphere-webclient-86ca3bf1-9201-11e3-8f19-000c29562ae2

Additional Information

Determining the ownership of VMware vCenter Server 5.1/5.5 components within vCenter Single Sign-On
在 VMware vSphere 域中确定 VMware vCenter Server 6.0 组件的所有权
VMware vSphere ドメイン内における VMware vCenter Server 6.0 コンポーネントの所有権の決定