- The following ports needs to be accessible “88, 139, 389, 445” which are pre-requisite.
- VMware Engineering Team is working to improve the behavior of the likewise agent in vSphere 6.7 in such situation whereas this issue is mitigated already in vSphere 7.x
Ensure that the following ports (both UDP and TCP) are open for communication between the ESX/ESXi host and Active Directory:
- Port 88 - Kerberos authentication
- Port 123 – NTP
- Port 135 - RPC
- Port 137 - NetBIOS Name Service
- Port 139 - NetBIOS Session Service (SMB)
- Port 389 - LDAP
- Port 445 - Microsoft-DS Active Directory, Windows shares (SMB over TCP)
- Port 464 - Kerberos - change/password changes
- Port 3268- Global Catalog search
Workaround:
/etc/init.d/hostd stop
/etc/init.d/hostd start
- Please validate if we can reach the domain controller is reachable if not validate the Physical Network to see if any firewall is blocking the ports to resolve the issue permanently
1. time nc -zv <DC_IP> 88
2. time nc -zv <DC_IP> 389
3. time nc -zv <DC_IP> 445