2021-12-16T01:17:10.152Z info hostd[2108754] [Originator@6876 sub=Vimsvc.TaskManager opID=eea03376 user=vpxuser] Task Completed : haTask-ha-folder-root-vim.host.LocalAccountManager.updateUser-2191108759 Status error
2021-12-16T01:17:10.153Z info hostd[2108754] [Originator@6876 sub=Solo.Vmomi opID=eea03376 user=vpxuser] Activation [N5Vmomi10ActivationE:0x0000000c66247a00] : Invoke done [updateUser] on [vim.host.LocalAccountManager:ha-localacctmgr]
2021-12-16T01:17:10.153Z verbose hostd[2108754] [Originator@6876 sub=Solo.Vmomi opID=eea03376 user=vpxuser] Arg user:
--> (vim.host.LocalAccountManager.PosixAccountSpecification) {
--> id = "vxpsvc_ptagent_op",
--> password = (not shown),
--> }
2021-12-16T01:17:10.153Z info hostd[2108754] [Originator@6876 sub=Solo.Vmomi opID=eea03376 user=vpxuser] Throw vmodl.fault.SystemError
2021-12-16T01:17:10.153Z info hostd[2108754] [Originator@6876 sub=Solo.Vmomi opID=eea03376 user=vpxuser] Result:
--> (vmodl.fault.SystemError) {
--> reason = "pam_passwdqc: Error parsing parameter "retry=3,": Invalid parameter value. *** passwd: Critical error - immediate abort",
--> msg = "",
--> }
...
passwdqc is complaining about invalid format with "retry=3," and this is because an invalid comma is added to the ESXi advanced option Security.PasswordQualityControl
The issue is resolved in NSX 3.1.3.6 or later releases.
The workaround is to edit the advanced option again and remove the extra ',':
From:'retry=3, min=disabled,disabled,disabled,7,7'
to:'retry=3 min=disabled,disabled,disabled,7,7'