Attempting to add a user to the localos domain on vCenter 8.0 Update 3 may fail with the error:
"A vCenter Single Sign-On service error occurred"
On the ssoAdminServer.log (/var/log/vmware/sso), the following errors are seen:
YYYY-MM-DDTHH:MM:SS.284Z INFO ssoAdminServer[99:pool-2-thread-5] [OpId=m2XXXXXX-5572-auto-4au-h5:7XXXXXX2] [com.vmware.identity.admin.vlsi.PrincipalManagementServiceImpl] [User {Name: Administrator, Domain: VXXXXXX.LOCAL} with role 'Administrator'] Creating local person user 'testuser' with details ('','','','','testuser@localos')
YYYY-MM-DDTHH:MM:SS.284Z ERROR ssoAdminServer[99:pool-2-thread-5] [OpId=m2XXXXXX-5572-auto-4au-h5:7XXXXXX2] [com.vmware.identity.idm.server.IdentityManager] Failed to add user [testuser] in tenant [VXXXXX.local]
YYYY-MM-DDTHH:MM:SS.284Z ERROR ssoAdminServer[99:pool-2-thread-5] [OpId=m2XXXXXX-5572-auto-4au-h5:7XXXXXX2] [com.vmware.identity.idm.server.ServerUtils] Exception 'com.vmware.identity.idm.InvalidArgumentException: Invalid principal name testuser@LOCALOS. Unrecognized upn suffix.'com.vmware.identity.idm.InvalidArgumentException: Invalid principal name testuser@LOCALOS. Unrecognized upn suffix.
vCenter Server 8.0 Update 3
VMware engineering are aware of this issue and are working towards a fix.
You can create a new local user account in the vCenter Server Appliance.
*NOTE* You need to be in the appliance shell for these commands to work, see Toggle Appliance Shell
Available commands:
localaccounts.user.add
localaccounts.user.list
localaccounts.user.delete
localaccounts.user.password.update
localaccounts.user.get
localaccounts.user.set
For more information and syntax of above command see vSphere Admin Doc