Cannot reconfigure current LDAP Identity Source for vCenter

Products

• VMware vCenter Server

Issue/Introduction

When attempting to update / reconfigure the LDAP URL being used for vCenter Active Directly Identity Source (LDAP), the process fails.

Environment

vCenter Server 7.0

vCenter Server 8.0

Cause

vCenter Server workflow attempts to contact the currently configured LDAP URL during the reconfiguration process.   

In the /var/log/vmware/sso/ssoAdminServer.log you see errors similar to:

Cannot configure identity source due to Failed to probe provider connectivity [URI: ldap://controller-1.domain.com ]; tenantName [vsphere.local], userName [domain\user] Caused by: Can't contact LDAP server.

Resolution

Remove the currently configured ID source from vCenter and then re-add it using the new Domain Controller URL.

Add or Edit a vCenter Single Sign-On Identity Source

Additional Information

Active Directory over LDAP and OpenLDAP Server Identity Source Settings

7.0 - Active Directory over LDAP and OpenLDAP Server Identity Source Settings
8.0 - Active Directory over LDAP and OpenLDAP Server Identity Source Settings