Adding exception users list using host profile to ESXi host, fails with: Cannot apply the host configuration.

Products

VMware vSphere ESXi

Issue/Introduction

hostd.log: - hostd complains about user not found.

YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049634]: [Originator@6876 sub=Vimsvc.TaskManager opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] Task Created : haTask-ha-host-vim.host.HostAccessManager.updateLockdownExceptions-251532 YYYY-MM-DDTHH:MM:SS.SSSSZ Wa(164) Hostd[1049629]: [Originator@6876 sub=UserDirectory opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] User lookup failed for 'gs.global/abc' YYYY-MM-DDTHH:MM:SS.SSSSZ Er(163) Hostd[1049629]: [Originator@6876 sub=Vimsvc.AuthorizationManager opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] User not found: N7Vmacore9Authorize25AuthUserNotFoundExceptionE(User [email protected]) YYYY-MM-DDTHH:MM:SS.SSSSZ Er(163) Hostd[1049596]: --> [context]zKq7AVICAgAAAL9+cgEMaG9zdGQAAEjKR2xpYnZtYWNvcmUuc28AAVNQ4mhvc3RkAAEJV+QAy4E2AVo65IJ4RlkBbGlidmltLXR5cGVzLnNvAAG1lWIAHtssAOD/LAA7UFIDUngAbGlicHRocmVhZC5zby4wAAQ/Ug9saWJjLnNvLjYA[/context] YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049629]: [Originator@6876 sub=AdapterServer opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] AdapterServer caught exception; <<52212be5-2c19-a401-fab5-2a8bb54642cc, <TCP '127.0.0.1 : 8307'>, <TCP '127.0.0.1 : 31772'>>, ha-host-access-manager, vim.host.HostAccessManager.updateLockdownExceptions, <vim.version.v8_0_3_0, internal, 8.0.3.0>, [N11HostdCommon18VmomiAdapterServer19ActivationResponderE:0x0000004dd7a07ba8]>, N3Vim5Fault12UserNotFound9ExceptionE(Fault cause: vim.fault.UserNotFound YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049596]: --> ) YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049596]: --> [context]zKq7AVICAgAAAL9+cgEMaG9zdGQAAOPJR2xpYnZtYWNvcmUuc28AASR5XWhvc3RkAAFehOEBPuxUATI75IJ4RlkBbGlidmltLXR5cGVzLnNvAAG1lWIAHtssAOD/LAA7UFIDUngAbGlicHRocmVhZC5zby4wAAQ/Ug9saWJjLnNvLjYA[/context] YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049629]: [Originator@6876 sub=Vimsvc.TaskManager opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] Task Completed : haTask-ha-host-vim.host.HostAccessManager.updateLockdownExceptions-251532 Status error YYYY-MM-DDTHH:MM:SS.SSSSZ In(166) Hostd[1049629]: [Originator@6876 sub=Solo.Vmomi opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] Activation finished; <<52212be5-2c19-a401-fab5-2a8bb54642cc, <TCP '127.0.0.1 : 8307'>, <TCP '127.0.0.1 : 31772'>>, ha-host-access-manager, vim.host.HostAccessManager.updateLockdownExceptions, <vim.version.v8_0_3_0, internal, 8.0.3.0>, [N11HostdCommon18VmomiAdapterServer19ActivationResponderE:0x0000004dd7a07ba8]> YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049629]: [Originator@6876 sub=Solo.Vmomi opID=m886brhd-27623-auto-lbn-h5:70002848-e9-01-de-78fb-7929 sid=52212be5 user=vpxuser] Arg users: YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> (string) [ YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> "da-user", YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> "nsx-user", YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> "mux_user", YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> "root", YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> "gs.global/abc" YYYY-MM-DDTHH:MM:SS.SSSSZ Db(167) Hostd[1049596]: --> ]

Environment

vSphere 7.x

vSphere 8.x

Cause

ESXi is not added to domain to pull up the users from Active Directory.

Resolution

Add the ESXi host to domain following the steps outlined in the following KB article:
Configuring the ESXi host with Active Directory authentication
Once the host is added to domain, the host profile can be added.