AD account is not able to authenticate

Products

• VMware vCenter Server

Issue/Introduction

When running API calls receiving errors similar to the below.

 

Error:

"VMware Authentication Failed VMware authentication was NOT successful on host=#.#.#.#, user=domain_alias\username, error message: API: failed to login (Cannot complete login due to an incorrect user name or password.)"

• Fails with command:
  

  curl -k -X POST https://#.#.#.#/rest/com/vmware/cis/session -u <domain_alias\username:password>

Cause

Something happened in the environment to cause the domain Alias to stop working.

Resolution

Workaround:

• Use full domain name instead of the alias when authenticating.
• Succeeds with:

  curl -k -X POST https://#.#.#.#/rest/com/vmware/cis/session -u <full_domain\username:password>

 

Issue may be related to KB “Fix AD Domain alias for ADFS via script”. Review for possible permanent fix, to allow using domain Alias if one exists for the environment.