"Access denied for the requested URI: /hybridity/api/sessions" when logging into HCX with domain accounts after upgrade
Article ID: 407000
Updated On:
Products
Issue/Introduction
After upgrading VMware HCX to 4.11.1, domain account authentication fails when attempting to access HCX through either the vCenter HCX plugin or the direct HCX management interface.
The following error message appears when trying to log in with Active Directory domain credentials:
Access denied for the requested URI: /hybridity/api/sessions
The local administrator@vsphere.local account continues to function normally, but all domain users are unable to authenticate to HCX services.
Environment
VMware HCX
VMware vCenter
Cause
The "Domain Admins" group for the local domain is missing from the vCenter "Administrators" group. This prevents domain users from accessing HCX resources that rely on vCenter authentication, as HCX cannot properly validate domain user permissions against vCenter's permission structure.
Resolution
To restore domain account access to HCX, re-add the Domain Admins group to the vCenter Administrators group:
- Log in to vCenter Server using the administrator@vsphere.local account
- Navigate to Administration > Single Sign-On > Users and Groups
- Select the Groups tab
- Locate and select the Administrators group
- Click Edit
- In the Edit Group dialog, select the Members tab
- Click Add to add new members to the group
- In the Add Members dialog:
- Change the domain dropdown to your local domain (example.local)
- Search for and select Domain Admins
- Click Add
- Click Save to apply the changes
- Verify the configuration by attempting to log into HCX using domain credentials through both:
- The vCenter HCX plugin
- The direct HCX management interface
Domain users should now be able to authenticate to HCX services successfully.
Additional Information
If the error persists after following these steps, contact Broadcom Support for further assistance.
Please provide the following information when opening a support request with Broadcom for this issue:
- HCX version details (source and target versions)
- vCenter Server version and build information
- Screenshots of the authentication error
- HCX service logs from the affected timeframe
- vCenter Server logs showing authentication attempts
Feedback
