Unable to create a Privileged Account for SQL Server in VMware Data Services Manager (DSM)

Products

• VMware Data Services Manager

Issue/Introduction

Unable to complete the process described in the following article:

Create an Active Directory Privileged Account for SQL Server in Data Services Manager

Review of the control-plane.tar.gz_extracted/provider/containers/dsm-tsql-provisioner-service.log shows entries similar to:

"the controller failed to respond to ping within the configured timeout"

Environment

DSM (all versions)

Cause

This issue can occur due to the DSM being unable to perform an LDAP ping to the domain controller.

The LDAP ping is performed over UDP port 389.

Additionally, Active Directory communication requires UDP/TCP port 88 (Kerberos) to be accessible.

Resolution

To resolve this issue, ensure the following network ports are open between the VMware Data Services Manager (DSM) appliance and the Active Directory Domain Controllers:

• UDP Port 389: Required for LDAP ping/discovery.
• UDP/TCP Port 88: Required for Kerberos authentication.

Once the network connectivity is established, retry the privileged account setup process.

Additional Information

Issue can be verified from DSM with the following command:

ldapsearch -H ldap://<FQDN-ADServer> -x -b ”” -s base ”objectclass=*”