Host is unable to authenticate active directory credentials on ESX 9.0.2

Products

• VMware vSphere ESXi

Issue/Introduction

When we try logging in to the ESX Host using any domain account we get invalid username & password.

We get the below error when checking for Domain status using the below command.

# /usr/lib/vmware/likewise/bin/domainjoin-cli query

When we restart the Likewise service on the Host by running the below command and run the query again, it shows AD details and also the same can be seen on Host UI > Security & Users > Authentication

# /etc/init.d/lwsmd restart

However, the moment, we try to login to the host using AD credentials the connection is broken and Hosts are unable to see the AD and unable to communicate it as well.

You might find below entries in the logs.

Likewise.log

[YYYY-MM-DDTHH:MM:SS] INFO lsass: Clearing ldap DC connection list for domain '#####.####.###' due to a network error
[YYYY-MM-DDTHH:MM:SS] INFO lsass: Delayed backup scheduled
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass: Using cache entry for sid S-1-#-##-21#######-29########-26#########-21##, updated 0 seconds ago
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass: Using cache entry for sid S-1-#-##-21#######-29########-26#########-21##, updated 0 seconds ago
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass: Permission granted for (uid = 0, gid = 0, pid = ##########) to open LsaIpcServer
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass-ipc: (session:54##########-13############) Accepted association 0x10a8f916d0
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lwreg: Registry::sqldb.c SqliteGetValueAttributes_Internal() finished
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass-ipc: (assoc:0x10a8f916d0) Dropping: Connection closed by peer
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass: Permission granted for (uid = 0, gid = 0, pid = ##########) to open LsaIpcServer
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass-ipc: (session:2###########-90############) Accepted association 0x10a8f916d0
[YYYY-MM-DDTHH:MM:SS] VERBOSE lsass: Using cache entry for sid S-1-#-##-21#######-29########-26#########-21##, updated 0 seconds ago

Environment

VMware ESX 9.0.2

Resolution

This is a known issue. Currently there is no workaround.

Please upgrade ESX hosts from 9.0.2 to 9.1.