Xendesktop configuration - profile in failure state - (12) login failed, Error code: 401, Error Response: HTTP/1.1 401

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

After configuring the Xen Desktop probe as per the probe documentation any profile create is in failure

the probe log at level 5 shows the following error

May 19 15:11:40:733 [Data Collector - machine.domain.com, xendesktop] (12) login failed, Failed to access xendesktop with given credentials, Error code: 401, Error Response: HTTP/1.1 401 

WinRM is able to connect remotely so the access is correctly configured.

Environment

Release: CNMSPP99000-8.47-Unified Infrastructure Mgmt-Server Pack-- On Prem
Component:

Cause

The probe is failing to connect to the Xen Desktop Server via Kerberos authentication.

This is configured in the krb5.conf file in the root of the probe.

In this file you have to define both the realm and KDC server.

KDC must be fully qualified and the realm must be in uppercase wherever it is defined.

In this case KDC was only defined as hostname and the realm was defined in lower case.

Resolution

define the krb5.conf file correctly  eg

[libdefaults]

default_realm = ASC-FORWARDINC.COM

default_tkt_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC

default_tgs_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC

udp_preference_limit = 1

[realms]

ASC-FORWARDINC.COM = {

kdc = asc-ad.ASC-FORWARDINC.COM

}    

[domain_realms]

.asc-forwardinc.com = ASC-FORWARDINC.COM 

 

asc-forwardinc.com = ASC-FORWARDINC.COM