Home / server / Questions / 839702
Accepted
Joe Morgan
Asked: 2017-03-22 08:58:30 +0800 CST

Setup LDAP services for SSO vCenter

  • 772

Fresh install vCenter server

Server 2008 r2

I installed AD setup a user and when trying to "Add identity source" in vCenter when i hit "test connection" I get an error

"The vCenter Single Sign-on server failed to connect to or failed to authenticate to the service at the specified URL"

My "Add identity source" configuration:

Using "Active Directory as an LDAP server"

Name: domain.local

Base DN for users: cu=users,dc=domain,dc=local

Domain Name: domain.local

Domain alias:

Base DN for groups: cu=users,dc=domain,dc=local

Primary server URL: ldap://ad.domain.local

Secondary server URL:

Username: [email protected]

Password: PASSWORD

I am not sure how to setup LDAP services.

I have installed AD LDS and created an instance, I am not sure if I on the right track with this however when i setup the instance I accepted all the defaults expect:

Yes, create an application directory partition

Partition name: cu=users,dc=domain,dc=local

I have disabled to firewall

Checked that the AD LDS instance is running and I am still getting the error.

Can someone tell me what I am doing wrong?

ldap

1 Answers

  1. Best Answer

    is your domain "domain.local" or "vsphere.local"

    You are trying to authenticate with the domain "domain.local" but using the administrator account for "vsphere.local"

    change you setting for:

    Username: [email protected]

    to

    Username: [email protected]

    See if that doesn't help

    • 10