Hello Community,
we upgraded vCenter and the ESXis from 5.1 to 5.5 successfully.
We are using Native Active Directory user authentication and we used to have just our Domain Users group added to a custom roles group and it worked fine.
After the upgrade users from Domain Users group cannot authenticate anymore. We are getting an error in vSphere Client: "You do not have permission to login to the server: <VC server>"
Now when we delete the Domain Users group and add users separately into the same custom role, then the authentication succeeds.
Did anybody have same issues? Has something changed in the architecture of SSO to authenticate users against AD? What is the reason why we cannot use AD domain groups for authentication?
Thank you very much for your help!