I installed vCenter Web Client on one host and Active Directory(Windows 2008 R2) on another host. I was able to add the identity source successfully without any errors. However, when I log in I get the following exception on the web client:
"The authentication server returned an unexpected error: ns0:RequestFailed: Referral. The error may be caused by a malfunctioning identity source."
The vmware-sts-idmd logs show the follow:
2014-01-30 10:08:07,071 INFO [IdentityManager] Authentication failed for user [administrator@xxx.nn.nn.nn] in tenant [vsphere.local] in [1] milliseconds
2014-01-30 10:08:14,996 INFO [IdentityManager] Authentication succeeded for user [administrator@xxxxxxx] in tenant [vsphere.local] in [18] milliseconds
2014-01-30 10:08:15,161 WARN [LdapErrorChecker] Error received by LDAP client: com.vmware.identity.interop.ldap.WinLdapClientLibrary, error code: 10
2014-01-30 10:08:15,162 ERROR [IdentityManager] Failed to get attributes for principal [administrator@xxxxxxx] in tenant [vsphere.local]
2014-01-30 10:08:15,162 ERROR [ServerUtils] Exception 'com.vmware.identity.interop.ldap.ReferralLdapException: Referral
LDAP error [code: 10]'
com.vmware.identity.interop.ldap.ReferralLdapException: Referral
LDAP error [code: 10]
at com.vmware.identity.interop.ldap.LdapErrorChecker$11.RaiseLdapError(LdapErrorChecker.java:172)
at com.vmware.identity.interop.ldap.LdapErrorChecker.CheckError(LdapErrorChecker.java:826)
at com.vmware.identity.interop.ldap.WinLdapClientLibrary.CheckError(WinLdapClientLibrary.java:758)
at com.vmware.identity.interop.ldap.WinLdapClientLibrary.ldap_search_s(WinLdapClientLibrary.java:433)
at com.vmware.identity.interop.ldap.LdapConnection$3.call(LdapConnection.java:334)
at com.vmware.identity.interop.ldap.LdapConnection$3.call(LdapConnection.java:331)
at com.vmware.identity.interop.ldap.LdapConnection.execute(LdapConnection.java:65)
at com.vmware.identity.interop.ldap.LdapConnection.search(LdapConnection.java:330)
at com.vmware.identity.interop.ldap.LdapConnection.search(LdapConnection.java:299)
at com.vmware.identity.idm.server.provider.ldap.LdapWithAdMappingsProvider.getPrimaryGroupDN(LdapWithAdMappingsProvider.java:395)
at com.vmware.identity.idm.server.provider.ldap.LdapWithAdMappingsProvider.getAttributes(LdapWithAdMappingsProvider.java:270)
at com.vmware.identity.idm.server.IdentityManager.getAttributeValues(IdentityManager.java:2631)
at sun.reflect.GeneratedMethodAccessor31.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at sun.rmi.server.UnicastServerRef.dispatch(Unknown Source)
at sun.rmi.transport.Transport$1.run(Unknown Source)
at sun.rmi.transport.Transport$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Has anyone experienced this type of issue?