Hello everyone!
I need some troubleshooting for this issue I'm having. Environment is vCenter Server Appliance Version 5.5.0 Build 1588022. The problem is vCenter keeps locking out both my vdp and vcops SSO accounts (vdp@vsphere.local and vcops@vsphere.local). I proceeded logging on vSphere Web Client with SSO Admin account (administrator@vsphere.local) and went to Administration > Single Sign On > Users and Groups and noticed vdp account was locked. Then I unlocked it, but in the sudden of a refresh page, it became locked out again. I changed the password for this account, disabled it, then re-enabled it again. Whenever I unlock, vCenter keeps unlocking it. I tailed my vCenter appliance's /var/log/messages, till I found every second vmdird keeps locking those accounts:
2014-05-05T17:07:18+00:00 vcsa01 vmdird: t@140575374509824: LoginBlocked DN (cn=vcops,cn=users,dc=vsphere,dc=local), error (9239)(Account access blocked)
2014-05-05T17:07:22+00:00 vcsa01 vmdird: t@140575349331712: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:23+00:00 vcsa01 vmdird: t@140575374509824: LoginBlocked DN (cn=vcops,cn=users,dc=vsphere,dc=local), error (9239)(Account access blocked)
2014-05-05T17:07:26+00:00 vcsa01 vmdird: t@140575349331712: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:27+00:00 vcsa01 vmdird: t@140575374509824: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:29+00:00 vcsa01 vmdird: t@140575349331712: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:31+00:00 vcsa01 vmdird: t@140575374509824: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:32+00:00 vcsa01 vmdird: t@140575349331712: LoginBlocked DN (cn=vcops,cn=users,dc=vsphere,dc=local), error (9239)(Account access blocked)
2014-05-05T17:07:35+00:00 vcsa01 vmdird: t@140575349331712: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
2014-05-05T17:07:35+00:00 vcsa01 vmdird: t@140575374509824: Lockout policy check - account lockout. (cn=vdp,cn=users,dc=vsphere,dc=local)
Any tips on this?
Thank you!