Using VCSA 5.5, I use the local accounts created on the VCSA using useradd to log into the vSphere client. Everything ran smooth with a few accounts, but since I added a large number of accounts (about 500), I cannot log anymore in the vSphere client. Even the root account does not work anymore; the only account working is the SSO administrator@vsphere.local).
For example, with account L1-53 that used to work, here are the log lines of vpxd.log
2014-09-06T17:44:06.998Z [7F5E680B0700 info '[SSO]' opID=2B0B420E-00000004-c] [UserDirectorySso] Authenticate(L1-53, "not shown")
2014-09-06T17:44:07.127Z [7F5E680B0700 info '[SSO]' opID=2B0B420E-00000004-c] User L1-53 authenticated successfully.
2014-09-06T17:44:07.127Z [7F5E680B0700 info 'Default' opID=2B0B420E-00000004-c] [Auth]: User L1-53
Now, here are the errors
2014-09-06T17:48:29.302Z [7F5E60F8E700 info '[SSO]' opID=6259D6AB-00000004-67] [UserDirectorySso] Authenticate(L1-53, "not shown")
2014-09-06T17:48:29.396Z [7F5E60F8E700 error '[SSO]' opID=6259D6AB-00000004-67] [UserDirectorySso] AcquireToken exception: N9SsoClient12SsoExceptionE(Unexpected SOAP fault: ns0:RequestFailed; request failed.)
2014-09-06T17:48:29.396Z [7F5E60F8E700 error 'authvpxdUser' opID=6259D6AB-00000004-67] Failed to authenticate user <L1-53>
2014-09-06T17:48:34.405Z [7F5E60F8E700 info 'commonvpxLro' opID=6259D6AB-00000004-67] [VpxLRO] -- FINISH task-internal-13428 -- -- vim.SessionManager.login --
2014-09-06T17:48:34.405Z [7F5E60F8E700 info 'Default' opID=6259D6AB-00000004-67] [VpxLRO] -- ERROR task-internal-13428 -- -- vim.SessionManager.login: vim.fault.InvalidLogin:
--> Result:
--> (vim.fault.InvalidLogin) {
--> dynamicType = <unset>,
--> faultCause = (vmodl.MethodFault) null,
--> msg = "",
--> }
--> Args:
-->
And in vmware-sts-idmd.log, whene everything was OK, I had:
2014-09-06 17:44:07,018 INFO [LinuxNativeAuthDbAdapter] Authenticating user [L1-53]
2014-09-06 17:44:07,030 INFO [IdentityManager] Authentication succeeded for user [L1-53] in tenant [vsphere.local] in [11] milliseconds
2014-09-06 17:44:07,072 INFO [LinuxNativeAuthDbAdapter] Getting local groups for user [L1-53]. Recursive ? [yes]
and now
2014-09-06 17:48:29,376 INFO [LinuxNativeAuthDbAdapter] Getting local groups for user [L1-53]. Recursive ? [yes]
2014-09-06 17:48:29,376 ERROR [IdentityManager] Failed to get attributes for principal [L1-53@localos] in tenant [vsphere.local]
2014-09-06 17:48:29,377 ERROR [ServerUtils] Exception 'com.vmware.identity.interop.NativeCallException: Native platform error [code: -1][-1][]'
com.vmware.identity.interop.NativeCallException: Native platform error [code: -1][-1][]
at com.vmware.identity.interop.ossam.LinuxNativeAuthDbAdapter.checkNativeErrorCode(LinuxNativeAuthDbAdapter.java:389)
at com.vmware.identity.interop.ossam.LinuxNativeAuthDbAdapter.GetLocalUserGroups(LinuxNativeAuthDbAdapter.java:81)
at com.vmware.identity.idm.server.provider.localos.LocalOsIdentityProvider.getAttributes(LocalOsIdentityProvider.java:203)
at com.vmware.identity.idm.server.IdentityManager.getAttributeValues(IdentityManager.java:2631)
at sun.reflect.GeneratedMethodAccessor34.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at sun.rmi.server.UnicastServerRef.dispatch(Unknown Source)
at sun.rmi.transport.Transport$1.run(Unknown Source)
at sun.rmi.transport.Transport$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(Unknown Source)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Any idea? I looked on the net and the KB but did not find any similar case (all problems that look alike seems related to AD, that I don't have and do not intend to use).