Searching with the vSphere Client 5.1 or 5.5 fails with the error: Login to the query service failed. Client is not authenticated to VMware Inventory Service
Article ID: 338814
Updated On:
Products
VMware vCenter Server
Issue/Introduction
Symptoms:
- Logging into the vSphere Web Client fails with the error:
Client is not authenticated to VMware Inventory Service. - Searching with the vSphere Client fails with the error:
Login to the query service failed. - The C:\ProgramData\VMware\Infrastructure\Inventory Service\logs\ds.log file, located at , reports an incorrect Single Sign-On URL.
<YYYY-MM-DD><time> WrapperListener_start_runner INFO com.vmware.vim.dataservices.federation.FederationReconfigurator] Federation authentication configuration complete
<YYYY-MM-DD><time> WrapperListener_start_runner WARN com.vmware.vim.dataservices.ssoauthentication.impl.CertificateProviderImpl] Failed to retrieve trusted root certificates. Retrying in 10s com.vmware.vim.dataservices.ssoauthentication.exception.ServiceNotFoundException: Error talking to lookup service
Caused by: com.vmware.vim.vmomi.client.exception.ConnectionException: org.apache.http.conn.HttpHostConnectException: Connection to https://Incorrect_Single_Sign_On_URL:7444 refused
at
com.vmware.vim.vmomi.client.common.impl.ResponseImpl.setError(ResponseImpl.java:224)at com.vmware.vim.vmomi.client.http.impl.HttpExchange.run(HttpExchange.java:131)
at
com.vmware.vim.vmomi.client.http.impl.HttpProtocolBindingImpl.send(HttpProtocolBindingImpl.java:98)
at
com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl$CallExecutor.sendCall(MethodInvocationHandlerImpl.java:533)
at
com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl$CallExecutor.executeCall(MethodInvocationHandlerImpl.java:514)
at
com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.completeCall(MethodInvocationHandlerImpl.java:302)
at
com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.invokeOperation(MethodInvocationHandlerImpl.java:272)
at
com.vmware.vim.vmomi.client.common.impl.MethodInvocationHandlerImpl.invoke(MethodInvocationHandlerImpl.java:169)
at com.sun.proxy.$Proxy32.retrieveServiceContent(Unknown Source)
at
com.vmware.vim.dataservices.ssoauthentication.impl.ServiceLocatorImpl.populateUrls(ServiceLocatorImpl.java:105)
... 95 more
Caused by: org.apache.http.conn.HttpHostConnectException: Connection to https://Incorrect_Single_Sign_On_URL:7444 refused
at
org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:127)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:147)
at
org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:108)
at
org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415)
at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:641)
at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:576)
at com.vmware.vim.vmomi.client.http.impl.HttpExchange.run(HttpExchange.java:111)
... 103 more</time></time>
Environment
VMware vCenter Server 5.5.x
VMware vCenter Server 5.1.x
VMware vCenter Server 5.1.x
Cause
This issue is caused if you have re-pointed the Inventory Service to a Single Sign-On instance on a new machine and some of the configurations may not have been updated.
Resolution
To resolve this issue correct the Single Sign-On URL in the vCenter Server :
- Connect to the vCenter Server through a console or RDP session and log in with administrative rights.
- Open the C:\ProgramData\VMware\ls_url.txt file in a plain text editor.
- Search for incorrect VMware Single Sign-On URL's and replace them with the correct information.
- Repeat Steps 3 and 4 for this file C:\Program Files\VMware\Infrastructure\Inventory Service\lib\server\config\dataservice.properties.
- Click Start > run, type regedit and press Enter.
Note: This procedure modifies the Windows registry. Before making any registry modifications, ensure that you have a current and valid backup of the registry and the virtual machine. For more information on backing up and restoring the registry, see the Microsoft Knowledge Base article 136393. - Navigate to the key HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware Infrastructure\Inventory Service\LookupServiceUrl
- Modify and update the URL to the VMware Single Sign-On server.
- Restart the VMware Inventory service. For more information, see Stopping, starting, or restarting VMware vCenter Server services (1003895).
Additional Information
Feedback
Yes
No
Powered by
