Logging in to Horizon View server fails to authenticate the user
search cancel

Logging in to Horizon View server fails to authenticate the user

book

Article ID: 324834

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

This article provides a workaround to overcome the authentication failure when logging in to the Horizon View server using PowerCLI 6.5.

Symptoms:
  • Logging in to Horizon View server using in PowerCLI 6.5 cmdlet (Connect-HVServer ) fails to authenticate the user:
  • You see the error:

    PowerCLI C:\> $HV = Connect-HVServer -Server xyz -Credential (Get-Credential)
    cmdlet Get-Credential at command pipeline position 1
    Supply values for the following parameters:
    Credential
    Connect-HVServer : ExceptionType : VMware.Hv.EntityNotFound
    ErrorMessage : Could not find user or group in AD
    Id : VMware.Hv.UserOrGroupId
    At line:1 char:7
    + $HV = Connect-HVServer -Server xyz -Credential (Get-Credent ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (:) [Connect-HVServer], Exception
    + FullyQualifiedErrorId : System.Exception,VMware.VimAutomation.HorizonView.Commands.Cmdlets.ConnectHVServer


Environment

VMware vSphere PowerCLI 6.0

Resolution

To work around this issue:
  • For built-in administrators:
  1. Add all the build-in administrator as members of one new group in AD.
  2. Add direct interactive privilege to group in view administrator UI by navigating to Admin UI > View Administrator >Administrators.
Alternatively, create new user in AD and setup direct interactive privilege to new AD user in the View administrator UI by navigating to Admin UI > View Administrator > Administrators.
  • If the role assigned to the user already has direct interaction privilege:

    Set the AD group used for authentication to security group type.


Additional Information

AD Group
In AD, there are two group types:
  • Security
  • Distribution
Each AD group will have three types of scopes:
  • Domain local
  • Global
  • Universal
Connection Server support matrix:
Scope\Group Type
Security group type
Distribution group type
universal
Yes
No
global
Yes
No
domain local
*Yes with exception
No

Notes:

  • *Connection Server support security group type with domain local scope, but with few exceptions:

    • Does not support non-security groups or domain local groups from other domains.

    • Does not support domain local security groups if the domain is in mixed mode.

  • Connection Server will not support distribution group type.

  • Connection Server will support global and universal scope with security group type.



Powered by Wolken Software