Category - VMware Cloud Director

I had a customer upgrade their vCloud Director environment from v8.20 to v9.5. The upgrade itself went fine, however some tenants were now unable to login. Interestingly, the affected tenants were authenticating against their own LDAP server over LDAPS. All other tenants were authenticating against the Service Provider managed LDAP server.
For this particular service provider customer and their tenant, the LDAP server was specified using an IP address instead of a FQDN.

With the release of vCloud Director 9.5 I’ve gone ahead and upgraded my test environment from 9.1 (specifically 9.1.0.1) to 9.5.
Straight away I notice in the release notes that having a mix of vCloud Director appliances and Linux servers (with vCD installed) is not supported. There is also no supported migration method to move from Linux servers to the appliance. So, in place upgrade it is!
I won’t go over the entire experience of using the HTML5 UI, only things I’ve noticed that are new in 9.

VMware has released vCloud Director 9.5!
If you go to the My VMware downloads section you won’t find it. You need to change the URL so it has “9_5” on the end:
vCloud Director 9.5 Download
Assuming you have the right entitlements, you’ll be able to start downloading the upgrade bin’s and the OVA.
To find out what’s new, VMware have released a PDF highlighting all the new features: What’s new with vCloud Director 9.

Recently I spent some time configuring vCloud Director metrics and storing them in a Cassandra cluster. If you have ever stepped outside of the default metrics and tried to provide your own via a Groovy file, you may have hit the following error in the cell-management-tool.log log:
Invalid column name **metric** because it conflicts with an existing column If your Groovy file contains the metric listed in the error message and you’ve only listed it once, you’re probably thinking “where on earth is this duplicate coming from?

One of the core pre-requisites for vCloud Availability for vCloud Director 2.0 is CassandraDB. This database service stores replication state and storage information and is used by the HCS (vSphere Replication Cloud Service) appliance.
As part of my strained vCloud Availability deployment I needed to build a simple CassandraDB server. VMware Docs and the vCloud Architecture blog have some great information to get you started:
vCloud Architecture blog - Deploying CassandraDB VMware Docs - vCloud Availability for vCloud Director Installation Guide Symptom I built the CassandraDB server as described in the blog post and Docs pages above, but when I would try to connect to the database using the Cassandra shell (cqlsh {ip-address} 9042) I would get the following error:

Hello again! Today’s adventures drove me a little wild…
Some background first. In my test environment, I have a full vCloud Director v8.10.1 deployment, load balanced with an F5 LTM. The certificates are loaded on the F5 so that traffic is terminated and re-encrypted on it’s way to the vCloud cells. Since deployment, both the http and console FQDNs functioned as expected. This all changed just a few months ago…

While trying to troubleshoot another problem, we tried Refreshing vCloud to vCenter which includes registering/updating the extension. This is when we hit a beauty we’d never seen before:
Alright, calm down. Probably something with the network, right? And if it’s not the network then it’s probably DNS. Right? Oh how I wish that were so.
I dug around in the vCenter MOB and found the vCloud Director extension. As expected it already had a “vCloud Director-1” named extension.

Roughly 2 weeks ago one of our vCloud Director tenants reported an error when attempting to increase a disk on their VM. They were told to contact their cloud administrator (yay). When we tried to perform the increase, we received an error we’d never seen before: “java.lang.NullPointerException”.
Here is what we checked:
Confirm the tenant Org vDC has the appropriate resources available (this was an ‘Allocation’ style vDC). Check the status of vCloud to vCenter connection and perform a vCenter Reconnect followed by a Refresh.

I had a few issues getting vCloud Director and SAML federation playing nicely. By issues, I mean there wasn’t an explicit how-to in VMware’s doco. The big issues were group-based authentication and authenticating against a user’s email address instead of their UPN.
Using the following article from pablovirtualization I was able to get vCloud Director federated to an ADFS SAML endpoint.
https://pablovirtualization.wordpress.com/2015/01/13/vcloud-director-and-microsoft-ad-fs-active-director-federation-service-authentication/
This allowed users to login using their UPN. That’s all well and good until you need users to log into their account using their email address which may differ from their UPN.
Latest Posts
- VCSA 7.0 File-based restore failing at 80%
- Create an Azure Virtual Network Gateway IPSec VPN to PFSense
- Convert a video file to a GIF using a MacOS Automator task
- Homelab - Routing and VLANs with a PFSense VM on a single host
- How to install vRealize Operations Telegraf agent using vRealize Automation and SaltStack Config
Advertisement
Popular Tags
vmware52
vrealize-suite19
how-to17
vsphere16
vcloud-director12
professional-development9
aws8
certificates8
vrealize-orchestrator7
github6
hugo6
lambda6
vcenter6
blog5
s35
homelab4
python4
vrealize-automation4
vrealize-suite-lifecycle-manager4
api3
api-gateway3
automation3
esxi3
javascript3
pfsense3
powercli3
psc3
vcsa3
vrealize-operations-manager3
vrealize-saltstack-config3
azure2
cassandradb2
certification2
dns2
hardware2
microsoft2
packer2
rest2
saltstack2
storage2
swagger2
telegraf2
vcloud-availability2
vcp2
vrealize-log-insight2
vrealize-operations2
active-directory1
adfs1
automator1
blueprints1
bmc1
certificate-authority1
cisco-aci1
clarityui1
cloud-init1
converter1
cpu1
custom-resource1
dell1
docker1
draas1
federation1
firmware1
freebsd1
freenas1
gcp1
ipmi1
ipsec1
json1
macos1
network1
nodejs1
nsx1
opensource1
ova1
postman1
quanta1
route531
saml1
self-hosted1
ubuntu1
upgrade1
utilities1
vcenter-server1
vcloud1
vexpert1
vidm1
virtual-network-gateway1
vmware-identity-manager1
vpn1
vro1
vsan1
vvols1
windows-server1