Skip to main content

VMware Virtual Center Service failed to start due the error “Failed to add LDAP entry”

This post is going to share a resolution for one of the issue which i have faced yesterday. My Virtual center server windows virtual machine was hung  but it was reachable via network with ping. Even RDP it is not accessible. We tried rebooting multiple times. Finally after uninstalling some of the security software, vCenter came up. I tried to start the VMware Virtual center server service but it was failed and throwing an general windows service start failed error. To troubleshoot the Virtual Center Service. You should always to use vpxd.log logfile stored on the below location
vCenter Server 5.x and windows server 2000, 2003: %ALLUSERSPROFILE%\Application Data\VMware\VMware VirtualCenter\Logs\
vCenter Server 5.x and earlier versions on Windows Vista, 7, 2008: C:\ProgramData\VMware\VMware VirtualCenter\Logs\
When i have analyzed the vpxd.log, I found the below error messages in the vpxd.log
 [03852 error 'win32vpxLdap_win32'] [LDAP Client] Failed to add LDAP entry cn=76c0e73g-0bd2-56ba-c706-g449de069520,ou=Instances,dc=virtualcenter,dc=vmware,dc=int: 0×68 (The object already exists.)
 [03852 error 'vpxservicesMoServiceDirectory'] [ServiceDirectory::AddService] Error while adding service-instance entry cn=76c0e73g-0bd2-56ba-c706-g449de069520,ou=Instances,dc=virtualcenter,dc=vmware,dc=int
 [03852 error 'vpxdvpxdMain'] [Vpxd::ServerApp::Init] Init failed: Ldap error
 [03852 error 'Default'] Failed to intialize VMware VirtualCenter. Shutting down..
How to Resolve this Failed to add LDAP entry issue.
This issue may occur due to a stale ADAM database entry. We need delete the stale ADAM entry using the below procedure. It is recommended to take a backup of your ADAM instance data before deleting the Stale ADAM database entry.
1. Login to your vCenter Server using Administrative Credentials
2.Click on Start -> Administrative Tools ->ADSIEdit
3. Right click the ADSiEdit and click on Connect To
4.For the Connection Point, Type the below Distinguished Name or Naming Context
dc=virtualcenter,dc=vmware,dc=int
5. Under Computer, Type the localhost in the below format and click on Ok.
 localhost:389
VCenter_LDAP issue
6. Expand the  OU=Instances, find the CN which is found in your vpxd.log which is CN=76c0e73g-0bd2-56ba-c706-g449de069520
Vcenter_LDAP_2
7. Right click on the above CN  and Select Delete to delete the Stale ADAM database entry.
After deleting the Stale ADAM database entry, I tried starting the VMware virtual center Service, It started like a gem. I found this troubleshooting solution from the VMware KB Article 1029864. That’s it, All up and life is smooth. I hope this is informative for you. Thanks for Reading!!!

Comments

Popular posts from this blog

  Issue with Aria Automation Custom form Multi Value Picker and Data Grid https://knowledge.broadcom.com/external/article?articleNumber=345960 Products VMware Aria Suite Issue/Introduction Symptoms: Getting  error " Expected Type String but was Object ", w hen trying to use Complex Types in MultiValue Picker on the Aria for Automation Custom Form. Environment VMware vRealize Automation 8.x Cause This issue has been identified where the problem appears when a single column Multi Value Picker or Data Grid is used. Resolution This is a known issue. There is a workaround.  Workaround: As a workaround, try adding one empty column in the Multivalue picker without filling the options. So we can add one more column without filling the value which will be hidden(there is a button in the designer page that will hide the column). This way the end user will receive the same view.  

57 Tips Every Admin Should Know

Active Directory 1. To quickly list all the groups in your domain, with members, run this command: dsquery group -limit 0 | dsget group -members –expand 2. To find all users whose accounts are set to have a non-expiring password, run this command: dsquery * domainroot -filter “(&(objectcategory=person)(objectclass=user)(lockoutTime=*))” -limit 0 3. To list all the FSMO role holders in your forest, run this command: netdom query fsmo 4. To refresh group policy settings, run this command: gpupdate 5. To check Active Directory replication on a domain controller, run this command: repadmin /replsummary 6. To force replication from a domain controller without having to go through to Active Directory Sites and Services, run this command: repadmin /syncall 7. To see what server authenticated you (or if you logged on with cached credentials) you can run either of these commands: set l echo %logonserver% 8. To see what account you are logged on as, run this command: ...
  The Guardrails of Automation VMware Cloud Foundation (VCF) 9.0 has redefined private cloud automation. With full-stack automation powered by Ansible and orchestrated through vRealize Orchestrator (vRO), and version-controlled deployments driven by GitOps and CI/CD pipelines, teams can build infrastructure faster than ever. But automation without guardrails is a recipe for risk Enter RBAC and policy enforcement. This third and final installment in our automation series focuses on how to secure and govern multi-tenant environments in VCF 9.0 with role-based access control (RBAC) and layered identity management. VCF’s IAM Foundation VCF 9.x integrates tightly with enterprise identity providers, enabling organizations to define and assign roles using existing Active Directory (AD) groups. With its persona-based access model, administrators can enforce strict boundaries across compute, storage, and networking resources: Personas : Global Admin, Tenant Admin, Contributor, Viewer Projec...