VMware sync

Any help with documentation and confirmation on the the permissions would be gratefully received.

Thanks

Hi iaing80,

We sadly do not have documentation ourselves on the proper way to configure permissions for the VMware sync entry. However by looking at the system, it seems the same permissions that are used for the user interface are the ones that are used for the API. So in the case of syncing, as long as the service account has the permissions necessary to see the virtual machines it will be able to perform the sync.

I think the read-only role should be sufficient, we'll have to see but you can add the permission at whichever level you need with the read-only role and propagate it to child objects.

If you require more assistance I can try to take some screenshots and such.

Best regards,

Thanks will try a service account with read only and see if this works.

Did you ever have any luck getting this to work. When I did a read-only account for the sync it fetched the machines but never created any entries for me?

How did it fetch machine if it did not create entries?
I have all my syncs set with a read only account and point to a template VMRC console.

Happy to share my settings tomorrow.

How did it fetch machine if it did not create entries?
I have all my syncs set with a read only account and point to a template VMRC console.

Happy to share my settings tomorrow.

@Iain
I'd love to know that myself. All I see is "fetching machine in the status bar, like it is startiing to work and as soon as it stops fetching machine it never enumerates them or creates the entries for them. I have my sync setup with template VMRC Console as well. Would love to see your settings.

Apolgies, got side tracked today!
Have set a reminder for Monday when I log on to grab screen shots.

Try the log view and see if it spits out any errors.

Apolgies, got side tracked today!
Have set a reminder for Monday when I log on to grab screen shots.

Try the log view and see if it spits out any errors.

@Iain
Thanks!

I finally found some useful entries in the Application Logs, that it was failing to login to the vcenter. I logged into the vcenter manually with the account and it worked fine. I noticed my password was 36 characters and was wondering if that was too long for RDM to handle, and it still failed to login. I had my username, domain, password as separate lines in the Sync config. I changed it so it was domain\user and the password separately. This connected and ran for a much longer time and gave me some errors I'm not sure how to decode. Although I just looked and added the entries this way.

Sorry for the delay!

So general is det up like so:


Fields set to..


Here I set the destination for folder for the consoles to appear in RDM and the template to use.
I also have a filter by group but you may or may not require that.


On my advanced settings I run it in silent mode as I have the sync set to auto. When it run it won't let me change vault till it completes but that's not a big issues for me.



I have replicated this setup across numerous vaults and vCenters.

Sorry for the delay!

So general is det up like so:


Fields set to..


Here I set the destination for folder for the consoles to appear in RDM and the template to use.
I also have a filter by group but you may or may not require that.


On my advanced settings I run it in silent mode as I have the sync set to auto. When it run it won't let me change vault till it completes but that's not a big issues for me.



I have replicated this setup across numerous vaults and vCenters.

@Iain
I actually figured it out over the weekend. In the username field I was putting username, domain, and password all separately I changed it to domain\username no domain and the password. And it suddenly started working.

Thanks for your help!

Matt