BenFB - yes. That's correct. Wherever 2FA auth happens (UAG or Horizon Connection Server), the RADIUS server (or RSA SecurID server) has the authority to stop the 2FA auth flow by simply sending an Access-Reject (access denied) response. Many RADIUS servers that use a password (LDAP/AD) as the passcode deal with authentication exceptions for exactly this situation.
Verify that this is what is happening here from RADIUS server logs.
Currently we use ShadowProtect, which works with Oracle's virtual box to do that and it works great, especially for physical machines. However, I'm looking for something that works with VMware so snapshots can be saved to another location, and that location brought up to a certain point in time if there is a failure or malware, under VMware. Then they can fire up the other machine to a point of 15 minutes ago or 4 hours ago and continue from there. With ShadowProtect, if the backups have been altered, it will not replicate them. The end game is to have a standby environment that cannot be corrupted. The backups move one way to the backup environment, and are not accepted if they have been altered. We will then replicate off-site in the local area, which we provide as a service now.
Thanks!
Welcome to the Community,
no need to change the boot order. You can configure a boot delay (in milliseconds) in the VM's options. This will allow you to press the "ESC" key to access to Boot-Menu, right after powering on the VM. I usually set the boot delay to 5,000 ms, which usually offers enough time to set the focus on the VM's console, and press the "ESC" key.
André
Hi LucD,
I ran your last bit of code and I was able to get the length and all other fields from a specific datastore, so I guess something isn't working properly with the actual script.
Here is the versions and the output i got from the code
Not sure, but maybe FAQ: Support statement for 512e and 4K Native drives for VMware vSphere and vSAN (2091600) | VMware KB helps!?
André
Im not sure about patching thats a good question, right now im patching manually and rebooting one or two servers at a time. The article you posted is more about fixing your replication issue, and it requires the environment to be completely down then brought up in a specific order. I think these are two different things.
Options are to either use an ISO creator tool, or - if you have another VM - create a new virtual floppy disk on that VM, copy the driver to it, and then use the .flp file with the XP VM.
André
We did some further testing and we are able to consistently reproduce this issue. This only happens when a user has an active PCoIP session and takes over the session on a different device using Blast Extreme. It does not happen when a user has an active Blast Extreme session and takes over the session on a different device using Blast Extreme. When Skype is stuck with a status of "Away" you are able to set other away statuses such as "Be Right Back", "Off Work" and "Appear Away". You have to quit and relaunch Skype for the status to switch back to "Available" which allows the user to set any status.
markbenson Are you my guy for Blast Extreme issues or only for UAG?
Hi
Yes, the USBarb service is running OK - it is listing the devices and presenting them for connection - when the service was not running, there were no devices listed.
I'm pretty confident that the problem is outside the VMs - I've tried Win7 and Linux, VMs imported from earlier versions and freshly created VMs - the same error comes up every time.
I did update the VMtools in the Win7 VM, and the USB camera is a generic camera that doesn't need special drivers. And from the fact that the Linux machine never sees anything change on the USB bus, I'm also pretty confident that the host never lets workstation/player grab the device at all.
I also tried with all the other USB devices internal to the host (Bluetooth, fingerprint reader and webcam) and they all behave the same - 15 seconds after I try connecting, I get the failed to connect message.
But: Problem Worked Around!
I plugged a USB flash drive in (running VM) and it worked vwithout fuss. And as a bonus, I then could bind the camera in to the VM too... As often as I like.
Shut the machine down, remove the USB flash drive, problem returns - cannot bind devices, same error as before.
Put the USB flash drive back in - it all works again.
Remove the USB flash drive - webcam keeps working.
Disconnect then reconnect the webcam from the VM, it won't reconnect, same error as before.
Then insert USB drive - not only does the flash drive appear, so does the webcam!
(The same is true for inserting any USB device, not just USB flash device)
It is like the message from workstation/player is not been heard by the USBarb service until it gets woken up by something changing on the USB hub, whereupon it binds the device to the VM.
Yuk!
Thanks for your thoughts and ideas on this, hopefully it will help someone else in future too...
Please confirm if you see snapshot related .ctk files remaining in the datastore. For example: vmname-000001-ctk.vmdk. in the vmfolder after successful backup or consolidation.
Best Regards,
Deepak Koshal
CNE|CLA|CWMA|VCP4|VCP5|CCAH
For some reason the attachment didn't work so here's a new upload
There are a lot of different ways to approach this depending on your budget and infrastructure. I use SAN to SAN replication, Veeam, and Zerto depending on the use case. SAN to SAN works great for BC and you can use another product for backups. Zerto does support backups, but I have never used it for that. Veeam is very versatile as you can utilize replication or backup copy jobs. I use that a lot in mixed environments where there are VMs and physical servers. Keep a copy of the backups onsite, and also copy them offsite. Pricing is very good if you go through a service provider rather than buying perpetual licenses.
They pulled the logs from the RADIUS server and confirmed that it's responding with Access-Reject after identifying the user has invalid credentials. They are looking into options to instead respond with an Access-Accept so the UAG/Connection Server can handle updating the users expired password.
We've actually been able to inadvertently prove that this works. We have a test account where they are setting the password to expire. If I immediately try to login after they set the password to expired we can get the RADIUS server to respond with a Access-Accept since it's not aware the password is expired yet. Then we are correctly prompted that the password is expired and needs to be updated.
When you run the script, do you get the messages about Datacenter, CLuster, Datastore...?
If a conversion fails using the exact size of hard disks, decrease the size of the disks by at least 1MB. This forces VMware Converter to do a file level copy instead of a block level copy, which can be more successful if there are errors with the volume or if there are file-locking issues.
Make sure atleast 10% free disk space on the source drive.
Reference :
Troubleshooting checklist for VMware Converter (1016330) | VMware KB
If you found this or any other answer helpful, please consider the use of the Helpful to award points.
Best Regards,
Deepak Koshal
CNE|CLA|CWMA|VCP4|VCP5|CCAH
You could try vpshere replicaiton and replicate the virtual machine to a different locaiton. One of the features is point in time snapshots. I've never used that feature but it sounds like it might be something look look at.
If you setup HTTPS Passthrough for traffic - can the LB still create stickiness based on session ID?
Would the session ID be knowable by the LB if the SSL session is terminated at the pool server?
Is there an option or tool within ESXi 6.5 to defrag the hard drive on a VM?
Hello,
I have installed one instance in vmware workstation in my laptop and able to access in office location1 from host system (windows) . When i go location2, i coudn't able to access instance in host system (windows) due to network is different.
so how can i access instance in multiple locations in multiple networks.
Is there anyway to configure ip address to access in multiple networks?
Rgds,
Madhu
Thanks for the responses; I'm not sure I have an answer yet. All the hosts will be down for probably 2 to 3 weeks as we unrack them and move them to a new site. That's obviously past the 60 minute window. I'm sure VSAN will figure out that everything has been down longer than 60 minutes; I'm worried about what will happen then. Will all disks be marked as degraded? Absent? Not marked? I guess not many people do this; because so far it's all just a guess.
Hopefully somebody who has actually done it will chime in, and then we'll all know for sure! In the mean time, I've opened a support case with vmware in hopes they can tell me. If I hear back with a definitive answer I'll let you know.
