2V0-21.23 · Question #54
An administrator is investigating reports of users experiencing difficulties logging into a VMware vCenter instance using LDAP accounts. Which service should the administrator check as part of trouble
The correct answer is C. Identity Management Service. When users report difficulties logging into vCenter with LDAP accounts, the administrator should check the Identity Management Service because it is responsible for managing authentication and external identity sources like LDAP.
Question
An administrator is investigating reports of users experiencing difficulties logging into a VMware vCenter instance using LDAP accounts. Which service should the administrator check as part of troubleshooting?
Options
- AvSphere Authentication Proxy Service
- BLookup Service
- CIdentity Management Service
- DVMware Authentication Framework Daemon
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C76% (19)
- D12% (3)
Why each option
When users report difficulties logging into vCenter with LDAP accounts, the administrator should check the Identity Management Service because it is responsible for managing authentication and external identity sources like LDAP.
The vSphere Authentication Proxy Service is used for smart card authentication for ESXi hosts and is not directly involved in vCenter Server LDAP user logins.
The Lookup Service helps vCenter Server components find each other by providing service registration and discovery, but it is not directly responsible for authenticating users against LDAP.
The Identity Management Service, associated with vCenter Server's Single Sign-On (SSO) domain, is responsible for handling all aspects of authentication, including integrating with external identity sources like LDAP. If users cannot log in with LDAP accounts, this service is critical to verify, as it manages the connection to and authentication against the LDAP directory.
The VMware Authentication Framework Daemon (vmafd) is a core service providing authentication and directory services for vCenter Server appliances, but the Identity Management Service is the higher-level component responsible for LDAP integration.
Concept tested: vCenter SSO Identity Management and LDAP authentication
Source: https://docs.vmware.com/en/VMware-vSphere/8.0/com.vmware.vsphere.authentication.doc/GUID-D81E0E87-D111-4712-BFBB-F92D235F810C.html
Topics
Community Discussion
No community discussion yet for this question.