nerdexam
Broadcom-VMware

2V0-21.23 · Question #54

An administrator is investigating reports of users experiencing difficulties logging into a VMware vCenter instance using LDAP accounts. Which service should the administrator check as part of trouble

The correct answer is C. Identity Management Service. When users report difficulties logging into vCenter with LDAP accounts, the administrator should check the Identity Management Service because it is responsible for managing authentication and external identity sources like LDAP.

Troubleshooting and Repairing

Question

An administrator is investigating reports of users experiencing difficulties logging into a VMware vCenter instance using LDAP accounts. Which service should the administrator check as part of troubleshooting?

Options

  • AvSphere Authentication Proxy Service
  • BLookup Service
  • CIdentity Management Service
  • DVMware Authentication Framework Daemon

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    76% (19)
  • D
    12% (3)

Why each option

When users report difficulties logging into vCenter with LDAP accounts, the administrator should check the Identity Management Service because it is responsible for managing authentication and external identity sources like LDAP.

AvSphere Authentication Proxy Service

The vSphere Authentication Proxy Service is used for smart card authentication for ESXi hosts and is not directly involved in vCenter Server LDAP user logins.

BLookup Service

The Lookup Service helps vCenter Server components find each other by providing service registration and discovery, but it is not directly responsible for authenticating users against LDAP.

CIdentity Management ServiceCorrect

The Identity Management Service, associated with vCenter Server's Single Sign-On (SSO) domain, is responsible for handling all aspects of authentication, including integrating with external identity sources like LDAP. If users cannot log in with LDAP accounts, this service is critical to verify, as it manages the connection to and authentication against the LDAP directory.

DVMware Authentication Framework Daemon

The VMware Authentication Framework Daemon (vmafd) is a core service providing authentication and directory services for vCenter Server appliances, but the Identity Management Service is the higher-level component responsible for LDAP integration.

Concept tested: vCenter SSO Identity Management and LDAP authentication

Source: https://docs.vmware.com/en/VMware-vSphere/8.0/com.vmware.vsphere.authentication.doc/GUID-D81E0E87-D111-4712-BFBB-F92D235F810C.html

Topics

#vCenter Server#LDAP authentication#Troubleshooting#Identity Management Service

Community Discussion

No community discussion yet for this question.

Full 2V0-21.23 Practice