Xendesktop configuration - profile in failure state

Document ID : KB000007029
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

After configuring the Xen Desktop probe as per the probe documentation any profile create is in failure

xen.png

the probe log at level 5 shows the following error

May 19 15:11:40:733 [Data Collector - machine.domain.com, xendesktop] (12) login failed, Failed to access xendesktop with given credentials, Error code: 401, Error Response: HTTP/1.1 401 

WinRM is able to connect remotely so the access is correctly configured.

Cause:

The probe is failing to connect to the Xen Desktop Server via Kerberos authentication.

This is configured in the krb5.conf file in the root of the probe.

In this file you have to define both the realm and KDC server.

KDC must be fully qualified and the realm must be in uppercase wherever it is defined.

In this case KDC was only defined as hostname and the realm was defined in lower case.

Resolution:

define the krb5.conf file correctly  eg

[libdefaults]

default_realm = ASC-FORWARDINC.COM

default_tkt_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC

default_tgs_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC

udp_preference_limit = 1

[realms]

ASC-FORWARDINC.COM = {

kdc = asc-ad.ASC-FORWARDINC.COM

}    

[domain_realms]

.asc-forwardinc.com = ASC-FORWARDINC.COM 

 

asc-forwardinc.com = ASC-FORWARDINC.COM