Thank you Alexander,

The case has been opened to the vendor.

I come back if he have correct solution.


Bien à vous

Mr Karim Bourenane

Le mar. 6 août 2019 à 15:10, Alexander Bokovoy <> a écrit :
On ti, 06 elo 2019, Karim Bourenane via FreeIPA-users wrote:
>Hello Rob, All team
>If i undestand well, and for easy and simple modification i can :
>Create a Group + add a user (in normal way) as member + ipa group-mod
>--addattr ..... (by command line) as uniqueMember
>and in vCenter i get the Ldap Group + the Bind user, right ?


vCenter is not supported.

I would really suggest you to raise a case with vCenter vendor to make
them aware you want it to integrate properly with RHEL IdM. With very
limited configuration functionality vCenter exposes, it is not possible
to integrate without emulating its behavior on the server side.  This
emulation requires a lot of development on the server side, as covered
by the wiki page provided by Rob.

From FreeIPA point of view, if vCenter configurability could be
improved, it would help many other LDAP-based products, not just

>In my IPA configuration, i have already the ObjectClass :
>vSphere don't want to authenticate the user.
>Do you have any idea, please ?
>Bien à vous
>Mr Karim Bourenane
>Le lun. 5 août 2019 à 16:59, Rob Crittenden <> a écrit :
>> Karim Bourenane via FreeIPA-users wrote:
>> > Hello All,
>> >
>> > Do someone know i must configure my IPA server + the VCenter VSCA to
>> > authenticate in LDAP ?
>> >
>> > I found several demo, but nothing run.
>> There are known issues with integrating with VCenter 6.x. IPA doesn't
>> provide entryUUID or uniqueMember.
>> A user on IRC is investigating the design at
>> to provide this.
>> rob

>FreeIPA-users mailing list --
>To unsubscribe send an email to
>Fedora Code of Conduct:
>List Guidelines:
>List Archives:

/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland