Hello,
So I completed the installation of VCAC 6.0.1 ( released 2/13/14) and all of its components in my test lab. I am able to login using administrator@vsphere.local no problem. I wanted to provide my AD "Domain Admins" group rights to the default tenant. I ran the test on connectivity to my AD domain successfully and added in the Domain Admins group to both the infrastructure and tenant administration sections and updated. Upon review of the default tenant settings they all remained ( I have seen issues with the AD administrators you add not saving but removing the 'alias' resolved this issue. When I logout of VCAC and attempt to log back in using one of my domain admin member accounts ( vcadmin@home.local ) it doesnt seem to authenticate. I tried rebooting the identity appliance thinking perhaps it was an AD replication or sync issue but no luck.
I tried created a second tenant and populated it with the same settings except of course the name of the default tenant but also having no luck there either. Included are some screenshots showing the configurations but this is really odd behavior and not sure if it's just because this is such a new release or I am doing something wrong...any suggestions on where to even try and troubleshoot this would be appreciated. I even went so far as to reboot all 3 servers thinking it was a sync delay or something but still same issue
Side note few things I learned the hard way on this install in case folks are running it for the first time
- Dont install .net 4.5.1 on your iaas server. I had to uninstall it and download the 4.5 version included in the vcac appliance install page https://your-vcac-appliance server:5480/installer/
- If your tenant administrators accounts dont save after hitting update try removing the alias name for your domain as it seemed to resolve my issue ( and native AD didnt work at all for me at least)
- Found this great article by Kendrick Coleman which is a step by step guide for a complete install...very through and well presented. Also has links to some useful tools like AD explorer to help with the DN names as well as a PS script to prep your IAAS server which was a lifesaver http://www.kendrickcoleman.com/index.php/Tech-Blog/how-to-install-vcloud-automation-center-vcac-60-part-1-identity-appliance.html