Hello,
A little bit of intro:
1. VC5.1, SSO, Inventory and Web Client installed on a single VM (clean installation).
2. MS SQL is installed as a separate VM
3. During installation of SSO an AD connector was successfully created
4. During VC installation "DOMAIN\VM Admins" group was assigned as a "admin" group.
5. "DOMAIN\VM Admins" group is listed as assigned "Administrator" privileges for "This object and its children" in VCenter -> Host & Clusters > Manage
> Permissions.
6. AD account which is a part of "DOMAIN\VM Admins" can successfully login to Web client and to GUI client
2 problem scenarios:
1. a) create a simple user,
b) add it to "DOMAIN\VM Admins"
=> user CAN login to web client ONCE. After logout any consecutive tries give "Provided credentials are not valid." error
2. a) create a simple user
b) add it as "Administrator" on the same level as "DOMAIN\VM Admins" group is assigned to.
=> Any login attempt gives "Provided credentials are not valid." error
Looks like SSO/Inventory service issue, but fiddling with SSO access administration (adding users to LSAdministrators, __Administrators__ etc groups) doesn't seem to provide any relief.
Any help/suggestion is appreciated.
