Thrown if the guest agent is too old to support the operation. Name to authenticate guest operation requests. The subject name (when present) corresponds to Specifies the subject name for authentication. Server uses this certificate to authenticate guest X.509 certificate from the VMware SSO Server, If mapCert isįalse, the request must specify the username. To specify the guest account username in the Guest operation requests that use that alias do not have Indicates whether the certificate associated with theĪlias should be mapped. Username for the guest account on the virtual machine. ![]() These credentials must satisfyįor a guest account on the specified virtual machine. The guest authentication data for this operation. Virtual machine to perform the operation on. Of GuestAuthentication, but must be valid for the In order to add an alias to the guest, you must supplyĪn existing valid credential. This will add the given VMware SSO Server's certificate and a To authenticate guest operations requests. When an alias has a mapped credential, requests using that alias do notĪddGuestAlias, ListGuestAliases, ListGuestMappedAliases, RemoveGuestAlias, RemoveGuestAliasB圜ertĭefines an alias for a guest acount in a virtual machine.Īfter the alias is defined, the ESXi Server will use the alias To an alias by setting mapCert to "true" in the call to the You can define multiple aliases for a guest account. See VMware Single Sign-On Programming Guide. That corresponds to one of the defined aliases.Īfter defining one or more guest aliases, you can specifyĪuth parameter to guest operation methods:įor information about obtaining a SAML token from a VMware SSO Server, That uses SAML token authentication SAMLTokenAuthentication must specify If one or more aliases are defined for a virtual machine, any guest Standard authentication using the credentials associated with a guest If there are no aliases defined for a virtual machine, the ESXi Server The aliasInfo parameter identifies the SAML token subject.The base64Cert parameter specifies the X.509 certificate. ![]() The username parameter identifies the guest account.The association between a guest user account, certificate, and SAML token subject. To create a guest alias, use the AddGuestAlias method. In the context of the user account on the virtual machine. If the credentials in a SAML token match anįor a virtual machine, the ESXi Server guest components grant In SAML tokens that are provided by the VMware SSO Server. The vSphere account is represented byĬredentials consisting of an X.509 certificate and a subject name. The GuestAliasManager provides methodsĪ guest alias defines an association between a guest user account on a virtualĪnd an external vSphere user account. The GuestAliasManager supports single sign-on for virtual machine access GuestAliasManager(vim.vm.guest.AliasManager) Property of GuestOperationsManager See also GuestAliases, GuestAuthAliasInfo, GuestAuthentication, GuestAuthSubject, GuestMappedAliases, VirtualMachine Since vSphere API 6.0
0 Comments
Leave a Reply. |