Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a machine running ESX v3.5 and the root user is unable to perform tasks like shut down the esx server, create new VM's, manage roles, pretty much everything except for starting and stopping VM's.

How do I (re)set these permissions?

UPDATE: I found this forum post. Am thinking of trying out the process described in the last post in that thread.

share|improve this question
    
on the console or in the VIC? –  Zypher Apr 5 '10 at 20:17
    
At the console root seems to have all the perms it needs, I rebooted the server from there via shutdown. The VIC has almost every option greyed out however. –  user16627 Apr 5 '10 at 20:24

1 Answer 1

Seems like someone removed root's access on the VIC, you're going to need to go into the VIC with a user with Administrator permissions. The click on your host, go to the Permissions tab and change root back to administrator.

I half remember that there is a way to do this on the console, but I'm having trouble finding it right now.


EDIT: Found the console stuff
Ok, yep you can fix this on the console.

You'll need to edit the file /etc/vmware/hostd/authorization.xml from the console.

You should seen something like this:

<ConfigRoot>
  <ACEData id="10">
    <ACEDataEntity>ha-folder-root</ACEDataEntity>
    <ACEDataId>10</ACEDataId>
    <ACEDataIsGroup>false</ACEDataIsGroup>
    <ACEDataPropagate>true</ACEDataPropagate>
    <ACEDataRoleId>-1</ACEDataRoleId>
    <ACEDataUser>root</ACEDataUser>
  </ACEData>
<... SNIP Other USERS ... >
<... SNIP Possible custom roles ...>
</ConfigRoot>

The piece you are going to want to change is the "ACEDataRoleId" (-1 is Administrators)

you might have to restart the hostd service with service mgmt-vmware restart after your changes.

share|improve this answer
    
I believe someone hosed up the permissions, none of the existing users have access to do these tasks from the VIC. :/ –  user16627 Apr 5 '10 at 20:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.