Symptoms
lw-measure tool shows latency to Active Directory nodes is high.Note: lw-measure tool and instructions listed in Using the lw_measure tool to detect latency between vCenter Server and Active Directory domain controllersIf either of the last two numbers are around 300000000 usec (300 seconds), it indicates severe latency in the communication between the vCenter and domain controller.
Purpose
Provide a potential workaround in situations where severe environment latency is present between the vCenter Server and domain controllers.
Cause
SSO uses likewise to contact Active directory environments. The default timeout is set to 5 minutes. In environments where high latency exists between vCenter and Active Directory, reducing the timeout will allow likewise to try other available DCs where less latency exists.
Resolution
To resolve this issue a new value must be added to the registry to control the connection timeout:
Connect to the vCenter Server Appliance with an SSH session and root credentials.Run this command to switch to the bash shell
shell
Run this command to add the registry entry:
/opt/likewise/bin/lwregshell add_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' ConnectTimeout REG_DWORD 5
Run this command to change the EchoInterval to 30 (Minimum supported value):
/opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' EchoInterval 30
Restart the vCenter Server Appliance services by running:
service-control --stop --allservice-control --start --all
To revert the workaround:
Connect to the vCenter Server Appliance with an SSH session and root credentials.Run this command to switch to the bash shell
shell
Run this command to remove the registry entry:
/opt/likewise/bin/lwregshell delete_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' ConnectTimeout
Run this command to change the EchoInterval to 300 (default value):
/opt/likewise/bin/lwregshell set_value '[HKEY_THIS_MACHINE\Services\lwio\Parameters\Drivers\rdr]' EchoInterval 300
Restart the vCenter Server Appliance services by running:
service-control --stop --allservice-control --start --all
