2022-06-23T08:32:02 INFO Vdt: Today: Thursday, June 23 08:32:02 Version: 1.1.4 Log Level: INFO
2022-06-23T08:32:10 INFO Vdt: Running __vc_info_auth.py
2022-06-23T08:32:10 INFO Vdt:
________________________
VCENTER BASIC INFO
2022-06-23T08:32:10 INFO Vdt:
BASIC:
Current Time: 2022-06-23 08:32:10.347405
vCenter Uptime: up 4 days
vCenter Load Average: 0.48, 0.73, 0.67
Number of CPUs: 4
Total Memory: 13.68
vCenter Hostname: sa-vcsa-01.vclass.local
vCenter PNID: sa-vcsa-01.vclass.local
vCenter IP Address: 172.20.10.94
Proxy Configured: "no"
NTP Servers: 172.20.10.10
vCenter Node Type: vCenter with Embedded PSC
vCenter Version: 7.0.0.10100 - 15952498
DETAILS:
vCenter SSO Domain: vsphere.local
vCenter AD Domain: No DOMAIN
Number of ESXi Hosts: 5
Number of Virtual Machines: 12
Number of Clusters: 2
Disabled Plugins: None
2022-06-23T08:32:10 INFO Vdt: Running _vc_dns.sh
2022-06-23T08:32:10 INFO Vdt:
__________________
VC DNS CHECK
2022-06-23T08:32:10 INFO Vdt:
NOTE: If the script hangs here, it means none of the DNS servers are responding.
If this is the case, You should CTRL+C and investigate.
Nameservers
172.20.10.10
Entries in /etc/hosts
127.0.0.1 sa-vcsa-01.vclass.local sa-vcsa-01 localhost
::1 sa-vcsa-01.vclass.local sa-vcsa-01 localhost ipv6-localhost ipv6-loopback
Non-standard entries in /etc/hosts
[PASS] None
Basic Port Testing
[PASS] Port TCP 53 open to nameserver 172.20.10.10
Nameserver Queries
172.20.10.10
[PASS] DNS with UDP - resolved sa-vcsa-01.vclass.local to 172.20.10.94
[PASS] Reverse DNS - resolved 172.20.10.94 to sa-vcsa-01.vclass.local
[PASS] DNS with TCP - resolved sa-vcsa-01.vclass.local to 172.20.10.94
Commands used:
dig +short <fqdn> <nameserver>
dig +noall +answer -x <ip> <namserver>
dig +short +tcp <fqdn> <nameserver>
RESULT: [PASS]
2022-06-23T08:32:10 INFO Vdt: Running lsreport.py
2022-06-23T08:32:10 INFO Vdt:
__________________________
Lookup Service Check
2022-06-23T08:32:11 INFO _svc_log: Get services status, svcnames=['vmdird']
2022-06-23T08:32:16 INFO live_checkCerts: Checking services for trust mismatches...
2022-06-23T08:32:16 INFO Vdt:
Please remember to check if a node shows up in more than one SSO site.
If a node exists in more than one SSO site, you will need to run
lsdoctor.py -r option 2 (https://kb.vmware.com/s/article/80469)
MACHINE ID CHECK
[PASS] Machine ID matches vpxd solution user in vpxd.cfg
REGISTRATION CHECK
SSO Site: default-site
[PASS] Node: sa-vcsa-01.vclass.local (VC 7.0 or CGW)
SSO Site: default-first-site
[PASS] Node: sb-vcsa-01.vclass.local (VC 7.0 or CGW)
2022-06-23T08:32:16 INFO Vdt: Running vc_ad_check.py
2022-06-23T08:32:16 INFO Vdt:
_________________
VC AD CHECK
2022-06-23T08:32:16 INFO _svc_log: Get services status, svcnames=['lwsmd']
2022-06-23T08:32:17 INFO Vdt:
Domain Report:
No domain(s) detected
Domain Exclusion List:
None
DC Exclusion List:
None
2022-06-23T08:32:17 INFO Vdt: Running vc_auth_cert_check.py
2022-06-23T08:32:17 INFO Vdt:
__________________________
VC CERTIFICATE CHECK
2022-06-23T08:32:17 INFO _svc_log: Get services status, svcnames=['vmafdd']
2022-06-23T08:32:18 INFO checkCerts: Found vpxd-extension.
2022-06-23T08:32:19 INFO Vdt:
[PASS] ESXi Certificate Management Mode: vmca
Checking MACHINE_SSL_CERT
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
Checking Other Certificate Stores
MACHINE
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
VSPHERE-WEBCLIENT
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
VPXD
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
VPXD-EXTENSION
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[PASS] Check extended key usage
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
Checking VC Extension Thumbprints
[PASS] com.vmware.vim.eam Thumbprint Check
[PASS] com.vmware.rbd Thumbprint Check
[INFO] com.vmware.imagebuilder Thumbprint Check
com.vmware.imagebuilder not found in registered extensions (not in use).
HVC
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
DATA-ENCIPHERMENT
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
[INFO] Certificate SAN check
DETAILS: SAN contains hostname but not IP.
SMS
[PASS] Supported Signature Algorithm
[PASS] Certificate expiration check
WCP
[PASS] Supported Signature Algorithm
[PASS] Certificate trust check
[PASS] Certificate expiration check
Checking TRUSTED_ROOTS certificates
Alias: 3964772b4716f66a348c1ac63e8f8d6b766097eb
[PASS] Supported Signature Algorithm
[PASS] Certificate is self-signed
[PASS] Certificate expiration check
[PASS] Certificate is a CA
Alias: 178fe5d4ec166ae75d416955d098b645491bdcd1
[PASS] Supported Signature Algorithm
[PASS] Certificate is self-signed
[PASS] Certificate expiration check
[PASS] Certificate is a CA
Checking local LDAP cert
VMDIR CERT
[PASS] Certificate expiration check
Checking STS Certs
[PASS] Certificate expiration check
2022-06-23T08:32:19 INFO Vdt: Running vc_auth_vmdir_check.py
2022-06-23T08:32:19 INFO Vdt:
_________________
VMdir Check
2022-06-23T08:32:19 INFO _svc_log: Get services status, svcnames=['vmdird']
2022-06-23T08:32:19 INFO Vdt:
[INFO] VMdir database size: 30.29MB
[PASS] VMdir Status Check
Details:
Partner: sb-vcsa-01.vclass.local
Host available: Yes
Status available: Yes
My last change number: 7848
Partner has seen my change number: 7848
Partner is 0 changes behind.
[PASS] VMdir State Check
[PASS] VMdir Arguments Check
2022-06-23T08:32:19 INFO Vdt: Running vc_corefile_check.py
2022-06-23T08:32:19 INFO Vdt:
_____________________
CORE FILE CHECK
2022-06-23T08:32:20 INFO Vdt:
[PASS] Number of core files: 0
[PASS] Number of hprof files: 0
2022-06-23T08:32:20 INFO Vdt: Running vc_db_check.py
2022-06-23T08:32:20 INFO Vdt:
______________________________
vCenter PostgresDB Check
2022-06-23T08:32:20 INFO _svc_log: Get services status, svcnames=['vmware-vpostgres']
2022-06-23T08:32:21 INFO Vdt:
Top 10 Largest Tables:
tablename | size
---------------------+---------
vpx_event_arg_27 | 17 MB
vpx_event_arg_29 | 8688 kB
vpx_event_arg_28 | 8616 kB
vpx_event_arg_26 | 8000 kB
vpx_event_27 | 4888 kB
vpx_event_arg_30 | 3968 kB
vpx_event_28 | 3584 kB
vpx_event_29 | 3536 kB
vpx_event_arg_f1_27 | 3160 kB
pk_vpx_event_arg_27 | 2520 kB
Total Postgres Size:
100M /storage/db/vpostgres/
160M /storage/seat/vpostgres/
232M Interpreted by vPostgres
2022-06-23T08:32:21 INFO Vdt: Running vc_disk_space.py
2022-06-23T08:32:21 INFO Vdt:
________________
DISK CHECK
2022-06-23T08:32:21 INFO Vdt:
[PASS] DISK CAPACITY
[PASS] INODE USAGE
RESULT: [PASS]
Please see KB: https://kb.vmware.com/s/article/1003564
2022-06-23T08:32:21 INFO Vdt: Running vc_ntp.sh
2022-06-23T08:32:21 INFO Vdt:
__________________
VC NTP CHECK
2022-06-23T08:32:21 INFO Vdt:
[PASS] NTP service is running
NTP Server Check
[PASS] 172.20.10.10
NTP Status Check
+-----------------------------------LEGEND-----------------------------------+
| remote: NTP peer server |
| refid: server that this peer gets its time from |
| when: number of seconds passed since last response |
| poll: poll interval in seconds |
| delay: round-trip delay to the peer in milliseconds |
| offset: time difference between the server and client in milliseconds |
+-----------------------------------PREFIX-----------------------------------+
| * Synchronized to this peer |
| # Almost synchronized to this peer |
| + Peer selected for possible synchronization |
| – Peer is a candidate for selection |
| ~ Peer is statically configured |
+----------------------------------------------------------------------------+
remote refid st t when poll reach delay offset jitter
==============================================================================
172.20.10.10 .LOCL. 1 u 63 64 377 0.891 -4502.8 3.143
RESULT: [PASS]
2022-06-23T08:32:21 INFO Vdt: Running vc_ports.py
2022-06-23T08:32:21 INFO Vdt:
________________________
vCenter Port Check
2022-06-23T08:32:22 INFO Vdt:
Checking ports: 443, 389, 2012, 2020
For port information, please see KB: https://kb.vmware.com/s/article/52963
[PASS] Port check for host sa-vcsa-01.vclass.local
2022-06-23T08:32:22 INFO Vdt: Running vc_root_check.py
2022-06-23T08:32:22 INFO Vdt:
________________________
Root Account Check
2022-06-23T08:32:23 INFO Vdt:
[PASS] Root password never expires
2022-06-23T08:32:23 INFO Vdt: Running vc_services.py
2022-06-23T08:32:23 INFO Vdt:
_______________________
VC SERVICES CHECK
2022-06-23T08:32:23 INFO _svc_log: Get services status, svcnames=None
2022-06-23T08:32:26 INFO Vdt:
Printing only services that are stopped and should be started.
KB: https://kb.vmware.com/s/article/2109887
RESULT: [PASS]
2022-06-23T08:32:26 INFO Vdt: Running vc_syslog_check.py
2022-06-23T08:32:26 INFO Vdt:
__________________
Syslog Check
2022-06-23T08:32:26 INFO Vdt:
Remote Syslog config: @172.20.10.171:514
[PASS] DNS lookup for 172.20.10.171
We've detected you have a remote syslog server configured.
Please search your remote syslog server for this string to
validate syslog is working correctly:
vdt-2022-06-23-083226
[FAIL] Local Syslog Functional Check
The syslog daemon is not writing to the logs it manages:
/var/log/vmware/messages, /var/log/vmdird/vmdird-syslog.log, etc.
Please see https://kb.vmware.com/s/article/81829
2022-06-23T08:32:26 INFO Vdt: Running vc_vcha_check_auth.py
2022-06-23T08:32:26 INFO Vdt:
________________
VCHA CHECK
2022-06-23T08:32:26 INFO _svc_log: Get services status, svcnames=['vmware-vcha']
2022-06-23T08:32:26 INFO Vdt:
[INFO] VCHA is not enabled.
