WilliamLam.com

vSphere Web Client Plugin for Custom Attributes

by // 19 Comments

I just learned about a very cool vSphere Web Client Plugin that was developed by a fellow vExpert, Patrick Haefner who shared this during the South Germany VMUG back in February of last year. The custom vSphere Web Client Plugin allows administrators to view Custom Attributes in the vSphere Web Client which is currently not available today. The Custom Attributes vSphere Web Client is hosted on the VMUG site and you will need to register to access the download page found here.

Disclaimer: This plugin is not officially supported by VMware, please use at your own risk.

To install the Custom Attributes plugin, you just need to extract the contents of the zip file and you will should see a directory called haif-customfields-ui. You will need to copy this directory to your vCenter Server which is running the vSphere Web Client. This plugin should work on both vSphere 5.1 and 5.5.

For Windows vCenter Server:

  1. Stop the vSphere Web Client service
  2. Copy haif-customfields-ui to C:\Program Files\VMware\Infrastructure\vSphereWebClient\plugin-packages
  3. Start the vSphere Web Client service

For VCSA (vCenter Server Appliance)

  1. Stop the vSphere Web Client service by running /etc/init.d/vsphere-client stop
  2. Copy haif-customfields-ui to /usr/lib/vmware-vsphere-client/plugin-packages
  3. Start the vSphere Web Client service by running /etc/init.d/vsphere-client start

Once the vSphere Web Client has been started, you can now login and for Virtual Machines or ESXi hosts which have Custom Attributes, you should now see a new portlet displaying the Custom Attributes as seen in the screenshot below.

I think this is a really cool plugin and shows how extensible the vSphere Web Client is by leveraging the vSphere Web Client SDK. With a bit of imagination, you can pretty much build anything! Though today Patrick's plugin only allows you to view the Custom Attributes, perhaps if there is enough requests, he may add the ability to modify Custom Attributes. Awesome work Patrick and thanks for sharing it with the community!

Big thanks to Ruediger M. who works as a VMware SE in Germany for sharing this awesome information. This is definitely a plugin I will be installing in my environments 🙂

Why is there a "No access" vSphere Role?

by // 5 Comments

vSphere's (vCenter Server & ESXi) authorization system includes several pre-canned Roles such as Read-Only, Administrator and Virtual Machine Administrator as an example. One of the roles that has intrigued me for awhile which is the "No access" role. This seems to be a really odd role to have, I mean what would you do with such a role if it does not have access to anything?

In a conversation I had last week with a fellow colleague, the "No access" role made its way into the conversation and I learned that there was a specific use case for this role, however it was unclear what that might have been. This go me interested and I decided to reach out to some folks to see if I can get to the bottom of this and the use case associated with it.

It turns out there are some customers who have some very interesting requirements in which they need to separate out users who have the Administrator role and prevent them from seeing and performing operations on specific vSphere Inventory objects. An example of this would be a vCenter Server with 4 vSphere Clusters where Admin1 can only see the first two Clusters and Admin2 can only see the last two Clusters and both users have the Administrator role.

To accomplish the above example, you can leverage the "No access" role in the following manner. As the "Uber" Administrator, you would assign both Admin1 and Admin2, lets call them Alan and Cormac the Administrator role at the vCenter Server level. This will grant them full access to the entire vSphere Inventory.

Now, to prevent Alan from seeing Cluster 3 & 4, we need to go into the Cluster object and add the "No access" role to both those objects. We do the same for Cormac but for Cluster 1 & 2. If we now login as the user Alan, we will see that only Cluster 1 & 2 are visisble.

If we login with the user Cormac, we can only see Cluster 3 & 4 as expected.

Although this may not be a common request in your environment, I can see some interesting use cases for having such a setup like on-boarding a new junior admin and wanting to provide them Administrative access to particular Clusters and removing the views for others they should not have access to.

I would like to thanks Rupam from our GSS organization for sharing the reasoning behind "No access" as well as a specific use case for the feature.

VMware nested easter egg

by // 10 Comments

It is only fitting that if a VMware Engineer adds a hidden easter egg, that it would of course contain another nested easter egg! For those of you who are not familiar with the vPong easter egg, Raphael Schitz wrote an article about a year ago regarding this little nugget which is when I first learned about this as well.

The easter egg allows you to play a game of old school pong using either VMware Fusion, Workstation, Player and it even works on vSphere. To enable this easter egg, you just need to mount a 0 byte floppy image located on your desktop (not a datastore) to a virtual machine and power it up.

Here is a screenshot of mounting a dummy floppy image which I created using the "touch" command on my Mac OS X system and connecting it to a Fusion VM:

Once you power on the VM, you should now see a game of vPong in the VM console which you can then play against the computer using your mouse.

One would think the easter egg stops there, but nope, there is actually more. If you click into the VM console and type the word "pride" (all lower case), you will see that the black/white vPong game will now change to color! To disable the color, you just need to type the word "pride" again and it will go back to black/white.

I thought this was actually pretty cool and thanks to Regis Duchesne for sharing this tidbit! So the next time you are bored, you can always kill some time with the classic black/white pong or go for the more colorful version 🙂