vCAC 6.0.1 "Unable to create a vCO endpoint of type VC. Reason:"

[bugblatterbeast]

Hello again forum!

Just trying to get my head around vCO with vCAC and I was adding the vCenter and AD endpoints from Home > Administration > Advanced Services > Endpoints (as per Kendricks blog: http://www.kendrickcoleman.com/index.php/Tech-Blog/how-to-install-vcloud-automation-center-vcac-60-p...).

And the process fails with "Unable to create a vCO endpoint of type VC. Reason:".  The /var/lib/vcac/server/logs/catalina.out gives a bit more info:-

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - SAML assertion attributes successfully parsed. Got issueInstant: Tue May 06 14:45:28 BST 2014

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Conditions parsed successfully. Got startTime: Tue May 06 14:45:28 BST 2014 expirationTime: Thu J                                                                                  un 05 14:45:28 BST 2014

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - SubjectNameId [value=superadmin@dbtest.local, format=http://schemas.xmlsoap.org/claims/UPN] succe                                                                                  ssfully extracted from the token

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Got confirmation type: HOLDER_OF_KEY

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - IssuerNameId [value=https://lab-id2.dbtest.local:7444/websso/SAML2/Metadata/vsphere.local, format                                                                                  =urn:oasis:names:tc:SAML:2.0:nameid-format:entity] successfully extracted from the token

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Groups successfully extracted from token

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - isSolution attribute parsed successfully from [false] to: false

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Attribute statements successfully parsed

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Token fields are successfully populated

INFO : com.vmware.identity.token.impl.SamlTokenImpl - SAML token for SubjectNameId [value=superadmin@dbtest.local, format=http://schemas.xmlsoap.org/cl                                                                                  aims/UPN] successfully parsed from XML

DEBUG: com.vmware.identity.token.impl.X509TrustChainKeySelector - Trusted path found: <OU=ldu-e145db21-9612-4bbe-9195-5ec2eb98ddc8,C=US,CN=ssoserverSig                                                                                  n\,dc\=vsphere\,dc\=local>

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - SAML token signature is valid status: true

DEBUG: com.vmware.identity.token.impl.SamlTokenImpl - Token is successfully validated

ERROR: com.vmware.vcac.platform.service.rest.resolver.ApplicationExceptionHandler - [Error code: 85023 ] - [Error Msg: 85023-Unable to create a vCO endpoint of type VC. Reason: ]

[Error code: 85023 ] - [Error Msg: 85023-Unable to create a vCO endpoint of type VC. Reason: ]

        at com.vmware.vcac.designer.service.impl.EndpointManagementWorkflowServiceImpl.executeConfigurationWorkflow(EndpointManagementWorkflowServiceImpl.java:122)

        at com.vmware.vcac.designer.service.controller.EndpointManagementController.create(EndpointManagementController.java:143)

        at com.vmware.vcac.designer.service.controller.EndpointManagementController$$FastClassByCGLIB$$9463c27c.invoke(<generated>)

        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)

        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:698)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)

        at org.springframework.security.access.intercept.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:64)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)

        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:631)

        at com.vmware.vcac.designer.service.controller.EndpointManagementController$$EnhancerByCGLIB$$c411c6db.create(<generated>)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

        at java.lang.reflect.Method.invoke(Unknown Source)

        at org.springframework.web.method.support.InvocableHandlerMethod.invoke(InvocableHandlerMethod.java:219)

        at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:132)

        at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:104)

        at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandleMethod(RequestMappingHandlerAdapter.java:745)

        at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:686)

        at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:80)

        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:925)

        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:856)

        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:936)

        at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:838)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)

        at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:812)

        at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:330)

        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:118)

        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:84)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:113)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:150)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at com.vmware.vcac.authentication.http.spring.SamlTokenAuthenticationFilter.doFilter(SamlTokenAuthenticationFilter.java:83)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at com.vmware.vcac.authentication.http.tenancy.TenancyContextFilter.doFilterWithTenancyContext(TenancyContextFilter.java:59)

        at com.vmware.vcac.authentication.http.tenancy.TenancyContextFilter.doFilter(TenancyContextFilter.java:47)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:50)

        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)

        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)

        at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)

        at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)

        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)

        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)

        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)

        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)

        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)

        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:936)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)

        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200)

        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)

        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

        at java.lang.Thread.run(Unknown Source)

DNS resolution all checks out, all users have the correct permissions etc.  Any ideas would be much appreciated.

Danny

[bugblatterbeast]

More info:-

I have gone into Home > Administration > Advanced Services > Server Configuration (I am using the default Orchestrator Server) and when i run "Test Connection" it comes back with "Successfully connected to the Orchestrator server".

Danny

[bugblatterbeast]

Yet more infor.......vCO log (/var/lib/vco/app-server/logs/catalina.out):-

2014-05-06 15:53:20.325+0100 [http-bio-0.0.0.0-8281-exec-3] INFO  {} [SecurityTokenServiceImpl] Is token valid confimation result: true

2014-05-06 15:53:20.331+0100 [http-bio-0.0.0.0-8281-exec-3] INFO  {} [Execution] Executing workflow 'Add a vCenter Server instance'

2014-05-06 15:53:20.363+0100 [org.springframework.jms.listener.DefaultMessageListenerContainer#0-1] INFO  {} [Execution] Invoking workflow handler.ff80808145c37a8c0145d2065053001a

2014-05-06 15:53:20.445+0100 [http-bio-0.0.0.0-8281-exec-3] WARN  {} [WorkflowServiceImpl] Workflow execution stack item display name can not be resolved for item __item-undefined__. Workflow execution stack  [__item-undefined__], Item name stack []

2014-05-06 15:53:20.560+0100 [http-bio-0.0.0.0-8281-exec-10] WARN  {} [WorkflowServiceImpl] Workflow execution stack item display name can not be resolved for item __item-undefined__. Workflow execution stack  [__item-undefined__], Item name stack []

2014-05-06 15:53:21.384+0100 [WorkflowExecutorPool-Thread-7] WARN  {cafe-d138861d-bf96-4f6e-bec5-2653da306779@vsphere.local:Add a vCenter Server instance:196c181c-2d99-4e4e-902e-b8fd72a13dfa:ff80808145c37a8c0145d2065053001a} [WorkflowHandler] Error in execution of workflow 'Add a vCenter Server instance for wfExecution[ff80808145c37a8c0145d2065053001a]

java.lang.NoClassDefFoundError: Could not initialize class ch.dunes.scripting.server.script.MainScriptingObject

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.init(WorkflowHandler.java:283)

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.doExecute(WorkflowHandler.java:307)

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.run(WorkflowHandler.java:227)

        at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

        at java.util.concurrent.FutureTask.run(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

        at java.lang.Thread.run(Unknown Source)

2014-05-06 15:53:21.454+0100 [WorkflowExecutorPool-Thread-7] WARN  {cafe-d138861d-bf96-4f6e-bec5-2653da306779@vsphere.local:Add a vCenter Server instance:196c181c-2d99-4e4e-902e-b8fd72a13dfa:ff80808145c37a8c0145d2065053001a} [WorkflowHandler] Unable to Clean Scripting context for wfExecution[ff80808145c37a8c0145d2065053001a]

java.lang.NullPointerException

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.end(WorkflowHandler.java:1286)

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.doExecute(WorkflowHandler.java:354)

        at ch.dunes.workflow.engine.mbean.helper.WorkflowHandler.run(WorkflowHandler.java:227)

        at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)

        at java.util.concurrent.FutureTask.run(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

        at java.lang.Thread.run(Unknown Source)

2014-05-06 15:53:25.681+0100 [http-bio-0.0.0.0-8281-exec-6] WARN  {} [WorkflowServiceImpl] Workflow execution stack item display name can not be resolved for item __item-undefined__. Workflow execution stack  [__item-undefined__], Item name stack []

[GTO455]

I received the same error adding the vCenter endpoint. Make sure you use the sso account of the vCenter server (administrator@vsphere.local) for the username in the connection properties field. Also, although optional, I added the http port information as well.

[RockyH]

You can try to add vco endpoint with following.

Name: vCAC-appliance FQDN

Address: https:// vCAC-appliance FQDN:8281/vco

Credential : ID: administrator@vsphere.local  PW: you must know

It works for me.

Regards,

Rocky

[zebduin]

Make sure the SSL Trusts have been added for the vCAC VA and IaaS servers: Network-> SSL Trusts in the vCO Configuration menu

[MattG]

Did you ever get this resolved?  I am getting the same error when trying to add AD or VC endpoints.

-MattG

[bugblatterbeast]

I should really have answered this when i fixed it originally, unfortunately I cannot remember exactly what I did .  What i can say is that vCO endpoint config can be a bit picky and here is my current setup, which is working.

• Endpoint configured in administrator@vsphere.local view : Administration > Advanced Services > Server Configuration
  • switched from using the "Use the default Orchestrator server." option to the "Use an external Orchestrator server." even though it is the embedded one
  • Name : name of vcac appliance
  • Host : fqdn of vcac appliance
  • Port : 8281
  • Authentication : Single Sign-On
• Endpoint configured in Fabric Administrator view : Infrastructure > Endpoint
  • Address set to https://vcac-appliance-fqdn:8281/vco
  • Custom property setup - VMware.VCenterOrchestrator.Priority : 1

I also had to fiddle around with the SSO configuration of the vCO by running the "service vco-configurator start" command on the vCAC appliance and then connecting to the configurator via https://<you vcac appliance>:8283/) and login.  Default credentials are vmware / vmware.  I then went to the Authentication tab to test the login and if it doesnt work then unregister the re-register the orchestrator with SSO (i'm using the ID appliance rather than vCenter's SSO).

You then need to make sure you have vCO registered against vCAC (this page explains nicely how to do this VCAC 6 Plugin for vCO &amp;#8211; Adding a vCAC Host for IAAS | VMtoCloud.com)

Now I'm not saying you need to do all these things but its helpful to check out each one to see if it needs looking at.