VMware Cloud Community
DanLeeHawkinsIn
Contributor
Contributor

vCenter 6.7 to 7.0U1d firstboot failure - vSphere Client Solution User error

Scenario - Two vCenters in ELM. First of the two is failing at the very end of the upgrade. To recover I have to log into the hosts directly, kill the new 7.0 machine and restart the 6.7. I've had a support request (sev 2) open on this for a full week now. They have done nothing to help. I've escalated to a manager and haven't been contacted. I just keep hearing that it will take more time to analyze the logs. Maybe they are doing something on the back end but the communication is terrible. I'm at wits end here. I'm hoping someone here has seen this one. Thanks!

 

Full error message is below:

 

Traceback (most recent call last):
File "/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py", line 182, in proxy
return func(*args, **kwargs)
File "/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py", line 521, in create_vsphereclient_role_and_assign_wrapper
ngcObj.create_vsphereclient_role_and_assign()
File "/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py", line 388, in create_vsphereclient_role_and_assign
create_and_assign_vsphere_client_solution_user_role(self.get_firstboot_conf_dir(), self.is_oauth2logon_enabled(), True)
File "/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py", line 60, in create_and_assign_vsphere_client_solution_user_role
create_or_update_vsphereclient_role(ready_privileges_xml_file)
File "/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py", line 90, in create_or_update_vsphereclient_role
solution_user_id,is_group=False)
File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 704, in set_permission
self._authz_service)
File "/usr/lib/vmware/site-packages/cis/cisreglib.py", line 683, in create_access_control
role_ids.append(role_objs_dict[rolename])
KeyError: 'vSphere Client Solution User'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py", line 120, in main
create_vsphereclient_role_and_assign_wrapper(msg, ngcFb)
File "/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py", line 190, in proxy
raise NGCInstallException(localizedString(msgDef, traceback.format_exc()))
NGCInstallException: {
"detail": [
{
"id": "install.ngc.error.internal",
"translatable": "The vSphere Client firstboot returned the following error: %(0)s.",
"args": [
"Traceback (most recent call last):\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 182, in proxy\n return func(*args, **kwargs)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 521, in create_vsphereclient_role_and_assign_wrapper\n ngcObj.create_vsphereclient_role_and_assign()\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 388, in create_vsphereclient_role_and_assign\n create_and_assign_vsphere_client_solution_user_role(self.get_firstboot_conf_dir(), self.is_oauth2logon_enabled(), True)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py\", line 60, in create_and_assign_vsphere_client_solution_user_role\n create_or_update_vsphereclient_role(ready_privileges_xml_file)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py\", line 90, in create_or_update_vsphereclient_role\n solution_user_id,is_group=False)\n File \"/usr/lib/vmware/site-packages/cis/cisreglib.py\", line 704, in set_permission\n self._authz_service)\n File \"/usr/lib/vmware/site-packages/cis/cisreglib.py\", line 683, in create_access_control\n role_ids.append(role_objs_dict[rolename])\nKeyError: 'vSphere Client Solution User'\n"
],
"localized": "The vSphere Client firstboot returned the following error: Traceback (most recent call last):\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 182, in proxy\n return func(*args, **kwargs)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 521, in create_vsphereclient_role_and_assign_wrapper\n ngcObj.create_vsphereclient_role_and_assign()\n File \"/usr/lib/vmware-vsphere-ui/firstboot/vsphere_ui_firstboot.py\", line 388, in create_vsphereclient_role_and_assign\n create_and_assign_vsphere_client_solution_user_role(self.get_firstboot_conf_dir(), self.is_oauth2logon_enabled(), True)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py\", line 60, in create_and_assign_vsphere_client_solution_user_role\n create_or_update_vsphereclient_role(ready_privileges_xml_file)\n File \"/usr/lib/vmware-vsphere-ui/firstboot/solution_user_permission_utils.py\", line 90, in create_or_update_vsphereclient_role\n solution_user_id,is_group=False)\n File \"/usr/lib/vmware/site-packages/cis/cisreglib.py\", line 704, in set_permission\n self._authz_service)\n File \"/usr/lib/vmware/site-packages/cis/cisreglib.py\", line 683, in create_access_control\n role_ids.append(role_objs_dict[rolename])\nKeyError: 'vSphere Client Solution User'\n."
}
],
"componentKey": null,
"problemId": null,
"resolution": null
}
2021-02-16T17:24:54.488Z vSphere Client firstboot unable to complete action: firstboot

Reply
0 Kudos
2 Replies
DevleenKour
VMware Employee
VMware Employee

Hello Dan

I see you have raised the SR with support, we connected over call and we were successfully able to upgrade the VC using the following steps:

  • We updated the role of an existing custom_role with role_id 1003 to “vSphere Client Solution User” and assigned the missing privileges.
  • Added missing role "AutoUpdateUser" and assigned the privilege Global.LogEvent
  • Post changes, vcenter upgraded.

 

Regards
Devleen Kour
Install-Upgrade Specialist

ganeshadmin
Contributor
Contributor

Reply
0 Kudos