Re: vra 7.1 - Domain Users cannot login

wllp · ‎11-21-2016

I have added a new Directory using Active Directory over LDAP. Users are sync from AD successfully.

I am able to see the users details under Administration > Users & Groups > Directory Users and Groups.

I have also assigned the users with the different roles under Custom Groups/Business Groups. However, when the users tried to login, it failed. Passwords were reset but still getting the same problem.

I have checked in the catalina.out log file and found the following:

2016-11-22 12:28:40,906 vcac: [component="cafe:shell" priority="WARN" thread="tomcat-http--32" tenant="sgx-sddc" context="" token=""] com.vmware.vcac.authentication.http.oauth.WebOAuthAuthenticationFilter.handleException:120 - Authentication request for '/vcac/reset4270056.cache.css' failed with: Unable to authenticate. Missing authorization code

2016-11-22 12:28:42,648 vcac: [component="cafe:shell" priority="WARN" thread="tomcat-http--40" tenant="sgx-sddc" context="" token=""] com.vmware.vcac.authentication.http.oauth.WebOAuthAuthenticationFilter.handleException:120 - Authentication request for '/vcac/' failed with: Unable to authenticate. Missing authorization code

Am I missing anything during the setup? Please advise and help. Thanks.

TimR26 · ‎11-22-2016

Check to see if the any of the newly added accounts user id match with the id of locally created vRealize Automation accounts. If so remove the local accounts and only use the domain accounts to authenticate them.