I am trying to setup a vRA 7.1 POC environment. I am unable to edit existing BG or create new BG. The user has tenant admin privilege. Getting below error
That helped but I had to reboot both IAAS and vRA after that to fix it.
Again it happened today and I had to reboot the server to fix it rather than updating the certificate. Any idea how to fix this permanently?
This issue is happening every few hours while provisioning machine, edit BG or create BG. I had to to reboot only vRA appliance to fix it. Anybody came across this issue before?
Did you find any logs in IAAS nodes & also in windows event viewer, when the issue is occurred!..
C:\Program Files (x86)\VMware\vCAC\Distributed Execution Manager\*
Log locations for VMware vRealize Automation 7.x (2141175) | VMware KB
Manager server log does have any error message. What I observed is below
Error message in Request tab:
==============================
Allocation request [Composition RequestId: [93863b8c-0869-47a3-9f97-7a8ceca6613d], CompTypeId: [Infrastructure.CatalogItem.Machine.Virtual.vSphere], BlueprintId: [8cda43a1-43ce-42ea-ab96-acc6c21591fc], CompId: [CentOS66], BlueprintRequestId: [834436b4-7886-4316-b8d5-e5a8be4281a6], RootCafeRequestId: [40a71bc7-92d6-4a86-b7d9-397a270dd27a], SubtenantId: [261dcafd-7158-4aef-a50f-7b73a44308a2]] with binding id [1c30cf80-1103-49ba-8289-acd13455af04] failed with [HTTP/1.1 401 Unauthorized : <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>401 - Unauthorized: Access is denied due to invalid credentials.</title><style type="text/css"><!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2> <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3> </fieldset></div></div></body></html>]
Repository log:
=================
[UTC:2017-02-01 17:07:45 Local:2017-02-01 09:07] [VMware.Cafe]: [sub-thread-Id="23" context="" token=""] Authentication failed for resource: https://dal09iaas.cloudmatrix.local/repository/data/ManagementmodelEntities.svc/HostNics(guid'9822e2... Exception:IDX10223: Lifetime validation failed. The token is expired.
ValidTo: '02/01/2017 15:05:59'
Current time: '02/01/2017 17:07:45'.
[UTC:2017-02-01 17:07:45 Local:2017-02-01 09:07] [VMware.Cafe]: [sub-thread-Id="23" context="" token=""] Authentication failed for resource: https://dal09iaas.cloudmatrix.local/repository/data/ManagementmodelEntities.svc/HostNics(guid'9822e2...')
[UTC:2017-02-01 17:07:45 Local:2017-02-01 09:07] [Trace]: [sub-thread-Id="46" context="W3Y6AO51" token="LY07xxBL"] Guid :<?xml version="1.0" encoding="utf-16"?>
<guid>784611a1-a4a2-4576-9534-90d00a5f61ac</guid>
[UTC:2017-02-01 17:07:45 Local:2017-02-01 09:07] [Debug]: [sub-thread-Id="46" context="W3Y6AO51" token="LY07xxBL"] Started deleting virtual machine record for: dal002
Exception:IDX10223: Lifetime validation failed. The token is expired.
ValidTo: '02/01/2017 15:05:59'
Current time: '02/01/2017 17:07:45'.
Check if the time on the servers (vRA/IaaS) is in sync.
DanieleUlrich I do not have an option to mark your reply as answered under Action attribute. Hence, I am marking it as helpful as the time sync was the issue.