Error when sync with AD

[thiago_corredor]

Good afternoon all,

We are receiving the error below, when we are trying to sync new users from AD:

Certificate for <vra> doesn't match common name of the certificate subject: xxxxxxx

Error from log:

2016-06-10 19:27:21,597 ERROR (tomcat-http--16) [vsphere.local;05fdd4ec-c66d-4728-ab26-f6a23dbbe1d9;172.19.24.131] com.vmware.horizon.connector.management.utils.ConnectorCommunicationUtils - Unable to execute local REST API: Certificate for <vra> doesn't match common name of the certificate subject: x

xxxxxxxxxxxx

javax.net.ssl.SSLException: Certificate for <vra> doesn't match common name of the certificate subject: xxxxxxxxxx

This certificate for <vra>  is installed where?

Becase we installed a new certificate in vRA Appliance, issued to our domain (example: thiagosilva.company).

But appear that in some place, when the tool is trying to connect on AD, it is using the old certificate (issued to "vra").

Could you please help me?

Thanks

[jgemcs]

Hi,

same error here  - did you find a solution for that problem ?

==> horizon.log <==

2017-01-05 11:10:41,105 ERROR (tomcat-http--28) [vsphere.local] com.vmware.horizon.connector.management.utils.ConnectorCommunicationUtils - Unable to execute local REST API: Certificate for <vrava> doesn't match common name of the certificate subject: vrava.lab.net

Jens

[msk05]

You may need to republish the vRA appliance cert under VAMI-> host setting to fix this error

[Jdeb68]

Has anyone resolved this issue?

We have run into this same issue after updating the cert via the VAMI interface. There is a tcserver.keystore file in /opt/vmware/horizon/workspace/conf directory that contains the former cert CN name. If this is the source of the issue, it may be a matter of how to re-create this keystore file.

Thanks,

Jerry

[marsherian]

I found a work around with for this:

ssh root@<VRA_APPLAINCE_NAME>

su - postgres /opt/vmware/vpostgres/current/bin/psql vcac

set schema 'saas';

update "Connector" set "host"='<VRA_APPLIANCE_FQDN>' where "host"='vra';

\q

Rerun the synchronisation of your directory.

[kumar6384]

Kindly refer the below links:

http://www.bkdatacentre.com/2016/04/adding-active-directory-authentication-vra7/

https://zhengwu.org/2015/12/22/initial-configuration-of-vrealize-automation-7/

I hope that the above answers your questions satisfactorily.

[forcerk]

ssh root@<VRA_APPLAINCE_NAME>

su - postgres /opt/vmware/vpostgres/current/bin/psql vcac

set schema 'saas';

update "Connector" set "host"='<VRA_APPLIANCE_FQDN>' where "host"='vra';

\q

For me this was the solution.

Thanks marsherian