Unable to log into the NSX-T manager web interface: Some appliance components are not functioning properly

Products

• VMware NSX

Issue/Introduction

• You are unable to log into one or more of the NSX manager web interface directly (not using VIP).
• You are unable to login the VIP address of the NSX management cluster.
• API responses are slower than expected
• You get an alert such as:
  

  Some appliance components are not functioning properly.
  Suberror : 15
  Error code: 101

• You use basic authentication to log into the manager appliances, that is local accounts: admin, audit, guestuser.
• In the log '/var/log/proxy/reverse-proxy.log' of the impacted manager(s) you see the following log entries:
  

  2023-01-18T08:44:38.766Z INFO https-jsse-nio-10.97.0.65-443-exec-513004 PAMAuthenticationProvider 25880 - [nsx@6876 comp="nsx-manager" level="INFO" subcomp="http"] Successful login for admin, groups superusers

• If you run top and check the uproxy service, the res is quite high:
  

  25880 uproxy 20 0 2676744 1.156g 12388 S 100.0 4.9 68865:10 /usr/lib/jvm/zre-8-amd64/bin/java -Djava.util.logging.config.file=/opt/vmware/proxy-tomcat/conf/logging.proper+

Environment

VMware NSX-T Data Center
VMware NSX

Cause

There is a small memory leak in the proxy service when using basic authentication in the PAM authentication workflow.

Resolution

This issue is resolved in VMware NSX-T Data Center 3.2.3
This issue is resolved in VMware NSX-T Data Center 3.2.4
This issue is resolved in VMware NSX 4.1.1
This issue is resolved in VMware NSX 4.2.0

Workaround:

• As root user, log into the impacted NSX-T manager and restart the proxy service:
  

  systemctl restart proxy

Additional Information

NSX Manager memory usage is gradually increasing resulting in slower API responses (KB # 322475, legacy KB # 93253) archived in favor of this article