Error "Cannot complete login due to an incorrect user name or password." while adding an account for Aria Automation Orchestrator in Aria Operations

Products

• VMware Aria Suite

Issue/Introduction

• Aria Operations Management Pack for Aria Automation Orchestrator fails to add as an integration with error "Cannot complete login due to an incorrect user name or password".
  
• In the vRealizeOrchestratorAdapter.log on Aria Operations, you see (depending on Operations version this log may not be available):
  2025-04-05T08:29:23,124+0000 ERROR [Collector worker thread 25] (362) com.vmware.adapter3.vro.vRealizeOrchestratorAdapter.getVcuuids - Error :org.springframework.web.client.HttpClientErrorException$Unauthorized: 401 Unauthorized        at org.springframework.web.client.HttpClientErrorException.create(HttpClientErrorException.java:81) ~[spring-web-5.1.19.RELEASE.jar:5.1.19.RELEASE]
  at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:122) ~[spring-web-5.1.19.RELEASE.jar:5.1.19.RELEASE]
  at org.springframework.web.client.DefaultResponseErrorHandler.handleError(DefaultResponseErrorHandler.java:102) ~[spring-web-5.1.19.RELEASE.jar:5.1.19.RELEASE]
  at org.springframework.web.client.ResponseErrorHandler.handleError(ResponseErrorHandler.java:63) ~[spring-web-5.1.19.RELEASE.jar:5.1.19.RELEASE]
  2025-04-05T08:29:23,125+0000 ERROR [Collector worker thread 25] (362) com.vmware.adapter3.vro.vRealizeOrchestratorAdapter.onCollect - Not able to retrive the vcId,Please check the vRO Setup,So making the adapter instance down

Environment

Aria Operations 8.x

Aria Automation/Orchestrator 8.x

Cause

This issue is caused by the Basic Authentication configuration being disabled by default in Aria Automation Orchestrator. The Aria Operations Management Pack uses Basic Authentication for authentication, which leads to the error when it's disabled.

Resolution

Enable basic authentication for Orchestrator (or Automation if embedded)

Aria Orchestrator/Automation 8.18.1 and later

Because the Control Center is removed in 8.18.1 and later you can enable this via the vracli:

1. SSH into the Orchestrator or Automation appliance (primary node).
2. Enable basic authentication using the following command:

   1. vracli vro properties set -k com.vmware.o11n.sso.basic-authentication.enabled -v true

3. Once this is complete, the vRO Pods will be recreated.  This process may take up to 2-5 minutes.  You can validate pod status with:

   1. kubectl get pods -n prelude | grep vco

4. When pods are online, retry the connection from Aria Operations.  Note:  Log in using your Orchestrator user ID (ID alone with no domain).

Note: This change can be reverted using:

vracli vro properties set -k com.vmware.o11n.sso.basic-authentication.enabled -v false

Aria Orchestrator/ Automation 8.18.0 and earlier

The basic authentication of your Aria Automation Orchestrator deployment is disabled by default. In certain use cases you must enable this authentication by setting the com.vmware.o11n.sso.basic-authentication.enabled system property. For example, you must enable this system property if you are planning on using the Aria Orchestrator Multi-Node plug-in for deployments which are authenticated with Aria Automation.

To do so, please follow the below step: 

1. Log in to the vRO Control Center (https://FQDN_or_IP_address:443/vco-controlcenter) as root.
2. Select System Properties.
3. Click New.
4. Under Key, enter com.vmware.o11n.sso.basic-authentication.enabled.
5. Under Value, enter true.
6. (Optional) Enter a description for the new system property.
7. Click Add, and wait for the Aria Automation Orchestrator server to restart.
8. When services are back online, retry the connection from Aria Operations.  Note:  Log in using your Orchestrator user ID (ID alone with no domain).