VIC Login with Active Directory User results in "Error verifying token"

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• Login attempts to the VIC Appliance Management portal using Active Directory accounts results in:

Apache Tomcat/8.5.8
description The request sent by the client was syntactically incorrect.
message invalid_request: unregistered redirect_uri
type Status report
HTTP Status 400 - invalid_request: unregistered redirect_uri

• The Admiral service reports the following. Note the admiral.service logs are located on the VIC appliance VM and are access with the following command "journalctl -u admiral.service" from the shell.

 

===========journalctl -u admiral.service===========

start_admiral.sh[538]: [20133][I][344][8282/][lambda$verifyTokenInternal$38][Retrying token verification with basic auth.]

start_admiral.sh[538]: [20134][W][56][8282/core/authn/basic][handleTokenVerify][Error verifying token: Separator for header not found]

==========End Log==========

Environment

VMware vSphere Integrated Containers 1.x

Resolution

This issue is resolved in vSphere Integrated Containers 1.2.1. Please see VMware vSphere Integrated Containers 1.2.1 Release Notes documentation.