Turning off the HTTPS redirect for Web views and SOAP in vRealize Orchestrator

Products

• VMware Aria Suite

Issue/Introduction

Starting with Orchestrator 5.1, by default, all HTTP traffic is redirected to HTTPS with error code 302 (Moved Temporarily). The redirect is necessary to prevent credentials being transferred in plain text. In some cases such as when using HTTP proxies and other intermediaries the redirect is not optimal.

Environment

VMware vCenter Orchestrator 5.1.x
VMware vCenter Orchestrator Appliance 5.1.x

Resolution

To turn off the automatic redirect for Web views on a Windows machine:

1. Log in to the machine on which the Orchestrator server is installed as an administrator.
2. Stop the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Stop service.
3. Navigate to the vmo.war file and open it.
   
   • If you installed Orchestrator together with vCenter Server, navigate to: install_directory\VMware\Infrastructure\Orchestrator\app-server\server\vmo\deploy\vmo-server\.
   • If you installed Orchestrator standalone, navigate to install_directory\VMware\Orchestrator\app-server\server\vmo\deploy\vmo-server\.
4. Open the WEB-INF\web.xml and edit it within the WAR file to remove the <security-constraint> tag.
5. Start the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Start service.

To turn off the automatic redirect for the SOAP endpoint on a Windows machine:

1. Log in to the machine on which the Orchestrator server is installed as an administrator.
2. Stop the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Stop service.
3. Navigate to the o11n-webservice-server.war file and open it.
   
   • If you installed Orchestrator together with vCenter Server, navigate to: install_directory\VMware\Infrastructure\Orchestrator\app-server\server\vmo\deploy\vmo-server\.
   • If you installed Orchestrator standalone, navigate to install_directory\VMware\Orchestrator\app-server\server\vmo\deploy\vmo-server\.
4. Open the WEB-INF\web.xml and edit it within the WAR file to remove the <security-constraint> tag.
5. Start the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Start service.

To turn off the redirect for Web views and SOAP in the Orchestrator Appliance:

1. Stop the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Stop service.
2. Log in to the appliance Linux console as root.
3. Download and save the attached KB-2053312-remove-redirect.sh script file in the Linux console.
4. Run the KB-2053312-remove-redirect.sh script.
   The executable script backs up the vmo.war and o11n-webservice-server.war files by saving them as vmo.war_ and o11n-webservice-server.war_ files and turns off the redirect for Web view and SOAP.
   
5. Start the Orchestrator server service.
   1. Log in to the Orchestrator configuration interface as vmware.
   2. On the Startup Options tab, click Start service.