Pure storage plugin fails to register with vCenter Server.
search cancel

Pure storage plugin fails to register with vCenter Server.

book

Article ID: 374394

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

  • Pure storage plugin fails to register with vCenter Server "Error: Error during registration. See logs for more information."
  • /var/log/vmware/vpxd/vpxd.log (on vCenter Server):

yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=vpxLro opID=165a298] [VpxLRO] -- BEGIN lro-12900943 -- ExtensionManager -- vim.ExtensionManager.unregisterExtension -- 5244fc46-0b15-083a-cf97-f3889117c70c(52b768dc-c5f0-4ceb-532a-9f17da67e7d3)
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=MoExtensionMgr opID=165a298] Clearing data for com.purestorage.integrations.vmware.pureplugin
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=MoExtensionMgr opID=165a298] Unregistering extension with extensionKey = com.purestorage.integrations.vmware.pureplugin by user: VSPHERE.LOCAL\Administrator
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=MoExtensionMgr opID=165a298] Unregistering extension from Lookup service; com.purestorage.integrations.vmware.pureplugin, id: ########-####-####-####-############_com.purestorage.integrations.vmware.pureplugin
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=vmomi.soapStub[0] opID=165a298] SOAP request returned HTTP failure; <<cs p:00007f73683b6860, TCP:localhost:1080>, /lookupservice/sdk>, method: delete; code: 500(Internal Server Error); fault: (vmodl.fault.SecurityError) {
-->    faultCause = (vmodl.MethodFault) null,
-->    faultMessage = <unset>
-->    msg = "Received SOAP response fault from [<<cs p:00007f73683b6860, TCP:localhost:1080>, /lookupservice/sdk>]: delete
--> "
--> }
yyyy-mm-ddThh:mm:ss warning vpxd[PID] [Originator@6876 sub=LSClient opID=165a298] Service registration stub privilege error during lookup service RPC: N5Vmomi5Fault13SecurityError9ExceptionE(Fault cause: vmodl.fault.SecurityError
--> )
--> 
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=LSClient opID=165a298] Refreshing lookup service token
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=SsoClient opID=165a298] Successfully acquired token: SamlToken [subject={Name: vpxd-########-####-####-####-############; Domain:vsphere.local}, groups=[{Name: Users; Domain:vsphere.local}, {Name: SolutionUsers; Domain:vsphere.local}, {Name: SystemConfiguration.Administrators; Domain:vsphere.local}, {Name: ComponentManager.Administrators; Domain:vsphere.local}, {Name: LicenseService.Administrators; Domain:vsphere.local}, {Name: ActAsUsers; Domain:vsphere.local}, {Name: Everyone; Domain:vsphere.local}], delegationChain=[], startTime=yyyy-mm-dd hh:mm:ss, expirationTime=yyyy-mm-dd hh:mm:ss, renewable=false, delegable=false, isSolution=true,confirmationType=1]
yyyy-mm-ddThh:mm:ss info vpxd[PID] [Originator@6876 sub=vmomi.soapStub[0] opID=165a298] SOAP request returned HTTP failure; <<cs p:00007f73683b6860, TCP:localhost:1080>, /lookupservice/sdk>, method: delete; code: 500(Internal Server Error); fault: (lookup.fault.EntryNotFoundFault) {
-->    faultCause = (vmodl.MethodFault) null,
-->    faultMessage = <unset>,
-->    errorMessage = "Entry with name serviceId: ########-####-####-####-############_com.purestorage.integrations.vmware.pureplugin not found.",
-->    name = "serviceId: ########-####-####-####-############_com.purestorage.integrations.vmware.pureplugin"
-->    msg = "Received SOAP response fault from [<<cs p:00007f73683b6860, TCP:localhost:1080>, /lookupservice/sdk>]: delete
--> "
--> }
yyyy-mm-ddThh:mm:ss warning vpxd[PID] [Originator@6876 sub=MoExtensionMgr opID=165a298] Extension ########-####-####-####-############_com.purestorage.integrations.vmware.pureplugin does not exist in Lookup service

 

  • Lookupsvc log on vCenter Server /var/log/vmware/lookupsvc/lookupserver-default.log will log similar to below snippets:

[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.vim.lookup.vlsi.ServiceRegistrationImpl] User: {Name: vpxd-########-####-####-####-############, Domain: vsphere.local} attempted to delete not existing service with ID: ########-####-####-####-############_com.purestorage.integrations.vmware.pureplugin
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.vim.lookup.vlsi.VlsiSecurityChecker] Operation create is not permitted for user {Name: vpxd-########-####-####-####-############, Domain: vsphere.local}
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.vim.lookup.vlsi.VlsiSecurityChecker] Operation create is not permitted for user {Name: vpxd-########-####-####-####-############, Domain: vsphere.local}
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.vim.lookup.vlsi.VlsiSecurityChecker] Operation create is not permitted for user {Name: vpxd-########-####-####-####-############, Domain: vsphere.local}
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.identity.token.impl.SamlTokenImpl] SAML token for SubjectNameId [value=vpxd-########-####-####-####-############@vsphere.local, format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
[yyyy-mm-ddThh:mm:ss pool-2-thread-2  INFO  com.vmware.vim.lookup.vlsi.VlsiSecurityChecker] Operation create is not permitted for user {Name: vpxd-########-####-####-####-############, Domain: vsphere.local}

 

Environment

VMware vCenter Server 7.X
VMware vCenter Server 8.X

Cause

/etc/vmware-vpx/vpxd.cfg has wrong domain name under solutionuser and default section.

<solutionUser>
 <certificate>/etc/vmware-vpx/ssl/vcsoluser.crt</certificate>
 <name>vpxd-########-####-####-####-############@vsphere.test</name>
 <privateKey>/etc/vmware-vpx/ssl/vcsoluser.key</privateKey>
</solutionUser>

<default>
  <admin>[email protected]</admin>
  <isGroup>false</isGroup>
</default>

Resolution

Note: Ensure a recent backup/offline snapshot of the vCenter Server is taken prior to the steps below

  • Backup vpxd.cfg file.
    cp /etc/vmware-vpx/vpxd.cfg /storage/core/

  • Get SSO domain-name:
    /usr/lib/vmware-vmafd/bin/vmafd-cli get-domain-name --server-name localhost

  • Stop vpxd service.
    service-control --stop vpxd

  • Based on output from step 3 modify solutionuser and default section in vpxd.cfg file

Before changes:

<solutionUser>
 <certificate>/etc/vmware-vpx/ssl/vcsoluser.crt</certificate>
 <name>vpxd-########-####-####-####-############@vsphere.test</name>
 <privateKey>/etc/vmware-vpx/ssl/vcsoluser.key</privateKey>
</solutionUser>

<default>
  <admin>[email protected]</admin>
  <isGroup>false</isGroup>
</default>

After Changes:

<solutionUser>
 <certificate>/etc/vmware-vpx/ssl/vcsoluser.crt</certificate>
 <name>vpxd-########-####-####-####-############@vsphere.local</name>
 <privateKey>/etc/vmware-vpx/ssl/vcsoluser.key</privateKey>
</solutionUser>

<default>
  <admin>[email protected]</admin>
  <isGroup>false</isGroup>
</default>

  • Start vpxd service and proceed with plugin registration.

    service-control --start vpxd
Powered by Wolken Software