"error authenticating user" while logging into Aria Operations for Logs UI

Products

• VMware Aria Suite

Issue/Introduction

• On all nodes in the cluster, the 'nodetool-no-pass status' command shows that the node is marked as UN, while other nodes are marked as DN.
• Unable to log in to the Aria Operations for Logs UI with either admin or Active Directory credentials. The UI displays an "error authenticating user" message.

Environment

VMware Aria Operations for Logs 8.x

Cause

This issue arises from NTP synchronization problems between the Aria Operations for Logs VMs and the ESXi host, leading to time discrepancies that impact the cluster's communication and overall functionality.

Resolution

Check the NTP configuration on both the ESXi host and Aria Operations for Logs VMs to ensure they are using the correct NTP servers.

1. To verify the NTP settings for Aria Operations for Logs VMs, follow these steps:

• Log in to vCenter.
• Navigate to the Aria Operations for Logs VM.
• Go to Edit Settings > Options > VMware Tools.
• Check if the checkbox for Synchronize guest time with host is selected or not.

If Aria Operations for Logs VMs are taking NTP from ESXi, follow below steps.

2. Verify NTP Server on Aria Operations for Logs VMs:

• On each Aria Operations for Logs VM, run the following command to monitor the current time:

watch -n 1 date

• Ensure that the time displayed is accurate and consistent.

3. Verify Time on ESXi Host:

• On the ESXi host where the Aria Operations for Logs VM is running, execute the following command to check the system time:

date

• Verify that the correct time zone and date are displayed.

4. Verify Time on Aria Operations for Logs VM with Respect to ESXi Host:

• Connect to the Aria Operations for Logs VM via SSH and run the following command to monitor its time:

watch -n 1 date

• Make sure the time displayed on the Aria Operations for Logs VM matches the time on the ESXi host. If not, follow the steps below to synchronize the time on the Aria Operations for Logs VM:

5. Synchronize Time on Affected Aria Operations for Logs VM.

• If the time on the Aria Operations for Logs VM is incorrect, log in as root and run the following command to set the correct time:

date -s "DD-MM-YYYY HH:MM:SS"

• Replace "DD-MM-YYYY HH:MM:SS" with the desired date and time.

6. Verify Time Synchronization:

• After setting the correct time, repeat steps 3 and 4 to ensure that the time on the Aria Operations for Logs VM is now synchronized with the ESXi host.

7.Verify the status of Aria Operations for Logs VMs 

• Verify that the all nodes are showing UN and user is able to login into Aria Operations for Logs UI using admin and active directory credentials.

 nodetool-no-pass status

• Verify above command returns a result that the nodes are in UN state.