Error when trying to access Aria Operations from VCD tenant - "User session expired"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• After upgraded to Aria Operations 8.17.2, and after migrated Chargeback environment, VCD tenants cannot login to Aria Operations with error "User session expired".
  
  
  
• When registering, the error: "Failed to register Operation plugin in VCD: hostname" appear. See below:
  
  
  Will see similar error in /logs/analytics-xxxxxxxx.log as below:
  2025-05-07T11:47:11,528+0000 ERROR [Threshold checker worker thread 5]  com.integrien.analytics.plugins.TransmissionWrapper.getHost - Error while trying to retrieve host from full host address
java.net.MalformedURLException: no protocol: Aops_LB_FQDN

Environment

Aria Operations 8.16

Aria Operations 8.17

Aria Operations 8.18

Cause

This only happen on scenario where Load Balancer (such as Avi LB) is configured for Aria Operations. The request from VCD, which is reaching Aria Operations did not have the required cookie for validating the request. The LB is taking out the required cookies from the request before sending it to Aria Operations.

The following excerpt can be seen logs/web.log in Aria Operations:

2024-10-22T18:49:11,261+0000 ERROR [ajp-nio-127.0.0.1-8009-exec-225] com.vmware.vcops.ui.util.ChargebackUtil.vcdAuthenticate - Unable to find any resource appropriate to tenantId
com.vmware.vcops.auth.exception.AuthException: Unable to find any resource appropriate to tenantId at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.getOrgResourceIntegerId(VcdAuthNStrategy.java:144) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?] at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.identifyAdapterResourceKeyByTenantId(VcdAuthNStrategy.java:103) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?] at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.login(VcdAuthNStrategy.java:46) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]

2024-08-22T10:47:17,668+0000 ERROR [ServerConnection on port 10000 Thread 9]  com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.login - Unable to authenticate the user
com.vmware.vcops.auth.exception.AuthException: The tenantId of credential is not matching with the tenantId from session validation response.        at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.validateResponse(VcdAuthNStrategy.java:183) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]        at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.validateViaVcdAdapterInstance(VcdAuthNStrategy.java:102) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]

Resolution

It is recommended to upgrade to latest Aria Operations 8.18.1, then perform the following workaround steps:

Update the System access URL to point to the Aria Operations Primary node FQDN.

• Login to Aria Operations Primary Node Product UI.
• Go to Administration/Global Settings/System Settings.
• Update the "System access URL" to the FQDN of the Primary node.
• Re-register the Chargeback plugin.

Also enable page access from Aria Operations: Administration -> Control panel - > Chargeback -> Manage pages