Error when trying to access Aria Operations from vCD tenant - "User session expired"

Products

• VMware Aria Suite

Issue/Introduction

After upgraded to Aria Operations 8.17.2, and after migrated Chargeback environment, vCD tenants cannot login to Aria Operations with error "User session expired".

Environment

Aria Operations 8.16

Aria Operations 8.17

Aria Operations 8.18

Cause

This only happen on scenario where Load Balancer (such as Avi LB) is configured for Aria Operations. The request from vCD, which is reaching Aria Operations did not have the required cookie for validating the request. The LB is taking out the required cookies from the request before sending it to Aria Operations.

The following excerpt can be seen web.log in Aria Operations:

2024-10-22T18:49:11,261+0000 ERROR [ajp-nio-127.0.0.1-8009-exec-225] com.vmware.vcops.ui.util.ChargebackUtil.vcdAuthenticate - Unable to find any resource appropriate to tenantId
com.vmware.vcops.auth.exception.AuthException: Unable to find any resource appropriate to tenantId at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.getOrgResourceIntegerId(VcdAuthNStrategy.java:144) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?] at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.identifyAdapterResourceKeyByTenantId(VcdAuthNStrategy.java:103) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?] at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.login(VcdAuthNStrategy.java:46) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]

2024-08-22T10:47:17,668+0000 ERROR [ServerConnection on port 10000 Thread 9]  com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.login - Unable to authenticate the user
com.vmware.vcops.auth.exception.AuthException: The tenantId of credential is not matching with the tenantId from session validation response.        at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.validateResponse(VcdAuthNStrategy.java:183) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]        at com.vmware.vcops.auth.server.authN.VcdAuthNStrategy.validateViaVcdAdapterInstance(VcdAuthNStrategy.java:102) ~[vcops-auth-server-1.0-SNAPSHOT.jar:?]

Resolution

It is recommended to upgrade to latest Aria Operations 8.18.1, then perform the following workaround steps:

Update the System access URL to point to the Aria Operations Primary node FQDN.

• Login to Aria Operations Primary Node Product UI.
• Go to Administration/Global Settings/System Settings.
• Update the "System access URL" to the FQDN of the Primary node.
• Re-register the Chargeback plugin.