Admin account is locked out constantly in Aria operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Admin account is locked out everyday. watching the logs we  see an internal process trying to login and fail.

/storage/log/vcops/log/casa/casa.log

.... Admin login failed : attempt # 1 , Limit 5

Running the following: 

cat /storage/vcops/user/conf/adminuser.properties 

we see :

Failed_attempts=#

With the number of failures always increasing.

Environment

Aria operations 

Resolution

To fix admin account please do following 

For admin account you can use :

$VMWARE_PYTHON_BIN $VCOPS_BASE/../vmware-vcopssuite/utilities/sliceConfiguration/bin/vcopsSetAdminPassword.py --unlock

$VMWARE_PYTHON_BIN $VCOPS_BASE/../vmware-vcopssuite/utilities/sliceConfiguration/bin/vcopsSetAdminPassword.py --reset '<Password1!>'

$VMWARE_PYTHON_BIN $VCOPS_BASE/../vmware-vcopssuite/utilities/sliceConfiguration/bin/vcopsSetAdminPassword.py --sync

Based on KB : How to Reset the Admin Password in VMware Aria Operations

 

Most of the times we see this issue to be related to either Aria operations for  Logs or Lifecycle / SDDC Manager. Check if either are using the wrong admin password.

Also check httpd/apache logs for login failures to confirm which IP is causing the issue.

grep -a /auth\/token\/acquire.*\"username\":\"admin\" /storage/log/vcops/log/http_api.log*

grep -a /auth\/token\/acquire.*\"username\":\"admin\" /storage/log/vcops/log/http_api.log | awk '{print $11}' | uniq -c

grep -a /auth\/token\/acquire.* /storage/log/vcops/log/suite-api/localhost_access_log.txt | awk '{print $3}' | sort | uniq -c

 

For further reference please also see our knowledge article below:

vRealize/Aria Operations admin account getting locked even after password reset