Inventory Sync Failure for VIDM with Error Code: LCMVIDMIMPORT0018

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• The VIDM inventory sync fails with the error LCMVIDMIMPORT0018 when attempting to synchronize inventory in VMware Aria Suite Lifecycle
  
  - Error Code: LCMVIDMIMPORT0018
  - Unable to verify SSH user's password. Ensure the password is not already expired and retry after providing valid credentials
  - SSH authorization failed with provided SSH user's password for < VIDM Node IP Address >. Make sure the SSH user account password isn't expired. Please verify the credentials and retry.
  
  
  
  
• The /var/log/vrlcm/vmware_vrlcm.log reports the following exception :
  
  com.vmware.vrealize.lcm.common.exception.EngineException: SSH authorization failed with provide SSH user's password for < VIDM Node IP Address > .Make sure the SSH user account password isn't expired. Please verify the credentials and retry at com.vmware.vrealize.lcm.vidm.core.task.VidmVerifySSHPasswordsTask.checkForPasswords(VidmVerifySSHPasswordsTask.java:148) at com.vmware.vrealize.lcm.vidm.core.task.VidmVerifySSHPasswordsTask.execute(VidmVerifySSHPasswordsTask.java:87) at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:62) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source)
  

Environment

VMware identity Manager 3.3.x
Aria Suite Lifecycle 8.x

Cause

This issue typically occurs when the password for the SSH user account used by Aria Suite Lifecycle to communicate with the vIDM appliance has expired or become locked due to multiple failed login attempts

Resolution

To resolve this issue, follow the steps below:

1. Validate the Password in the Appliance:
   Ensure the password for the SSH user  is valid and can be used for login.

2. Check for Login Attempt Failures:
   Check for any failed login attempts related to the sshuser accounts. If there are failed attempts, it could indicate an account lockout.
   pam_tally2 -–user=sshuser

3. Verify Password Expiry Status:
   Ensure the password has not expired or is not about to expire. If the password is expired, reset it accordingly.
   chage -l sshuser

4. Reset Account Lockouts (If Necessary):
   If there have been multiple failed login attempts leading to account lockout, reset the lockout counter by following the system guidelines for clearing failed attempts.
   pam_tally2 -–user=sshuser --reset

5. Update Password in VMware Aria Suite Lifecycle:
   Navigate to VMware Aria Suite Lifecycle > Locker > Passwords, and add or update the password for the SSH user if it has changed.

6. Retry the Inventory Sync:
   Once the password issue has been resolved, retry the inventory sync to ensure it completes without errors.