Catalogs from VCD are not listed for selection from UI.

Products

• VMware Telco Cloud Automation

Issue/Introduction

• The select catalog option from TCA UI does not list any of the available catalog from vCloud Director and returns empty.
• Upon checking the browser web developer tool, we see the error "Cloud not retrieve JWT token to login to Vcd".

Environment

TCA 2.x, 3.x

Cause

This issue occurs when the TCA and VCD are not synchronised timewise. The JWT token generated will have an old timestamp and the authentication will fails as token expired. 

We see the following error in VCD logs 

2025-04-20 08:18:24,485 | DEBUG    | pool-jetty-4634198        | SecurityServiceImpl            | Could not authenticate using JWT token | requestId=ebd57f9e-2374-4169-9128-3589cb3e1c7e,request=GET https://##############/cloudapi/1.0.0/sessions/current,requestTime=1745137104481,remoteAddress=10.191.177.51:61479,userAgent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...,accept=application/json;version 40.0.0-alpha
com.nimbusds.jwt.proc.BadJWTException: Expired JWT
        at com.nimbusds.jwt.proc.DefaultJWTClaimsVerifier.verify(DefaultJWTClaimsVerifier.java:342)
        at com.vmware.vcloud.security.web.login.MultisiteJwtProcessorImpl.process(MultisiteJwtProcessorImpl.java:98)
        at com.vmware.vcloud.backendbase.management.system.SecurityServiceImpl.validateVcdJwt(SecurityServiceImpl.java:416)
        at jdk.internal.reflect.GeneratedMethodAccessor1875.invoke(Unknown Source)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:566)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
        at com.vmware.vcloud.common.validation.AbstractMethodInterceptor.invoke(AbstractMethodInterceptor.java:41)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:186)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:241)
        at com.sun.proxy.$Proxy183.validateVcdJwt(Unknown Source)
        at com.vmware.vcloud.security.web.RestSessionFilter.validateVcdJwt(RestSessionFilter.java:302)

 

 

Resolution

Configure both TCA and VCD appliances to an NTP server or ensure they have the same timestamp.

Configure Time Setting in TCA

Configure Time Settings in vCloud Director