Inventory Group Member View Fails with Error 500186 in NSX Federation Environment

Products

• VMware vDefend Firewall

Issue/Introduction

When attempting to view the members of a group created on the Global Manager within a Federation setup, the following error will be encountered:
"Duplicate realized object: /global-infra/domains/xxxxxx/groups/xxxxxxxxx (Error code: 500186)"

This issue can occur after upgrading the NSX environment from version 3.2.1 to 4.2.1, particularly when a group name includes the word "Identity." During the upgrade, a stale entry may remain in the GenericPolicyRealizedResource (GPRR) table, leading to a conflict during the realization process and resulting in a duplicate object error.

Environment

VMware NSX: 4.2.1 (Upgraded from 3.2.1)

Cause

The issue occurs due to an incorrect entry in the corfu database on the Local managers.

Resolution

This issue will be fixed in an upcoming NSX release. 

For a workaround, please open a case with Broadcom Support.