PAN Device/Palo Alto Panorama Data sources showing Invalid Credentials in Aria Operations for Networks
Article ID: 402701
Updated On:
Products
Issue/Introduction
When adding PAN Device/Palo Alto Panorama as Data sources it shows Invalid Credentials
Refer to Screenshots below:
Collector logs at location /var/log/arkin/collector/ show below error stack trace
2025-05-27T16:40:51.293Z INFO impl.dataprovider.AbstractDPOperationsManager DataProviderManager::healthCheck getHealthStatus:514 DPHealthStatus: d
pId {
dataProviderIdentifier: "PAN_##.#.##.##"
customerId: 19741
}
healthReport {
health: UNHEALTHY
healthMessage: "com.vnera.dataproviders.core.common.impl.dataprovider.utils.exceptions.HttpException: Could not get response for /api, status 40
3_n_tat com.vnera.dataproviders.core.common.impl.dataprovider.utils.HttpUtils.checkCodeAndThrow(HttpUtils.java:54)_n_tat com.vnera.dataproviders.c
ore.common.impl.dataprovider.utils.HttpUtils.checkStatusAndThrow(HttpUtils.java:34)_n_tat com.vnera.dataproviders.core.common.impl.dataprovider.ut
ils.HttpUtils.checkStatusAndThrow(HttpUtils.java:23)_n_tat com.vnera.dataproviders.core.impl.pan.utils.PanCommonUtils.fetchFromPAN(PanCommonUtils.
java:115)_n_tat com.vnera.dataproviders.core.impl.pan.utils.PANUtils.fetchFromPAN(PANUtils.java:2045)_n_tat com.vnera.dataproviders.core.impl.pan.
utils.PANUtils.getServerSession(PANUtils.java:581)_n_tat com.vnera.dataproviders.core.impl.pan.utils.PANUtils.<init>(PANUtils.java:218)_n_tat com.
vnera.dataproviders.core.impl.pan.tasks.PANInventoryTask.doRun(PANInventoryTask.java:120)_n_tat com.vnera.dataproviders.core.common.impl.dataprovi
der.tasks.AbstractTask.run(AbstractTask.java:165)_n_tat com.vnera.dataproviders.tasker.Tasker_ScheduledTaskWrapper.run(Tasker.java:486)_n_tat com.
google.common.util.concurrent.MoreExecutors_ScheduledListeningDecorator_NeverSuccessfulListenableFutureTask.run(MoreExecutors.java:678)_n_tat java
.base/java.util.concurrent.Executors_RunnableAdapter.call(Executors.java:515)_n_tat java.base/java.util.concurrent.FutureTask.runAndReset(FutureTa
sk.java:305)_n_tat java.base/java.util.concurrent.ScheduledThreadPoolExecutor_ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:305)_n_tat
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)_n_tat java.base/java.util.concurrent.ThreadPoolExecutor_
Worker.run(ThreadPoolExecutor.java:628)_n_tat java.base/java.lang.Thread.run(Thread.java:829)_n"
healthErrorCode: "INVALID_CREDENTIALS"
healthPayload: ""
}
lastCollectionTime: -1
dpStats {
}
lastConfigCollectionTime: 1746854588157
lastScheduledConfigTaskRunTime: -1
isConfigCollectionInProgress: false
.
maxMetricTaskSuccessTS: -1.
DPTaskGroupStatusList: [DPTaskGroupStatus
{Environment
Aria Operations for Networks 6.12.0
Aria Operations for Networks 6.12.1
Aria Operations for Networks 6.13.0
Aria Operations for Networks 6.14.0
Cause
User account does have the correct Role for the user account and XML API permissions.
Resolution
In the Panorama UI, perform the following steps to add an admin role for XML API.
1. Select Panorama Admin Roles.
2. Click Add to add a new admin role.
3. In the The Admin Role Profile window, enter the name to the role and select Panorama.
4. Click the Web UI tab and deactivate all entries. Then Click the XML API tab and deactivate all entries, except Configuration and Operational Requests.
5. Click OK to close the window.
6. The new admin role appears in the list.
7. Click Commit.
8. Assign this role to an administrator account or create a new user and assign this role to the new user.
9. Once Step 8 is validated. Add the PAN Device/Palo Alto Panorama as Data sources
10. The error message should not appears and device gets successfully added
Additional Information
Feedback
