Aria Orchestrator connection refused to PowerShell host. Caused by Kerberos authentication.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When using remote PowerShell host to run Orchestrator work flows, a connection refused error is returned. 
This can also appear in Aria Automation running  blue prints that call Orchestrator workflows. 

Environment

Aria Orchestrator 8.x embedded or standalone

Cause

Check ./proxy-service/console-logs/squid-proxy.log

1752861945.299     14 10.244.0.165 TCP_MISS_ABORTED/502 4313 POST http://<FQDN>/wsman - HIER_DIRECT/<IP>.7 text/html

This error indicates the authentication request to being forwarded. 

Resolution

Workaround 

1. Check Orchestrator krb5.conf file to ensure Kerberos configuration is valid. 

2. Check Internet proxy server and ensure it is configured correctly to allow the http post request to the remote PowerShell host to complete.