Aria Orchestrator connection refused to PowerShell host. Caused by Kerberos authentication.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When using remote PowerShell host to run Orchestrator work flows, a connection refused error is returned. 
This can also appear in Aria Automation running blueprints that call Orchestrator workflows. 

Environment

Aria Orchestrator 8.x - embedded or standalone

Cause

Check /services-logs/prelude/proxy-service/console-logs/squid-proxy.log for errors such as the following:

##########.###     14 10.244.0.## TCP_MISS_ABORTED/502 4313 POST http://<FQDN>/wsman - HIER_DIRECT/<IP>.7 text/html

This error indicates the authentication request to being forwarded. 

Resolution

Workaround 

1. Check Orchestrator krb5.conf file to ensure Kerberos configuration is valid. 

2. Check Internet proxy server and ensure it is configured correctly to allow the http post request to the remote PowerShell host to complete.