Error "Invalid name provided (Mechanism level: KrbException: Cannot locate default realm)" During VM Deployment in Aria Automation

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Windows Virtual Machine (VM) deployments in Aria Automation environment fail with a Kerberos authentication error. The intermittent error message observed during the adCleanup or adDelete workflows initiated by PowerShell hosts is:

  • ERROR: Invalid name provided (Mechanism level: KrbException: Cannot locate default realm)

Environment

• VMware Aria Automation 8.18.x

Cause

• The failure is caused by an outdated or corrupted PowerShell Host configuration that is unable to resolve the Kerberos realm correctly. This results in the error:

  • ERROR: Invalid name provided (Mechanism level: KrbException: Cannot locate default realm)

Resolution

1. Verify krb5.conf:

   • Ensure the configuration and permissions (644) of /data/vco/usr/lib/vco/app-server/conf/krb5.conf are correct, as outlined in this guide.

2. Update PowerShell Host:

   • Run the “Update a PowerShell Host” workflow in Orchestrator > Library > Workflows.

3. Verify Deployment:

   • After updating the host, test a VM deployment and deletion workflow to confirm success.

Additional Information

• The issue was confirmed to be specific to the outdated PowerShell Host.