VMware identity Manager(VIDM) actions in Aria Suite Lifecycle fail with Error LCMVIDM74074

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When attempting to perform VIDM operations such as Remediate or Re-trust Load Balancer from VMware Aria Suite Lifecycle (LCM), the process fails with error:
  
  Error Code: LCMVIDM74074
Error checking VMware Identity Manager node patch level.
vIDM pgpool cluster patch precheck failed on the host :##.#.###.##
  
  
• Additionally, the LCM log file /var/log/vrlcm/vmware_vrlcm.log contains the following exception:
  

  com.vmware.vrealize.lcm.common.exception.LcmException: vIDM pgpool cluster patch precheck failed on the host :##.#.###.## at com.vmware.vrealize.lcm.vidm.core.task.pgpool2.VidmClusterPatchPrecheckTask.execute(VidmClusterPatchPrecheckTask.java:125) at com.vmware.vrealize.lcm.vidm.core.task.pgpool2.VidmClusterPatchPrecheckTask.retry(VidmClusterPatchPrecheckTask.java:133) at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:60)at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source)

  ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u.SessionHolder] -- SessionHolder.newSession Exception encountered
com. jcraft . jsch. JSchException: Auth fail for methods 'publickey, password'

  ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u. SshUtils]'publickey, password'
ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u. SshUtils] -- JSchException encountered
ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.v.c.u. VidmPgpoolUtil] -- Exception while validating SSH root credentials of the vIDM host - ##.#.###.##
com. vmware. vrealize. lcm. util. exception. SshAuthenticationFailureException: Cannot execute ssh commands on the host - ##.#.###.##, validate the SSH login credentials.
-- Exception cause : com. jcraft. jsch. JSchException: Auth fail for methods

Environment

Aria Suite Lifecycle 8.18.x
VMware identity Manager 3.3.7

Cause

This issue occurs when the password for the VIDM nodes are rotated outside of LCM while the VIDM cluster is in an unhealthy state. This causes a mismatch between the stored password in Aria Suite Lifecycle and the actual password on the VIDM nodes, leading to the failure of the Remediate operation

Resolution

To resolve this issue:

1. Ensure you have the correct SSH root password for your IDM nodes saved in LCM and note the password's name
2. Execute a Trigger Inventory Sync on the vIDM in Aria Lifecycle
3. Every time there is a failure for incorrect password, select the correct password from step 1.
   
   (This may happen as many as 6 times, if separate sections fail for each node. Note the node name/IP mentioned in each failure to see if progress is being made)

 

If the above doesn't work, these alternate steps may help:

1. Set the same old password that was previously used for the VIDM in Aria Suite Lifecycle on all VIDM nodes.
   
   Note: By default, the VIDM nodes remember the last 6 passwords. To update the policy, generate a random password on the VIDM and then set the old password (available in Aria Suite Lifecycle) for all VIDM nodes.
   
   
2. After resetting the password, retry the remediate task to resolve the issue.