VMware identity Manager(VIDM) Remediate Operation Fails with Error LCMVIDM74074

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When attempting to perform a VIDM Remediate operation from VMware Aria Suite Lifecycle (LCM), the process fails with error
  
  Error Code: LCMVIDM74074
Error checking VMware Identity Manager node patch level.
vIDM pgpool cluster patch precheck failed on the host :##.#.###.##
  
  
• Additionally, the LCM log file /var/log/vrlcm/vmware_vrlcm.log contains the following exception:
  

  com.vmware.vrealize.lcm.common.exception.LcmException: vIDM pgpool cluster patch precheck failed on the host :##.#.###.## at com.vmware.vrealize.lcm.vidm.core.task.pgpool2.VidmClusterPatchPrecheckTask.execute(VidmClusterPatchPrecheckTask.java:125) at com.vmware.vrealize.lcm.vidm.core.task.pgpool2.VidmClusterPatchPrecheckTask.retry(VidmClusterPatchPrecheckTask.java:133) at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:60)at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source)

  ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u.SessionHolder] -- SessionHolder.newSession Exception encountered
com. jcraft . jsch. JSchException: Auth fail for methods 'publickey, password'

  ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u. SshUtils]'publickey, password'
ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.u. SshUtils] -- JSchException encountered
ERROR vrlcm[1266] [pool-3-thread-18] [c.v.v.l.v.c.u. VidmPgpoolUtil] -- Exception while validating SSH root credentials of the vIDM host - ##.#.###.##
com. vmware. vrealize. lcm. util. exception. SshAuthenticationFailureException: Cannot execute ssh commands on the host - ##.#.###.##, validate the SSH login credentials.
-- Exception cause : com. jcraft. jsch. JSchException: Auth fail for methods

Environment

Aria Suite Lifecycle 8.18.x
VMware identity Manager 3.3.7

Cause

This issue occurs when the password for the VIDM nodes are rotated outside of LCM while the VIDM cluster is in an unhealthy state. This causes a mismatch between the stored password in Aria Suite Lifecycle and the actual password on the VIDM nodes, leading to the failure of the Remediate operation

Resolution

To resolve this issue, follow these steps:

1. Set the same old password that was previously used for the VIDM in Aria Suite Lifecycle on all VIDM nodes.
   
   Note: By default, the VIDM nodes remember the last 6 passwords. To update the policy, generate a random password on the VIDM and then set the old password (available in Aria Suite Lifecycle) for all VIDM nodes.
   
   
2. After resetting the password, retry the remediate task to resolve the issue.