Downloading Binaries fails on the SDDC manager with "Unable to connect to the Depot Server"
search cancel

Downloading Binaries fails on the SDDC manager with "Unable to connect to the Depot Server"

book

Article ID: 416238

calendar_today

Updated On:

Products

VMware SDDC Manager

Issue/Introduction

  • When using VCFDT/OBTU to download binaries with secure proxy, the tool fails with  "Unable to connect to the Depot Server" 
  • The /opt/vmware/vcf/lcm/vcf-download/log/vdt.log will report the following error stack: 


YYYY:MM:DDTHH:MM:SS [main] INFO  [c.v.e.s.c.c.l.l.LogLayoutWithHeader] THIS LOG FILE IS MANAGED BY SDDC MANAGER
YYYY:MM:DDTHH:MM:SS [main] INFO  [org.springframework.core.io.support.PropertySourceProcessor]  Properties location [file:/home/vcf/feature.properties] not resolvable: \home\vcf\feature.properties (The system cannot find the path specified)
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.vcf.secure.truststore.DynamicTrustManager]  Creating DynamicTrustManager using trust store I:\ds\vcf-download-tool-9.0.0.0100.24880038\jre\win32/lib/security/cacerts
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotBundleDownloadServiceImpl]  Creating local manifest directory: C:\Users\UXXXXX/PROD/COMP/SDDC_MANAGER_VCF/tmp/manifests
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotBundleDownloadServiceImpl]  Creating local bundle directory: C:\Users\eXXXXXX/PROD/COMP/SDDC_MANAGER_VCF/tmp/bundles
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.vcf.compatibility.controllers.internal.vvs.VvsCompatibilityController]  Setting the controller to REGISTERED state as metadata is not present
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.vcf.compatibility.controllers.internal.vxrail.VxrailCompatibilityController]  Setting the controller to REGISTERED state as metadata is not present
YYYY:MM:DDTHH:MM:SS [main] INFO  [com.vmware.evo.sddc.lcm.tools.common.ConsoleUtil]  Writing to console: Version: 9.0.0.0100.24880038
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.tools.bundletransferv2.commands.processors.HostPortOptionConverter]  Validating user input: server-proxy.example.com:11443
YYYY:MM:DDTHH:MM:SS [main] INFO  [com.vmware.evo.sddc.lcm.tools.common.ConsoleUtil]  Writing to console: Configuring proxy.
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.tools.bundletransferv2.tasks.base.ProxyConfigurationTaskBase]  Defaulting to http protocol for proxy configuration
YYYY:MM:DDTHH:MM:SS [main] INFO  [com.vmware.evo.sddc.lcm.tools.common.ConsoleUtil]  Writing to console: Proxy configuration completed.
YYYY:MM:DDTHH:MM:SS [main] INFO  [com.vmware.evo.sddc.lcm.tools.common.ConsoleUtil]  Writing to console: Validating depot credentials.
YYYY:MM:DDTHH:MM:SS [main] INFO  [com.vmware.evo.sddc.lcm.tools.bundletransferv2.utils.DownloadUtil]  Validating the depot user credentials...
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]  Downloading sourceFilePath /metadata/productVersionCatalog/v1/productVersionCatalog.json from host dl.broadcom.com port 443 and user dummy_download_token_user and isOfflineDepot false
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]  Getting file size for [/metadata/productVersionCatalog/v1/productVersionCatalog.json] from URL[https://dl.broadcom.com:443/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/PROD/metadata/productVersionCatalog/v1/productVersionCatalog.json]
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]  Executing HEAD /xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/PROD/metadata/productVersionCatalog/v1/productVersionCatalog.json
YYYY:MM:DDTHH:MM:SS [main] ERROR [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]  Got exception while downloading file [/metadata/productVersionCatalog/v1/productVersionCatalog.json]: CONNECT refused by proxy: HTTP/1.1 407 Proxy Authentication Required
YYYY:MM:DDTHH:MM:SS [main] DEBUG [com.vmware.evo.sddc.lcm.tools.bundletransferv2.telemetry.TelemetryFileUtil]  Is CEIP enabled: false
YYYY:MM:DDTHH:MM:SS [main] ERROR [com.vmware.evo.sddc.lcm.tools.bundletransferv2.exceptionhandler.ExecutionExceptionHandler]  Application failed.
com.vmware.evo.sddc.lcm.tools.bundletransfer.exception.BundleTransferUtilityException: Unable to connect to the Depot Server
        at com.vmware.evo.sddc.lcm.tools.bundletransferv2.utils.DownloadUtil.validateDepotUser(DownloadUtil.java:389)
        at com.vmware.evo.sddc.lcm.tools.bundletransferv2.tasks.base.ValidateDepotCredentialsTaskBase.execute(ValidateDepotCredentialsTaskBase.java:26)
        at com.vmware.evo.sddc.lcm.tools.bundletransferv2.tasks.base.ValidateDepotCredentialsTaskBase.execute(ValidateDepotCredentialsTaskBase.java:19)
        at com.vmware.evo.sddc.lcm.tools.cli.framework.ChildCommand.executeTask(ChildCommand.java:54)
        at com.vmware.evo.sddc.lcm.tools.cli.framework.ChildCommand.run(ChildCommand.java:43)
        at picocli.CommandLine.executeUserObject(CommandLine.java:2030)
        at picocli.CommandLine.access$1500(CommandLine.java:148)
        at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2465)
        at picocli.CommandLine$RunLast.handle(CommandLine.java:2457)
        at picocli.CommandLine$RunLast.handle(CommandLine.java:2419)
        at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2277)
        at picocli.CommandLine$RunLast.execute(CommandLine.java:2421)
        at picocli.CommandLine.execute(CommandLine.java:2174)
        at com.vmware.evo.sddc.lcm.tools.cli.framework.CommandExecutor.run(CommandExecutor.java:46)
        at com.vmware.evo.sddc.lcm.tools.bundletransfer.BundleTransferUtility.main(BundleTransferUtility.java:1834)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.base/java.lang.reflect.Method.invoke(Unknown Source)
        at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:49)
        at org.springframework.boot.loader.Launcher.launch(Launcher.java:95)
        at org.springframework.boot.loader.Launcher.launch(Launcher.java:58)
        at org.springframework.boot.loader.JarLauncher.main(JarLauncher.java:65)
Caused by: com.vmware.evo.sddc.lcm.model.depot.exception.DepotConnectionFailureException: Internal error while validating credentials
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader.validateUser(DepotDownloader.java:566)
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader.validateUser(DepotDownloader.java:486)
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotBundleDownloadServiceImpl.validateUser(DepotBundleDownloadServiceImpl.java:280)
        at com.vmware.evo.sddc.lcm.tools.bundletransferv2.utils.DownloadUtil.validateDepotUser(DownloadUtil.java:377)
        ... 22 common frames omitted
Caused by: org.apache.hc.client5.http.ClientProtocolException: CONNECT refused by proxy: HTTP/1.1 407 Proxy Authentication Required
        at org.apache.hc.client5.http.impl.classic.InternalHttpClient.doExecute(InternalHttpClient.java:173)
        at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:245)
        at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:188)
        at org.apache.hc.client5.http.impl.classic.CloseableHttpClient.execute(CloseableHttpClient.java:162)
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader.getFileSize(DepotDownloader.java:198)
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader.getFileSize(DepotDownloader.java:178)
        at com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader.validateUser(DepotDownloader.java:513)
        ... 25 common frames omitted
Caused by: org.apache.hc.client5.http.impl.TunnelRefusedException: CONNECT refused by proxy: HTTP/1.1 407 Proxy Authentication Required
        at org.apache.hc.client5.http.impl.classic.ConnectExec.createTunnelToTarget(ConnectExec.java:284)
        at org.apache.hc.client5.http.impl.classic.ConnectExec.execute(ConnectExec.java:151)
        at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
        at org.apache.hc.client5.http.impl.classic.ProtocolExec.execute(ProtocolExec.java:192)
        at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
        at org.apache.hc.client5.http.impl.classic.HttpRequestRetryExec.execute(HttpRequestRetryExec.java:113)
        at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
        at org.apache.hc.client5.http.impl.classic.ContentCompressionExec.execute(ContentCompressionExec.java:152)
        at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
        at org.apache.hc.client5.http.impl.classic.RedirectExec.execute(RedirectExec.java:116)
        at org.apache.hc.client5.http.impl.classic.ExecChainElement.execute(ExecChainElement.java:51)
        at org.apache.hc.client5.http.impl.classic.InternalHttpClient.doExecute(InternalHttpClient.java:170)
        ... 31 common frames omitted
2025-10-18T07:05:16.443+0530 [main] INFO  [com.vmware.evo.sddc.lcm.tools.common.ConsoleUtil]  Writing to console:

 

Environment

VCF 5.x 

VCF 9.x 

Cause

This issue occurs because the secure proxy is expecting credentials passed via Kerberos authentication, but VCFDT/OBTU passes the credentials using Basic Auth. 

 

Resolution

To resolve the issue, ensure that the secure proxy supports  Basic and NTLMv1 as an Authentication method . 

Refer to the Techdocs: VCF Download Tool Binaries Commands and Options for the documented Supported Authentication methods. 

Powered by Wolken Software