Error "Connector communication failed with response:" while synching configured directory after applying CSP-102092 Patch to VMware Identity Manager.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Configured directory failing to sync after applying latest CSP-102092 Patch to VMware Identity Manager
• Unable to sync configured directory, failing with error "Connector communication failed with response:"
• Connector version does not update to latest and shows old version 3.3.7 Build 21173100.
• Web Application Status showing "Error when connecting to the application".
  
• The /opt/vmware/horizon/workspace/logs/connector.log showed below errors:
      Caused by: java. lang. IllegalStateException: login failed due to unexpected exception
    Caused by: sun. security. krb5. KrbException: krb5. conf loading failed
• The permissions of the /etc/krb5.conf file on the nodes are not 644
  ls -ltrh /etc/krb5.conf

Environment

• VMware Identity Manager 3.3.7

Cause

• Limited permission to the Kerberos configuration file  /etc/krb5.conf affect connector initialization. 

Resolution

Resolution:

• Take a SSH session to all VIDM nodes.
• Verify file permission for file /etc/krb5.conf on all nodes.


  ls -l /etc/krb5.conf

• If file permissions is not 644, Run below command to set permissions.
  

  chmod 644 krb5.conf

• Restart  horizon-workspace service and openSearch service.
  

  /etc/init.d/horizon-workspace restart
  /etc/init.d/opensearch restart