LDAP Authentication failing in VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

• User reports LDAP Authentication failing with error message "Unable to login" 
  
  See error message seen on GUI
  
  
  
  
• LDAPs is configured in VCF Operations for Networks GUI with port 3269, see screenshot below:
  
  
  
  
  
• From logs located at /var/log/restapilayer/restapilayer.STDOUT-YYYY-MM-DD-17.15.01.log.error shows  entries  logged as below:
  
  

  2025-11-10T07:34:05.612Z INFO vnera.restapilayer.AuthRealmManager dw-1542145 - POST /ni/auth/token autoAcceptCertificateLDAP:1029 Successfully updated certificate for LDAP
  
  2025-11-10T07:34:05.614Z WARN vnera.restapilayer.ArkinJndiLdapRealm dw-1542145 - POST /ni/auth/token getLdapContext:561 failed login on url=ldaps://######.###.###.com:3269 hostInfo=######.###.###.com/##.###.###.## principal=svc_#####auth
  
  2025-11-10T07:34:05.614Z WARN vnera.restapilayer.ArkinJndiLdapRealm dw-1542145 - POST /ni/auth/token getLdapContext:561 failed login on url=ldaps://######.###.###.com:3269 hostInfo=######.###.###.com/##.###.###.## principal=svc_#####auth
  

  
   

Environment

VCF Operations for Networks 6.13.0
VCF Operations for Networks 6.14.0
VCF Operations for Networks 6.14.1

Cause

LDAP and LDAPs in Aria Operations for Networks is supported with port 389 and 636.
Port 3296 is LDAPs with TLS which is not tested and supported as of today.

Resolution

LDAP and LDAPs with port 389 and 636 respectively are officially supported.

1. Reconfigure LDAP/LDAPs service and with port 389 or 636

2. Reconfigure LDAP in Aria Operations for Networks with either of the above ports. Refer to Documentation Configure Lightweight Directory Access Protocol (LDAP)

Refer to Port and Protocol document: https://ports.broadcom.com/home/vRealize-Network-Insight+VMware-Aria-Operations-for-Networks

 

Additional Information