Aria Automation Orchestrator AD Plugin workflow fails with LDAP Error 80090308 Data 52e

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

In VMware Aria Automation Orchestrator, the Active Directory (AD) plugin fails to load the inventory for a configured AD server. The inventory tree under Microsoft Active Directory > AD Server displays a continuous loading/spinning icon.

Attempts to execute Active Directory-related workflows fail with the following error:

 

An error occurred while retrieving computers from AD InternalError: LDAP Server returned error:80090308: LdapErr: DSID-0C090451, comment: AcceptSecurityContext error, data 52e

Environment

Aria Orchestrator 8.18.x

Cause

The LDAP error code 80090308 with sub-data 52e indicates a logon failure due to invalid credentials (unknown username or incorrect password) used by the plugin to bind to the Active Directory server.

Resolution

To resolve this issue, the credentials for the Active Directory server must be updated within the Orchestrator inventory:

1. Log in to the Aria Automation Orchestrator client.

2. Navigate to Library > Workflows.

3. Search for and select the workflow: Update an Active Directory Server.

4. Run the workflow and select the impacted AD Server instance.

5. Re-enter the correct Password for the configured shared session or per-user credentials.

6. Complete the workflow execution.

7. Verify that the AD inventory is now populated and workflows can successfully retrieve objects.

Additional Information

Common Active Directory LDAP Bind Errors