OVF エクスポートが UNAUTHENTICATED/INTERNAL_SERVER_ERROR により失敗する
search cancel

OVF エクスポートが UNAUTHENTICATED/INTERNAL_SERVER_ERROR により失敗する

book

Article ID: 437126

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

免責事項：これは英文の記事「 OVF export failed due to UNAUTHENTICATED/INTERNAL_SERVER_ERROR 」の日本語訳です。記事はベストエフォートで翻訳を進めているため、ローカライズ化コンテンツは最新情報ではない可能性があります。最新情報は英語版の記事で参照してください。

OVF のエクスポートおよびインポートが、以下のエラーで失敗します：

Provider method implementation threw unexpected exception: com.vmware.vapi.std.errors.Unauthenticated: Unauthenticated (com.vmware.vapi.std.errors.unauthenticated) =&gt; {<br/>    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) =&gt; {<br/>    id = vapi.security.authentication.invalid,<br/>    defaultMessage = Unable to authenticate user,<br/>    args = [],<br/>    params = &lt;null&gt;,<br/>    localized = &lt;null&gt;<br/>}],<br/>    data = &lt;null&gt;,<br/>    errorType = UNAUTHENTICATED,<br/>    challenge = &lt;null&gt;<br/>}

 

/var/log/vmware/content-library/cls.log

YYYY-MM-DDTHH:MM:SS.000Z | ERROR    | xxxxxx-xxx-xxxx-xx-xx:xxxxx-xx-xx | cls-simple-activity-20    | ExportSessionActivity          | Creation of transfer session failed
com.vmware.vapi.std.errors.InternalServerError: InternalServerError (com.vmware.vapi.std.errors.internal_server_error) => {
    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
    id = vapi.bindings.method.impl.unexpected,
    defaultMessage = Provider method implementation threw unexpected exception: com.vmware.vapi.std.errors.Unauthenticated: Unauthenticated (com.vmware.vapi.std.errors.unauthenticated) => {
    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
    id = vapi.security.authentication.invalid,
    defaultMessage = Unable to authenticate user,
    args = [],
    params = <null>,
    localized = <null>
}],
    data = <null>,
    errorType = UNAUTHENTICATED,
    challenge = <null>
},

Environment

VMware vCenter Server 7.x
VMware vCenter Server 8.x

Cause

この問題は、複数の STS 署名証明書が存在する場合に発生する可能性があります。

cn=vsphere.local,cn=Tenants,cn=IdentityManager,cn=Services,dc=vsphere,dc=local

以下のトレースが /var/log/vmware/applmgmt/applmgmt.log で確認できます：

Traceback (most recent call last):
  File "/usr/lib/applmgmt/vapi/py/vmware/appliance/vapi/auth.py", line 243, in authenticate
    username = token.username
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 487, in username
    return self.get_name_id().value
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 940, in get_name_id
    '//saml2:Subject/saml2:NameID', self.reference)
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 478, in reference
    self.validate()
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 1170, in validate
    reference = super(HolderOfKeyToken, self).validate()
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 506, in validate
    signing_chain = self.validate_certificate()
  File "/usr/lib/applmgmt/lib/extensions/py/vmware/appliance/extensions/authentication/authentication_sso.py", line 686, in validate_certificate
    'One or more certificates cannot be verified.')
vmware.appliance.extensions.authentication.authentication_sso.AuthenticationError: One or more certificates cannot be verified.

Resolution

STS 証明書を置き換え、すべてのサービスを再起動することで問題を解決してください。

Additional Information

 

Powered by Wolken Software