Adding a powerShell Host using the Orchestrator plugin for powerShell workflow throws error "Connect timed out"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When attempting to run the "Add a PowerShell host" or "Update a PowerShell host" workflow in VMware Aria Automation Orchestrator (vRO) fails with an authentication error.

Error:'Add a PowerShell host/item8', state: 'failed', business state: 'null', exception: 'No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Connect timed out)) (Dynamic Script Module name : addPowerShellHost#30)'

Environment

Aria Orchestrator 8.x 

Cause

This issue occurs when the Key Distribution Center (KDC) servers configured in the Orchestrator appliance are inaccessible, invalid, or experiencing network connectivity issues.

Resolution

To resolve this issue, verify and update the Kerberos configuration on the Orchestrator appliance using the command below

Take SSH to the Aria Automation Orchestrator node

cat /data/vco/usr/lib/vco/app-server/conf/krb5.conf

If the conf contains an inaccessible or invalid KDC server, modify and save the conf file by following the steps from the document (Configure Kerberos authentication for Automation Orchestrator plug-ins)

Note: After making any changes to the krb5.conf file, make sure that the orchestrator pods are restarted for the changes to take effect, and then try to add the PowerShell host.