Error: "redirected you too many times" when navigating to Users and Groups page

Products

• VCF Operations

Issue/Introduction

• Navigating to the Users and Groups tab in VIDM show error:

<LB_address> redirected you too many times

• System Diagnostics Dashboard for the VIDM nodes shows error for ACS health and Application Manager

Error when connecting to the application

• In the accesscontrol-service.log (/opt/vmware/horizon/workspace/logs), the below error is observerd:

Failed to call auth server to get tenant public key for tenant: xyz123 org.apache.http.conn.HttpHostConnectException: Connect to LB_address.com:443

Environment

VMware Identity Manager 3.3.7 

Cause

Misconfiguration where the Delegate IP is identical to the Load Balancer address, combined with non-functional DNS servers

Resolution

The Delegate IP needs to be reassigned and the DNS servers need to be updated. 

NOTE: Before making any changes, take snapshots of all VIDM nodes. 

• Update the DNS servers on the VIDM nodes by following steps here: Change DNS settings on a vIDM appliance
• Update the Delegate IP on the Master node by following the below steps: 

1. Stop the opensearch service on all nodes 
   
   

   /etc/init.d/opensearch stop 

2. Disable autorecovery on all nodes
   
   

   disableAutoRecovery

3. Bring the adapter for the DelegateIP down
   
   

   ifconfig eth0:0 down

4. Edit the hosts file to update the new DelegateIP on all VIDM nodes 
   
   

   vi /etc/hosts

5. Assign the DelegateIP on the Primary node by running the below command. Update the <netmask> in the command. 
   
   

   ifconfig eth0:0 inet delegateIP netmask <NETMASK>

6. Restart Horizon service on the primary node first, wait for the command to finish, then restart on the other nodes
   
   

   service horizon-workspace restart

7. Start opensearch on all nodes 
   
   

   /etc/init.d/opensearch start

8. Run ifconfig and the new DelegateIP should show on the Primary node.