AD user authentication fails with an "Incorrect user name or password" error in VCF Operations
search cancel

AD user authentication fails with an "Incorrect user name or password" error in VCF Operations

book

Article ID: 444342

calendar_today

Updated On:

Products

VCF Operations

Issue/Introduction

A user is unable to log in to VMware Cloud Foundation (VCF) Operations (formerly Aria Operations) Product UI using their Active Directory credentials. The VCF Operations UI displays the following error message on the login screen: "Incorrect user name/password".

 


Reviewing the /storage/vcops/log/analytics.audit-*.log and /storage/vcops/log/analytics-*.log files on the data node reveals fault strings similar to the following:

analytics.audit-<REDACTED_SECRETS>.log:YYYY-MM-DDTHH:MM:SS.MSZ INFO  audit ###### [ops@#### threadId="######" userId="n/a" username="<REDACTED_PII>" authSource="All vCenters" session="n/a" clientIP="<REDACTED_IPS>" auditID="AUTHENTICATION_LOGIN"] [AuditLog.log] - Log in failed. Due to the following error: "User entered domain didn't match VC domains".
analytics.audit-<REDACTED_SECRETS>.log:YYYY-MM-DDTHH:MM:SS.MSZ INFO  audit ###### [ops@#### threadId="######" userId="n/a" username="<REDACTED_PII>" authSource="All vCenters" session="n/a" clientIP="<REDACTED_IPS>" auditID="AUTHENTICATION_LOGIN"] [AuditLog.log] - Log in failed. Origin: "UI". Due to the following error: "Invalid credentials".
analytics-<REDACTED_SECRETS>.log:YYYY-MM-DDTHH:MM:SS.MSZ ERROR analytics ###### [ops@#### threadId="######" threadName="ServerConnection on port #### Thread ######"] [com.vmware.vcops.auth.server.authN.AbstractVCLoginWithUsernamePasswordExecutor.failNoMatchingVC] - Invalid Credentials for vc user: <REDACTED_PII>, User entered domain didn't match VC domains
analytics-<REDACTED_SECRETS>.log:YYYY-MM-DDTHH:MM:SS.MSZ WARN  analytics ######[ops@#### threadId="######" threadName="ServerConnection on port ###### Thread ######"] [com.vmware.vcops.auth.server.UserAuthenticationServer.handleAuthenticationFail] - Authentication Failed. Error: Invalid credentials: userId n/a, username <REDACTED_PII>

 

Environment

VMware Cloud Foundation (VCF) Operations 9.x
Aria Operations 9.x

Cause

The authentication failure occurs because the credential payload is being routed to the default vCenter Server SSO identity provider instead of the configured Active Directory authentication source. This happens when the "Authentication Source" dropdown menu on the login screen is left on the default "All vCenters" option while a user inputs an Active Directory User Principal Name (UPN) suffix that does not match the local vSphere SSO domain.

Resolution

  1. Navigate to the VCF Operations login page.
  2. Locate the Authentication Source dropdown menu situated directly below the Username and Password fields.
  3. Change the selection from All vCenters to the specific name of the configured Active Directory integration source.
  4. Enter the correct Active Directory credentials and proceed to log in.

Additional Information

Active Directory users fail to log in to VMware Aria Operations

Powered by Wolken Software