Error: "Password expired: [Number] day(s) ago. Password needs to be changed to proceed." in Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

While monitoring the Security - Authentication dashboard for the Aria Operations Content Pack in Aria Operations for Logs, query of the Security related messages over time grouped by cluster role widget displays password expiry logs despite admin and root accounts functioning correctly. The error observed is: Password expired: [Number] day(s) ago. Password needs to be changed to proceed.

[Image Description: Screenshot of the query ran from Aria Operations for Logs Security - Authentication dashboard - Security related messages widget with the password expired error.]

 

Environment

Aria Operations 8.18.x

Aria Operations for Logs 8.18.x

Cause

The Aria Operations admin account password has become misaligned between the local OS and the application layer. This discrepancy causes internal application-layer authentication failures for components such as the Gemfire Function Executor, which triggers the lockout policy and generates password expiry logs in connected services like Aria Operations for Logs.

Resolution

1. Ensure that the account is not locked out by following "Incorrect User name/Password" error during Admin and Product UI login in VMware Aria Operations.
2. Identify source of account lockout by following Aria Operations admin account getting locked even after password reset.
3. Unlock the account again if needed by following Step 1.
4. Update the admin password by following How to Reset the Admin Password in VMware Aria Operations / VCF Operations.
5. The password expiry logs should not be showing up again.