Networks Adapter integration fails with "Object Down" and 401 Unauthorized error in VCF Operations

Products

• VCF Operations

Issue/Introduction

• In VCF Operations, the Networks Adapter Integration exhibits an "Object Down" status. When attempting to test the connection for the adapter, a 401 Unauthorized error is returned.
• This issue is specifically associated with the default service account (svc_ops_ops-ni_###) failing authentication.
• Reviewing the logs will reveal the following errors:
  • In VCF Operations, /storage/log/vcops/log/web.log:

    FAIL: Test Connection failed. Error Code 401 Unauthorized. Please enter correct credentials and try again.

  • In VCF Operations for Networks, /var/log/arkin/restapilayer/restapilayer.log:

    javax.ws.rs.WebApplicationException: HTTP 401 Unauthorized
    org.apache.shiro.authc.UnknownAccountException: No account found for user [svc_ops_ops-ni_###]

Environment

• VCF Operations 9.0.x
• VCF Operations for Networks 9.0.x

Cause

The integration credentials have fallen out of sync between the components. The required service account user was either deleted, or the password was changed on the VCF Operations for Networks platform without being updated in VCF Operations.

Resolution

To resolve this issue and restore data collection, you must force the system to generate a fresh set of synchronized credentials by re-importing the platform.

 

Note: Please secure a snapshot of VCF Operations, Fleet Management and VCF Operations for Networks before proceeding.

 

Steps to follow:

1. Login to the VCF Operations UI (https://<vcfops_fqdn>/ui) as local user admin and remove the existing network integration: Administration ➔ Integrations ➔ Accounts ➔ Networks Adapter ➔ VCF OPS NI_vrni-platform ➔ Vertical ellipsis (three dots) ➔ Delete.
   Note: Do not delete the objects when removing the integration.  
2. Navigate to Administration ➔ Integrations ➔ Credentials and delete any existing credentials associated with the failing adapter.  
3. Remove Operations for Networks from Fleet Management: VCF Operations ➔ Fleet Management ➔ Lifecycle ➔ VCF Management ➔ Components ➔ Delete (operations-networks).
   Note: Do not delete the Operations for Networks VMs in vCenter during this process.
4. While the delete task is in progress, please note this sub-task completing: Stage 1: Delete Service Account in Operations-networks.
5. Re-add/re-import Operations for Networks into Fleet Management: VCF Operations ➔ Fleet Management ➔ Lifecycle ➔ VCF Management ➔ Components ➔ Add (operations-networks) ➔ Import ➔ Operations for Networks Platform IP ➔ Operations for Networks Platform Username (admin@local) ➔ Select the passwords: Platform password, Support password, Console password ➔ Select the VC to discover component ➔ Accept to import certificate ➔ Next ➔ Review the component details ➔ Submit.
6. This action will automatically generate a fresh service account (ops-ni integration credential) and synchronize the new credentials .  
7. The integration (Networks Adapter ➔ VCF OPS NI) using the newly generated credentials is re-created.