Error: "You are not authorized to view this page" when trying to log in to the SDDC Manager UI
search cancel

Error: "You are not authorized to view this page" when trying to log in to the SDDC Manager UI

book

Article ID: 449928

calendar_today

Updated On:

Products

VMware SDDC Manager / VCF Installer

Issue/Introduction

  • VCF inventory synchronization fails with the error code LCMVCF19112



  • When accessing the SDDC Manager UI, the user is redirected to the Management domain vCenter. After authentication is completed using a local Single Sign-On (SSO) administrator account (e.g., [email protected]), the following error message is displayed on the screen:
    You are not authorized to view this page

  • The following error snippets are observed on the SDDC Manager in the respective service logs:

    • /var/log/vmware/vcf/domainmanager/domainmanager.log:

      YYYY-MM-DDTHH:MM:SS DEBUG [vcf_dm,####,####] [c.v.v.d.t.s.DomainManagerEdgeClusterWfMetricScheduler,vac-scheduler-1]  Trigger complete.
      YYYY-MM-DDTHH:MM:SS DEBUG [vcf_dm,####,####] [c.v.v.d.s.i.DomainCapabilitiesServiceImpl,vac-scheduler-1]  Get domain Capabilities domainIds null, capabilities null, fetchCapabilitiesInParallel false
      YYYY-MM-DDTHH:MM:SS ERROR [vcf_dm,####,####] [o.s.s.s.TaskUtils$LoggingErrorHandler,vac-scheduler-1]  Unexpected error occurred in scheduled task com.vmware.evo.sddc.common.services.error.SddcManagerServicesIsException: Workload Domain Details Not Found.

       

    • /var/log/vmware/vcf/operationsmanager/operationsmanager.log:

      YYYY-MM-DDTHH:MM:SS ERROR [vcf_om,####,####] [c.v.v.p.helper.EntityBuilderHelper,pool-10-thread-1] Unable to get all domain details from inventory, reason - status code 502, response body
      <html>
      <head><title>502 Bad Gateway</title></head>
      <body>
      <center><h1>502 Bad Gateway</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      com.vmware.cloud.foundation.rest.commonsvcs.runtime.ApiException: Bad Gateway
              at com.vmware.cloud.foundation.rest.commonsvcs.runtime.ApiClient.handleResponse(ApiClient.java:788)
              at com.vmware.cloud.foundation.rest.commonsvcs.runtime.ApiClient.execute(ApiClient.java:708)
              at com.vmware.cloud.foundation.rest.commonsvcs.service.InventoryServiceApi.getDomainsWithHttpInfo(InventoryServiceApi.java:5001)
      YYYY-MM-DDTHH:MM:SS INFO  [vcf_om,####,####] [c.v.v.t.services.TaskPublisher,om-scheduler-1] Querying completed tasks after YYYY/MM/DD HH:MM:SS
      YYYY-MM-DDTHH:MM:SS WARN  [vcf_om,####,####] [c.v.v.t.services.TaskPublisher,om-scheduler-1] Failed to update vCenter tasks com.vmware.vcf.rest.api.runtime.ApiException: java.net.SocketTimeoutException: Connect timed out

       

    • /var/log/vmware/vcf/commonsvcs/vcf-commonsvcs.log:

      YYYY-MM-DDTHH:MM:SS ERROR [common,####,####] [c.v.v.i.sync.utils.VcSyncManagerUtil,cs-exec-8] Error connecting to vCenter <vCenter FQDN>, with exception {} 
      com.vmware.vcf.secure.config.SecurityConfigException: Fail to retrieve security configuration.

Environment

VMware Cloud Foundation (VCF) 9.0.x
VMware SDDC Manager 9.0.x

Cause

Internal SDDC Manager services become unresponsive, resulting in 502 Bad Gateway errors, SocketTimeoutException failures, and a localized inability to retrieve security configurations or communicate with the Management domain vCenter.

Resolution

Follow the steps below to resolve the issue:

  1. Connect to the SDDC Manager appliance via SSH or the virtual machine console.

  2. Perform a graceful reboot of the SDDC Manager appliance.

  3. Allow several minutes for all SDDC Manager services to initialize and start completely.

  4. Navigate back to the SDDC Manager UI and verify that the authentication and login process completes successfully.