VMware Identity Manager UI is inaccessible via VIP and displays a red box error

Products

• VCF Operations

Issue/Introduction

• The VMware Identity Manager UI is inaccessible and displays a red box error when accessed via VIP FQDN
  

• Access issues persist even after releasing Liquibase database locks and verifying directory permissions.

• The /opt/vmware/horizon/workspace/logs/horizon.log records the following events when attempting to access the UI:

  Caused by: org.postgresql.util.PSQLException: The connection attempt failed.
  .....
  Caused by: java.net.NoRouteToHostException: No route to host (Host unreachable)

Environment

VMware Identity Manager 3.3.7

Cause

This fault condition is triggered when the Pgpool-II Watchdog service fails to bind the delegateIP to the active primary database node within the Workspace ONE Access cluster, resulting in an unrouteable path to the PostgreSQL persistence layer.

Confirm the delegateIP assignment by running following command on all the cluster nodes:

ifconfig eth0:0 | grep 'inet addr:' | cut -d: -f2

Resolution

To resolve this issue, assign the delegateIP to the primary node in the cluster.

1. SSH into the primary node of the Workspace ONE Access cluster.

2. Verify whether the delegateIP is currently assigned by executing the following command:

   ifconfig eth0:0 | grep 'inet addr:' | cut -d: -f2

3. If the command returns no output (indicating the IP is not assigned), assign the delegateIP to the primary node manually using this command:

   ifconfig eth0:0 inet delegateIP netmask <Netmask>

   Note: delegateIP is a keyword and need not be substituted with the actual IP. You only need to replace <Netmask> with your actual netmask value.

4. Restart horizon service on all the nodes:

   service horizon-workspace restart

5. Navigate to the VMware Identity Manager URL to confirm the UI is now accessible.