Aria Operations admin account getting locked by Aria Operations for Logs Integration
search cancel

Aria Operations admin account getting locked by Aria Operations for Logs Integration

book

Article ID: 379156

calendar_today

Updated On:

Products

VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

  • Unable to log in to the Aria Operations User Interface using the default local admin account.
  • The UI displays the error: "Incorrect Username or Password".
  • This error occurs even if you are providing the correct password. If you unlock the account, it may become locked again shortly after as the integration continues to retry with the wrong credentials.

Environment

Aria Operations 8.x

Cause

This issue occurs when Aria Operations for Logs (formerly vRealize Log Insight) is configured to integrate with Aria Operations (formerly vRealize Operations) using the default local admin account, but the password stored in the integration settings is incorrect or outdated.

This mismatch typically happens if the admin password is changed in Aria Operations but is not simultaneously updated in the Aria Operations for Logs configuration. As the integration service repeatedly attempts to authenticate with the invalid credentials, it triggers the security lockout policy in Aria Operations. Once the account is locked, even legitimate login attempts with the correct password will fail with the error "Incorrect Username or Password."

Resolution

Steps To update Aria Operations Integration:

      1. Update the password used for Aria Operations Integration:
        • Unlock the admin account Aria Operations as per kb Log in to Admin and Product UI as admin fails in Aria Operations.
        • Sign into Aria Operations for Logs UI.
        • Update the password under Integration > VMware Aria Operations. 
        • Click on the edit icon resembles clipboard with pencil.
        • Update the password to the current password for Aria Operations.
        • Save the changes.
        • Unlock the admin account Aria Operations again.

      2. Change the Account used for Aria Operations Integration.
        • Go to your Aria Operations for Logs URL and add /internal/config to the end. (IE: http://<AriaOpsforLogsFQDN>/internal/config).
        • Then do a search on the page for "vcops" and look for the user account it's using to integrate into Aria Operations.
        • Change that to anything else. It does not need to be a real account.
        • Then scroll down and click "Save." This should also stop Aria Operations from locking out the Admin account.
        • This only needs to be done once. 

      3. To change the Account used for Aria Operations integration manually in Photon, follow the steps below:

        • SSH into each node and run the command: vi $(ls /storage/core/loginsight/config/loginsight-config.xml#* | tail -n1) 
        • type the "/" key to Search for the term "vcops" and then look for the username it's using to integrate into Aria Operations, hit the "Insert" key and change that to anything else. 
        • type ":wq" to save and exit,
        • then repeat all nodes in the cluster.

      4. Restart services by running:

        service loginsight restart

      5. If Test Connection fails even after updating the password please:

        1. Check what IP address is causing the lockouts in vRealize/Aria Operations admin account getting locked even after password reset if the IP address is Aria Operations for logs please delete the integration for Aria Operations in Aria Operations for Logs and reboot the offending Aria Operations for Logs node. 
        2. Unlock the Admin account as per kb Log in to Admin and Product UI as admin fails in Aria Operations.
        3. Reconfigure the Aria Operations integration in Aria Operations for Logs.
        4. Check for certificate expiration using steps found in KB 315949.

Additional Information

Aria Operations admin account getting locked even after password reset(346009)

Powered by Wolken Software