VCF Operations for Networks 9.0.0 fails to export PDF and CSV from GUI when using vIDM admin logins accounts

Products

• VCF Operations for Networks

Issue/Introduction

1. VCF Operations for Networks 9.0.0 fails to export PDF and CSV from GUI. Over all export functionality(CSV and PDF) is not working including Configured Firewall Rules for VMs
2. User affected are only vIDM Admin users and VCF SSO users. This issue is not seen with local user admin@local
3. This issue is seen with export of both PDF and CSV files from GUI. 
4. GUI shows  401 unauthorized exception.  
   Refer to error screenshot as below:
   
   
   
   
5. From platform logs at location /var/log/arkin/restapilog/latest.log below entry can be seen.
   
   

   025-09-11T19:37:36.000310Z ERROR restapilayer 8417 [netw@4413 class="vnera.restapilayer.SessionUtils" thread="dw-718501 - POST /pdfexport" method="validateCsrfToken" line="245"] CSRF tokens are wrong. Subject=org.apache.shiro.web.subject.support.WebDelegatingSubject@39def312, internal:############== user: ############==

   
   
   

Environment

VCF Operations for Networks 9.0.0 and 9.0.1

Cause

For vidm, csrf token is managed by backend server BE and set in browser based on redirection from vIDM/ VCF SSO users

VCF Networks for Operations GUI reads this cookie and saves the csrf token in its session for pdf and csv exports.

The Outbound Network Share plugin cannot connect to file shares that were previously functioning correctly. As a result, the CSV/PDF reports are not exported to the remote network share.

 

Resolution

This is a known issue affecting VCF Operations for Networks 9.0.x. There is currently no resolution.

As of now, no workaround is available for affected vIDM/ VCF SSO users. Local user admin@local can be used to download the CSV and PDF.

Fix is available in VCF Operations for Networks version 9.0.2

 

Additional Information

See VCF Operation for Networks 9.0.2  Release Notes

Similar issue: Attempting to download a previously generated VCF Operations for Networks 9.0.x support bundle sometimes results in a "HTTP 401 Unauthorized" error being generated

Please subscribe to this KB.