Automatic discovery of vCloud Director fails when configuring the vCloud Availability vApp Replication Manager

Products

VMware Cloud Director

Issue/Introduction

Symptoms:

When configuring the vCloud Availability vApp Replication Manager, the automatic discovery for vCloud Director fails and you see the following error:

The provided credentials are not valid.

In /opt/vmware/h4/cloud/log/cloud.log on the vCloud Availability vApp Replication Manager, you see similar messages:

2019-04-23 17:12:50.978 INFO - [UI__07104426-27a3-480c-a660-fefe16049518_aZ] [https-jsse-nio-8443-exec-3] c.v.identity.token.impl.SamlTokenImpl : SAML token for SubjectNameId [[email protected], format=http://schemas.xmlsoap.org/claims/UPN] successfully parsed from Element
2019-04-23 17:12:51.015 INFO - [UI__07104426-27a3-480c-a660-fefe16049518_aZ] [https-jsse-nio-8443-exec-3] c.v.v.s.c.impl.SecurityTokenServiceImpl : Successfully acquired token for user: [email protected]
2019-04-23 17:12:52.103 ERROR - [UI__07104426-27a3-480c-a660-fefe16049518_aZ] [https-jsse-nio-8443-exec-3] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from root[172.27.2.204] to /config/check-vcloud failed.

com.vmware.h4.exceptions.common.InvalidCredentialsException: The provided credentials are not valid.
at com.vmware.h4.cloud.service.ConfigService.validateVcdEndpoint(ConfigService.java:235)
at com.vmware.h4.cloud.controller.ConfigController.validateVcdEndpoint(ConfigController.java:109)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:189)
at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:138)
at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:102)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:895)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:800)
at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)
at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1038)
at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:942)
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1005)
at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:908)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:665)

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware Cloud Director for Service Provider 9.x
VMware vCloud Availability 3.0.x

Cause

This issue can occur when the SAML user used for registering the vCloud Availability components with the lookup service does not exist in vCloud Director.

Resolution

To resolve this issue, perform the following steps:

In a browser, log into the vCloud Director Flex client.
Navigate to System > Administration > Federation.
Under vSphere Services, click Register.
In the pop-up window, enter the vSphere Lookup Service and user information then click OK.
Configure the Identity Provider information by following the Configure vCloud Director to use the vSphere SSO SAML provider section of the vCloud Director documentation.
Navigate to System > Administration > Users.
Click the Import Users... icon.
Enter the SSO user you wish to import and click OK.

Additional Information

For more information on importing users into vCloud Director, see the Import a System Administrator section of the vCloud Director documentation.