Unable to see tags in VMWare_vCenter Plugin with error 401
3003
Created On 10/25/23 16:30 PM - Last Modified 10/25/23 16:33 PM
Symptom
- After performing sync from panorama CLI "request plugin vmware_vcenter sync", user still cannot pull tags
- CLI command less plugin-log vmware_vcenter.log shows the below errors
Plugin_vmware_vcenter.log
=====================================================================================
2021-07-19 18:06:01.353 +0000 INFO: Staring daemon vcenter-tag-proc of vmware_vcenter
2021-07-19 18:06:01.411 +0000 INFO: IPC thread started for vcenter-tag-proc
2021-07-19 18:06:01.659 +0000 INFO: Staring daemon vcenter-tag-ret of vmware_vcenter
2021-07-19 18:06:01.660 +0000 INFO: IPC thread started for vcenter-tag-ret
2021-08-06 13:17:11.234 +0000 ERROR: : Unable to login to vCenter vcenter.celanese.com - status_code 401, reason Unauthorized, error: {"type":"com.vmware.vapi.std.errors.unauthenticated","value":{"messages":[{"args":[],"default_message":"Authentication required.","id":"com.vmware.vapi.endpoint.method.authentication.required"}]}}
2021-08-06 13:17:11.240 +0000 ERROR: : Unable to connect to vCenter vcenter.celanese.com, please make sure login information is correct and then commit
=====================================================================================
2021-07-19 18:06:01.353 +0000 INFO: Staring daemon vcenter-tag-proc of vmware_vcenter
2021-07-19 18:06:01.411 +0000 INFO: IPC thread started for vcenter-tag-proc
2021-07-19 18:06:01.659 +0000 INFO: Staring daemon vcenter-tag-ret of vmware_vcenter
2021-07-19 18:06:01.660 +0000 INFO: IPC thread started for vcenter-tag-ret
2021-08-06 13:17:11.234 +0000 ERROR: : Unable to login to vCenter vcenter.celanese.com - status_code 401, reason Unauthorized, error: {"type":"com.vmware.vapi.std.errors.unauthenticated","value":{"messages":[{"args":[],"default_message":"Authentication required.","id":"com.vmware.vapi.endpoint.method.authentication.required"}]}}
2021-08-06 13:17:11.240 +0000 ERROR: : Unable to connect to vCenter vcenter.celanese.com, please make sure login information is correct and then commit
Environment
- Panorama using vmware_vcenter plugin
Cause
- vCenter permission issues.
- Plugin polling timeout.
Resolution
- Check the format of password and change the password to not include special character such as $, _, etc..
- In order to ensure plugin user account has sufficient privilege to pull all tags, the account needs to be a local user assigned to the vcenter level hierarchy.
- Switch the user to an Administrator if possible, even as a test.
- Check vcenter to see if there was a port group being trunked and exclude source VMs utilizing the trunked port group or configure the VMs to not use trunked port group
- Ensure that source VMs are all powered on