Quantcast
Channel: All Data Protection posts
Viewing all articles
Browse latest Browse all 3480

Re: Failed to create / update resource group

$
0
0

Hi -

Just a quick update in case anyone else runs into this. After reviewing the log on the vcenter appliance the vcenter user used by snapcenter plugin for vmware (SCV) did not have access to the root folder in vcenter. (Folder:group-d1) SCV plugin requires "admin" user to communicate to vcenter.

 

The other caveat is that we use multiple SSO identiies. The initial user I had used had what appeared admin access. However, the other authentication idenitiy source was not functioning. I had to pull the identity source out and put it back in for it to work on the vcenter side. Perhaps a vmware bug/issue. None the less I wanted to share this to help other if they run into this issue.

 

Pertinent info highlighted in red.

"vsphere_client_virgo.log"

 

[2018-01-24T02:44:02.560Z] [INFO ] SsoTokenRenewalExecutor-688  70006921 100181 200055 com.vmware.vsphere.client.security.sso.SsoTokenLifetimeManager    Token renewed for sessionId 100181, clientId 200055. Token expiration time: Fri Feb 23 02:44:02 GMT 2018

[2018-01-24T02:44:02.560Z] [INFO ] SsoTokenRenewalExecutor-688  70006921 100181 200055 com.vmware.vsphere.client.security.sso.SsoTokenLifetimeManager    sessionId 100181, clientId 200055, Token expiration time: Fri Feb 23 02:44:02 GMT 2018

Token renewal scheduled approximately for: Fri Feb 23 02:39:02 GMT 2018

[2018-01-24T02:44:07.189Z] [ERROR] http-bio-9090-exec-226        o.a.c.c.C.[.[localhost].[/vsphere-client/scvmUI].[springServlet]  Servlet.service() for servlet [springServlet] in context with path [/vsphere-client/scvmUI] threw exception [Request processing failed; nested exception is com.netapp.nvpf.api.model.PrivilegeException: Did not find any of the datastores or virtual machines to backup: [Folder:group-d1]] with root cause com.netapp.nvpf.api.model.PrivilegeException: Did not find any of the datastores or virtual machines to backup: [Folder:group-d1]

                at com.netapp.aegis.privilege.AegisPrivilegeValidator.hasPrivileges(AegisPrivilegeValidator.java:371)

                at com.netapp.aegis.server.AegisApiServiceImpl.hasPrivilegeCheckOnRootFolder(AegisApiServiceImpl.java:1164)

                at com.netapp.aegis.restapi.BackupRecoveryApiServiceImpl.hasPrivilegeCheckOnRootFolder(BackupRecoveryApiServiceImpl.java:1234)

                at sun.reflect.GeneratedMethodAccessor55.invoke(Unknown Source)

 

the log file is located in here on the appliance:

/var/log/vmware/vsphere-client/logs

 

I grabbed the file with WInSCP.

This link can provided details on how to copy logs from an appliance

https://blog.ukotic.net/2016/09/20/scp-to-a-vcenter-server-appliance-vcsa/

 


Viewing all articles
Browse latest Browse all 3480

Trending Articles