vCenter Permisiion denied after adding Nodes with DNS name

[NZamp]

Hello guys,

i´ve deployed 2 nodes to a new cluster and they where added with the IP instead thr DNS name. So i followed the way the support told me:

- shut down OVC

- set ESXi in maintenance mode

- disconnect host

- remove host from inventory

- add host with DNS name

-exit maintenance mode

-start OVC

- issuing the commands dsv-update-vcenter, dsv-digitalvault-init, dsv-digitalvault-update-vcenter, dsv-update-vcenter

So it worked on one of the OVCs but the other one is always showing up with the following error ($SVTLOG):

2019-10-22T12:19:09.147Z ERROR 0x7f33de609700 [:] [control.controlplane] controlplane.cpp:1712 Unable to locate the user session for Node 'ae8c3542-e086-251e-303d-4a19b079fd4b' which has vCenter Server 'vCenter-IP' from the sessions provided '1|20:vCenter:47:{SVT-T-TAG}34875b0d-f9da-4574-bca8-58836288dea6|'
2019-10-22T12:19:09.147Z ERROR 0x7f33de609700 [:] [control.svtcontrolhandler] federation.cpp:160 SvtControlHandler throws InvalidPermissions

I already issued the commands a few time but with the same result. Do i maybe miss to enter them in a certain order?

Cheers,

Nick

[tpaulat]

Hello Kevin,

what version of OmniStack are you running? There is a command to rename the node itself

svt-host-rename (vSphere only)

Syntax
svt-host-rename --from oldhostname --to newhostname [common-options]

You can find the information here: HPE OmniStack 3.7.10 Command Reference Guide  (Page 56)

Did you try the update vCenter a second time?

Please let me know if you`ve got any questions and I`m happy to assist!

With best regards

Tim Paulat

I am an HPE employee

[DaveOb]

Try adding the host back by IP 

svt-host-rename --from  hostname --to  ipaddress 

and then by DNS 

 svt-host-rename --from ipaddress  --to hostname

This will remove the ESXI from vc and add it back by either ip or dns name 

[gustenar]

In which command are you getting the error? there is no need to run dsv-update-vcenter twice if you already did it. 

I would start with dsv-digitalvault-init first and make sure this works. Then make sure you use an IP address instead of fqdn when running dsv-update-vcenter

[NZamp]

Hello Tim,

i`m running version 3.7.9

i issued the commands a few time, always with the same result, invalid permission.

dsv-session-diagnostic shows following:

.------------------------------------------------------------------------.
| Session Details |
+----------------------+-------------------------------------------------+
| Attribute | Value |
+----------------------+-------------------------------------------------+
| Ticket | {SVT-T-TAG}9a1300ae-802b-4ba5-9995-efefdbb7ab91 |
| Creation Time | October 22, 2019 12:54:43 PM GMT |
| HMS Username | VSPHERE.LOCAL\Administrator |
| Local Linux Username | administrator@vsphere |
| Logging Tag | SLT 7b211323-329f-42a5-add1-3bce1a564c41 |
| User's Roles | administrator |
| HMS IDs (IP, ID) | vCenter.dns.name, ****3775 |
'----------------------+-------------------------------------------------'
.---------------------------------.
| User Sessions Metrics |
+-------------------------+-------+
| Attribute | Value |
+-------------------------+-------+
| Active Tickets | 1 |
| Active Sessions | 1 |
| Maximum Active Tickets | 1 |
| Maximum Active Sessions | 1 |
| Expired Tickets | 0 |
'-------------------------+-------

@gustenar 

The error is showing up since i readded the host by DNS. I also tried the command one by one but the error shows up every second in $SVTLOG.

Cheers,

Nick

[gustenar]

@NZamp How are you login in to the Omnistack Controller? Are you using svtcli account? 

[NZamp]

as administrator@vsphere.local

[gustenar]

Try login in as svtcli and run the commands.

[NZamp]

Logged in as svtcli, elevated to root, issued commands again, same result

ERROR 0x7f1198f0c700 [:] [control.svtcontrolhandler] federation.cpp:160 SvtControlHandler throws InvalidPermissions

[gustenar]

Try the suggestion before of adding the node again by IP and then run the command to change name. Let us know how it goes.