Setting up a new vCenter server. Per the docs, it seems I should install vCO on a separate machine (but the DB will be on the same DB server as the vCenter DB)

I'm following the instructions and I'm not sure what to do at the DB setup part.

If I choose vDB as the type, i can't connect to anything (even though I created a DSN the same way I did for the vcenter server install)

If I choose SQLServer, I can connect but then am prompted to create the tables.

In my situation, should I be going with vDB or SQLServer and if it's the latter, is it normal to see the option to create the schema? (I thought it would have been done during the vcenter install)

I'm not expecting heavy use of vCO so I'm just wondering if it's worth it to install on a separate machine or just lave it on the vcenter machine?

Thanks

Hi there,

I am attempting to run a workflow via REST, but so far I am unable to get past SSO authentication.

My code is as follows:

VcoSessionFactory sessionFactory = new DefaultVcoSessionFactory(new URI("https://<Server>:8281/api"));

Authentication authentication = null;

try

{logger.log(3, "Before SSO Auth");

    SsoAuthenticator authenticator = new SsoAuthenticator(new URI("https://<auth server>:7444/ims/STSService?wsdl"), sessionFactory, 1800);

logger.log(3, "Got past SSO Suth");

    authentication = authenticator.createSsoAuthentication("uname", "pass");

}

catch(IOException e)

{

    logger.log(3, e.toString());

    throw new RuntimeException("unable to authenticate to SSO", e);

}

catch(URISyntaxException e)

{

    logger.log(3, "Danger will robinson DANGER");

}

logger.log(3,authentication.toString());

VcoSession session = sessionFactory.newSession(authentication);

logger.log(3,session.toString());

With the following error:

java.lang.RuntimeException: SSO server error

        at com.vmware.o11n.sdk.rest.client.impl.SsoTokenServiceAdaptor.handleSso

Exception(SsoTokenServiceAdaptor.java:105)

        at com.vmware.o11n.sdk.rest.client.impl.SsoTokenServiceAdaptor.acquireHo

kToken(SsoTokenServiceAdaptor.java:56)

        at com.vmware.o11n.sdk.rest.client.SsoAuthenticator.createSsoAuthenticat

ion(SsoAuthenticator.java:154)

        at doppler_API.firstRest(doppler_API.java:180)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

        at java.lang.reflect.Method.invoke(Unknown Source)

        at com.nimsoft.nimbus.NimProbeBase.activateOnTimer(NimProbeBase.java:425

)

        at com.nimsoft.nimbus.NimProbeBase.activateOnTimer(NimProbeBase.java:392

)

        at com.nimsoft.nimbus.NimProbe.doForever(NimProbe.java:409)

        at doppler_API.doit(doppler_API.java:107)

        at doppler_API.main(doppler_API.java:62)

Caused by: com.vmware.vim.sso.client.exception.InternalError: Cannot sign reques

t message

        at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestRespon

seProcessor.executeRoundtrip(SecurityTokenServiceImpl.java:601)

        at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl.acquireToken(

SecurityTokenServiceImpl.java:116)

        at com.vmware.o11n.sdk.rest.client.impl.SsoTokenServiceAdaptor.acquireHo

kToken(SsoTokenServiceAdaptor.java:54)

        ... 11 more

Caused by: com.vmware.vim.sso.client.impl.exception.SignatureException: Error wh

ile creating SOAP request signature

        at com.vmware.vim.sso.client.impl.signature.WsSecuritySignatureImpl.sign

(WsSecuritySignatureImpl.java:140)

        at com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestRespon

seProcessor.executeRoundtrip(SecurityTokenServiceImpl.java:591)

        ... 13 more

Caused by: java.security.NoSuchAlgorithmException: unsupported algorithm

        at org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory.newSignatureMeth

od(Unknown Source)

        at com.vmware.vim.sso.client.impl.signature.WsSecuritySignatureImpl.getS

ignatureMethod(WsSecuritySignatureImpl.java:217)

        at com.vmware.vim.sso.client.impl.signature.WsSecuritySignatureImpl.sign

(WsSecuritySignatureImpl.java:113)

        ... 14 more

Perhaps someone could provide an example of successful authentication.

Thanks for your assistance.

I am working with vco client v4.2.1 and I am still finding the VC:VirtualMachinePowerState chooser is empty.

Can anyone please help in this regard?

Have anyone tried creating seSparseFormat linked clones using vCO 5.1?

I followed instructions in William Lam's blog at virtuallyGhetto: Creating SE Sparse Linked Clones Using the vSphere 5.1 API but when I execute my workflow vCenter Server is responding "The specified delta disk format 'seSparseFormat' is not supported."

Source VM does not have seSparseFormat VMDK, it is with normal virtual hardware v9 thin disk with active snapshot, although VM does have cbrc digest enabled.

Here is quick and dirty code I am testing with at the moment.

var disk = new VcVirtualMachineRelocateSpecDiskLocator();

disk.datastore = datastore;

disk.diskId = 2000;

disk.diskMoveType = "createNewChildDiskBacking";

disk.diskBackingInfo = new VcVirtualDiskFlatVer2BackingInfo();

disk.diskBackingInfo.fileName = "[" + datastore.name + "]" + vmName + "/" + vmName + ".vmdk";

disk.diskBackingInfo.diskMode  = "persistent";

disk.diskBackingInfo.deltaDiskFormat = "seSparseFormat";

var diskLocator = new Array();

diskLocator.push(disk);

relocateSpec = System.getModule("com.vmware.library.vc.vm.spec").getRelocateSpec(datastore, diskLocator, host, resourcePool, transform);

Have I missed something or has seSparseFormat been disabled in vCenter Server 5.1 update 1 API?

Hi,

I upgraded the vCenter and vCO Appliance in 5.1 Update 1 but I have a big probleme with the vCO configuration.

In first time the Appliance lose the DNS server and don't communicate with my vcenter, I tried to reconfigure the vco (remove/add cert, unregistered vcenter,etc.) but now I have a pb with the license (see screenshot vCO error1)

And I have a second error with the vcenter plugin now (see screenshot vCO error2)

If anyone have an idea ?

Rgds

Jeremie

Hi,

I am trying to get the object created (dvportgroup object) by the addDVPortgroup_Task.

dvPortgroupCreationTask = dvSwitch.addDVPortgroup_Task(specArray);

Is there anyway of getting the port group object without searching the switch for the name of the new port group.

Is there any parameter of the this task that contains the object or the moref of the object.

The reason I am trying to do it this way is I have over 200 portgroups and growing and this operation happens several times a day. So the less time spent searching for port groups the better.

Thanks.

Sean

Hi,

I have written a workflow to retrieve QuickStats for virtual machines it works fine for all vCenter virtual machines except virtual machine’s those are contains in the vAPps(virtual Appliance).

Script for my workflow is herein

var resContentAsString = “”;

resContentAsString='<?xml version="1.0" encoding="UTF-8"?>';

resContentAsString='<virtualmachinesquickstats>';

resContentAsString=’<title> VirtualMachines Quickstats</title>';

resContentAsString='<vm name=\"'+virtualMc.name+'\">';

resContentAsString='<balloonedMemory value=\"'+virtualMc.summary.quickStats.balloonedMemory+'\" />';

resContentAsString='<compressedMemory value=\"'+virtualMc.summary.quickStats.compressedMemory+'\" />';

resContentAsString='<consumedOverheadMemory value=\"'+virtualMc.summary.quickStats.consumedOverheadMemory+'\" />';

resContentAsString='<distributedCpuEntitlement value=\"'+virtualMc.summary.quickStats.distributedCpuEntitlement+'\" />';

resContentAsString='<distributedMemoryEntitlement value=\"'+virtualMc.summary.quickStats.distributedMemoryEntitlement+'\" />';

resContentAsString='<guestMemoryUsage value=\"'+virtualMc.summary.quickStats.guestMemoryUsage+'\" />';

resContentAsString='<hostMemoryUsage value=\"'+virtualMc.summary.quickStats.hostMemoryUsage+'\" />';

resContentAsString='<overallCpuDemand value=\"'+virtualMc.summary.quickStats.overallCpuDemand+'\" />';

resContentAsString='<overallCpuUsage value=\"'+virtualMc.summary.quickStats.overallCpuUsage+'\" />';

resContentAsString='<privateMemory value=\"'+virtualMc.summary.quickStats.privateMemory+'\" />';

resContentAsString='<sharedMemory value=\"'+virtualMc.summary.quickStats.sharedMemory+'\" />';

resContentAsString='<ssdSwappedMemory value=\"'+virtualMc.summary.quickStats.ssdSwappedMemory+'\" />';

resContentAsString='<staticCpuEntitlement value=\"'+virtualMc.summary.quickStats.staticCpuEntitlement+'\" />';

resContentAsString='<staticMemoryEntitlement value=\"'+virtualMc.summary.quickStats.staticMemoryEntitlement+'\" />';

resContentAsString='<swappedMemory value=\"'+virtualMc.summary.quickStats.swappedMemory+'\" />';

resContentAsString='<uptimeSeconds value=\"'+virtualMc.summary.quickStats.uptimeSeconds+'\" />';

resContentAsString='</vm>';

resContentAsString = '</virtualmachinesquickstats>';

System.log(resContentAsString);

Please lets me know whats wrong in my workflow.

--AVR

I have been encountering an issue for some time now where long running workflows (2+ weeks) will fail after the executing user changes their Active Directory account password and we either reboot the Orchestrator virtual appliance or restart the Orchestrator services on the appliance. We have configured the appliance to communicate with vCenter using a shared session and this functions without any problems (this password isn't changed nearly as often). Not updating the executing user's account password is not an option and is required every 60 days. Using a shared account with a different password policy to execute workflows is also not an option as an audit trail must exist that ties each action to an individual person. The workflows themselves are only accessing vCenter for information and thus the executing user's credentials aren't used for executing any portion of the workflow. We are currently using the vCenter Orchestrator virtual appliance version 5.1.1.

An example scenario is this:

1) User A executes long running workflow (workflow uses a waiting timer and checks vCenter for status information every 24 hours).

2) User A is required to reset their AD account password and does so.

3) Sometime later, the Orchestrator appliance/services are restarted.

4) All long running workflows executed by User A fail with the following error log entries (sensitive information removed):

2013-05-22 18:33:44.416-0400 WARN  [Execution] Unable to resume workflow:[Workflow Name], reason: Cannot login user : CN=LastName\, FirstName,OU=OU Name,DC=domain,DC=domain,DC=domain,DC=domain(reason : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece])

2013-05-22 18:33:44.433-0400 WARN  [Execution] User session fix disabled

2013-05-22 18:33:44.433-0400 ERROR [Execution] Unable to resume workflow execution [ff8080813d5bfd88013d8e725456016d], unable to create user session

Hi,

We've installed a fresh instance of orchestrator- version 5.1

We are trying to integrate between the RabbitMQ and the orchestrator as we did in the last version of the orchestrator.

We encounter many issues while using this configuration. The RabbitMQ stops listening to the requests and we need to restart his service always.

Has anyone used this configuration already and encountered similar issues?

Is there any guide for the setup in the new version of the orchestrator.

Thanks in advance,

Max.

Hello Guys,

I was trying to read/write some xml files from vCO workflows:

• I've configured the vCO server's js-io-right.conf according to: http://pubs.vmware.com/vsphere-51/index.jsp?topic=%2Fcom.vmware.vsphere.vco_install_config.doc%2FGUID-7C2CFC22-519B-4D38-84F9-00380CEB15CF.html  I've set the /Orchestrator/xml folder to be +rwx, from which I will read .xml file later. And I even tried to set "+rwx /Orchestrator/xml/sample.xml". But, still I received "Permission Denied" Error message from vCO when I run the workflow
• I am currently using vCO 5.1, with highest rights to do anything I want.
• The Guest OS of the Orchestrator server is Linux SUSE, but that shouldn't be a problem, right?

I am kinda stuck here, and I would like to see if anyone else has ever encountered this problem before, and how did you fix it?

Any insight into this issue will be much appreciated.

Thanks,

DH

I have implemented the 'Build vCenter Inventory' worflow which is one of workflows presented by VMware's  Brian Watrous in his http://blogs.vmware.com/orchestrator/ presentations.

I am getting the following errors:

(1) Variables tab, Exception:

Unable to convert object, 'Datacenter<datacenter-1965>' plugin exception reason : convertToResult() --> Finder 'VC:Datacenter' : unexpected error 'ch.dunes.model.sdk.SDKFinderException: convertToResult() --> Finder 'VC:Datacenter' : unable to invoke read method : 'name''

(2) Logs, Messages:

2013-04-01 12:04:04.776] [I] Workflow:Create datacenter / Create datacenter (item0) : ch.dunes.model.type.ConvertorException: Unable to convert object, 'Datacenter<datacenter-1965>' plugin exception reason : convertToResult() --> Finder 'VC:Datacenter' : unexpected error 'ch.dunes.model.sdk.SDKFinderException: convertToResult() --> Finder 'VC:Datacenter' : unable to invoke read method : 'name''

Any help on this issue would be greatly appreciated.

How do I need to proceed to troubleshoot the issue? I looked at the vSphere System logs, there are several log files and some of them are huge...

Thanks in advance,

I have written a program attempting simple communication with a VCO appliance using the REST web services API.  Here is the code I am running:

package com.vmware.vco;

import java.net.URI;
import java.net.URISyntaxException;

import com.vmware.o11n.sdk.rest.client.DefaultVcoSessionFactory;
import com.vmware.o11n.sdk.rest.client.SsoAuthenticator;
import com.vmware.o11n.sdk.rest.client.VcoSession;
import com.vmware.o11n.sdk.rest.client.VcoSessionFactory;
import com.vmware.o11n.sdk.rest.client.authentication.Authentication;
import com.vmware.o11n.sdk.rest.client.authentication.UsernamePasswordAuthentication;
import com.vmware.o11n.sdk.rest.client.examples.AbstractParams;

import com.vmware.o11n.sdk.rest.client.services.ExecutionContextBuilder;
import com.vmware.o11n.sdk.rest.client.services.ExecutionService;
import com.vmware.o11n.sdk.rest.client.services.WorkflowService;
import com.vmware.o11n.sdk.rest.client.stubs.ExecutionContext;
import com.vmware.o11n.sdk.rest.client.stubs.Workflow;

public class ConnectionTest {
    public static void main(String[] args) {
        // TODO Auto-generated method stub
        VcoSession session;
        System.out.println("starting test");
        try {
            session = DefaultVcoSessionFactory.newLdapSession(new URI(
                    "https://10.25.49.38:8281/api/"), "vcoadmin", "vcoadmin");
            // create the services
            WorkflowService workflowService = new WorkflowService(session);
            ExecutionService executionService = new ExecutionService(session);
            // find a workflow by ID
            Workflow workflow = workflowService.getWorkflow("1231235");
            // create an ExecutionContext from the user's input
            ExecutionContext context = new ExecutionContextBuilder()
                    .addParam("name", "Jerry").addParam("age", 18).build();
        } catch (URISyntaxException e) {

            e.printStackTrace();
        }
        System.out.println("Exiting test");

    }
}

When the statement
            Workflow workflow = workflowService.getWorkflow("1231235"); is executed I am getting the following exception:

Exception in thread "main" org.springframework.web.client.ResourceAccessException: I/O error: peer not authenticated; nested exception is javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
    at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:453)
    at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:415)
    at org.springframework.web.client.RestTemplate.getForObject(RestTemplate.java:213)
    at com.vmware.o11n.sdk.rest.client.services.AbstractService.getObjectAppending(AbstractService.java:64)
    at com.vmware.o11n.sdk.rest.client.services.WorkflowService.getWorkflow(WorkflowService.java:40)
    at com.vmware.vco.ConnectionTest.main(ConnectionTest.java:32)

As far as I can tell the creation of the session object worked just fine.  The exception appears to have something to do with the certificate.  I have imported the certificate from the VCO appliance into my cacerts file but I still get the exception.  I cannot find any information in the Developing a Web Services Client for VMware vCenter Orchestrator document relating to this issue.  If anyone has seen this and knows the resolution please let me know.

I'm relatively new to Orchestrator, but various searches online and in the forums are relatively fruitless. We have several different vCloud instances each housing several distinct vOrgs (each vCloud instance has a Cloudlibrary vOrg for making ISOs available). I'm looking for a way to replicate media from one vCloud instance's Cloudlibary to another vCloud instance's Cloudlibrary - effectively ensuring that each site has the same ISO offering.

I'm sure there are multiple ways of approaching it, and I was slightly excited about cdecanini_'s catalogue replication:http://communities.vmware.com/docs/DOC-20591, but it looks like that workflow only deals with vApps. I've also started down the path of using the Orchestrator PowerShell plugin to use the PowerCLI modules to download/upload individual ISOs, but that's not going quite as planned either.

Does anyone know if this has been done before? If so/If not - any ideas how to accomplish this?

As part of a change request portal, I need to change AD permissions during the schema to allow the workflow item "Get virtual machines by name" to view the entire vCenter inventory.  I do not want the search restricted to whatever vCenter permissions the user has.  The schema works fine without the "Change Credentials" workflow item.  However, once I had it with valid credentials, I get...

[2013-05-28 15:39:31.567] [I] ReferenceError: "VcPlugin" is not defined. (Workflow:Get virtual machines by name / Scriptable task (item1)#12758)

2013-05-28 15:39:31.566-0700 ERROR [SDKModuleDescription] Scripting object '_VcPlugin' defines a singleton object but cannot create a plug-in factory for it , reason : Session not initialized 'SDKSession[2390e205-b73c-40ca-bdff-aaa23cbd5ba0]' for singleton init !

I was able to use "Change credentials" further into the schema without issue so I don't understand why I have the issue when using it earlier in the workflow.  I am using vCO appliance v5.1.1 with vCenter 5.1 (non-U1).

We are connecting our vCD to VCO successfully (at least there are no errors), but the objects under vCD never show up, so all workflows that depend on them fail.  The only question for me is what "Organization" to use when registeirng vCD with VCO.  I used "System" and I think that's worked for us in the past.

Hi,

I would like to know what constants are available in vCO, specifically how to return the vcenter which is currently being used..

MfG,

Dave

Are there any intrinsic issues /w doing so? While there is usually no reason to have more than 1 vCO, we are trying to test a newer version of vCO while working on an older version... will this be an issue?

I am using the cmdlet "Get-QADComputer" in my .ps1 script that is scheduled to execute via Orchestrator.  I have several PowerShell scripts launched by Orchestrator and executed on a windows host without any issues.  For this one script, I have these 2 commands and it always errors out.  The script does not error when run locally.

Add-PSSnapin Quest.ActiveRoles.ADManagement -ErrorAction SilentlyContinue

$Computer = Get-QADComputer -Identity "server01" | where {$_.name -eq "server01"}

In troubleshooting, I have ran Get-PSSnapin and can see the Snapin for AD is successfully loaded.  I have tried Connect-QADService and that also gives the same error even though it works fine locally.

I am using the vCO 5.1.1. appliance.   On the Windows hosts where the PowerShell scripts are, the AD Snapin is version 1.6.0.2683.

Here is the error in the Orchestrator logs...

PowerShellInvocationError: Errors found while executing script

System.Runtime.InteropServices.COMException (0x8007054B): The specified domain either does not exist or could not be contacted.

   at Interop.ActiveDs.IADsOpenDSObject.OpenDSObject(String lpszDNName, String lpszUserName, String lpszPassword, Int32 lnReserved)

   at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.AdsiDirectory.NativeBind(String adsPath, AuthenticationTypes bindFlags)

   at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.AdsiDirectory.BindToObject(String dn)

   at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.ConnectorFactory.Create(String serverName, String user, SecureString password, ConnectorType type)

   at Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.ConnectionAwareCmdlet.EstablishConnection(ConnectionProperties connectionProperties)

   at Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.ConnectionAwareCmdlet.GetContainer()

   at Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.GetUserCmdlet.BeginProcessing()

   at System.Management.Automation.Cmdlet.DoBeginProcessing()

   at System.Management.Automation.CommandProcessorBase.DoBegin()

(Dynamic Script Module name : invokeScript#14)

Hi,

i'm looking for a way to clear an alarm using the sdkconnection.alarmManager. I can acknowledge alarms, but i didn't find anything on clearing alarms. Any suggestions

TIA

     Thomas

Hi there,

I was hoping someone could post an example of successful SSO authentication via the Java REST SDK.

I have been trying for a few days but seem to hit a wall here.

I working in the 5.1 VCO environment but if necessary could go to 5.1 Update 1.

Thanks for your time,

Sam Wolf.