Hey Guys,

I am trying to make a form with vRO Presentation and i want a value to be displayed on a condition
so I am using Show Parameter Property
So the condition is

if var1 contains abc display var2

else do not display var2

So if var1 = sfsoabcada its a yes and if var1 = qwerty its a no

Can someone help me with a OGNL expression for this?

-RIshab

I'm new to the Orchestrator world and I am making great strides with workflows, but need some help.

I have successfully imported the "Guest Script Manager" package and I have successfully used the "Run script in VM guest" workflow. However, what I want to do is a little more complex, and here is what I want to happen:

1. User reconfigures VM.

2. That action triggers an Event in the Event Broker.

3. The event triggers the "Run script in VM guest" workflow.

I've gotten these steps to work, however the inputs for the workflow require an input for the "VM (VC:VirtualMachine)", and I want to have the VM automatically come from vRA without any other interaction. As it stands, the Workflow fails, because there in no VM to run the script on.

I've attempted to use the the action "QCgetvCenterVmFromvCACVm", that I found on these forums, with no avail. Either I am using it wrong, or the action doesn't do what I want it to.

I'm not a Javascript master and could use some help.

Thanks in advance.

I have a workflow with these errors in attributes.   Just curious how to troubleshoot. 

.

Hello,

I've added the host, and an operation. Then I generated the workflow.

Trying to invoke the workflow that was generated and I'm getting an SSL error:

[2016-11-18 10:43:49.119] [I] Request: DynamicWrapper (Instance) : [RESTRequest]-[class com.vmware.o11n.plugin.rest.Request] -- VALUE : com.vmware.o11n.plugin.rest.Request@7bd367b4

[2016-11-18 10:43:49.124] [I] Request URL: https://url/app/web/orchestrator/update/step/123/456

[2016-11-18 10:43:49.220] [E] Workflow execution stack:

***

item: 'Invoke 'Test: POST /app/web/orchestrator/update/step/12...'/item1', state: 'failed', business state: 'null', exception: 'Cannot execute the request: ; Received fatal alert: handshake_failure (Workflow:Invoke 'Test: POST /app/web/orchestrator/update/step/12...' / Scripting (item3)#14)'

workflow: 'Invoke 'Test: POST /app/web/orchestrator/update/step/12...'' (800cbd0a-0167-46a6-aff0-abe611832d84)

|  'attribute': name=errorCode type=String value=Cannot execute the request: ; Received fatal alert: handshake_failure (Workflow:Invoke 'Test: POST /app/web/orchestrator/update/step/12...' / Scripting (item3)#14)

|  'attribute': name=restOperation type=REST:RESTOperation value=dunes://service.dunes.ch/CustomSDKObject?id='21ea9502-53a0-4ffc-9714-8815f886adaa:ed65ac13-7790-4d8d-b0d7-1b224d5b99c0'&dunesName='REST:RESTOperation'

|  'attribute': name=statusCodeAttribute type=Number value=null

|  'attribute': name=hostResource type=ResourceElement value=dunes://service.dunes.ch/ResourceElement?id='9af5f116-ff9e-4e54-9821-8a8f11547f58'&dunesName='ResourceElement'

|  'input': name=content type=String value=

|  'output': name=statusCode type=Number value=null

|  'output': name=contentLength type=Number value=null

|  'output': name=headers type=Properties value=null

|  'output': name=contentAsString type=String value=null

*** End of execution stack.

The remote host has a certificate with the chain.

openssl s_client -connect url:443

CONNECTED(00000003)

depth=2 C = CA, ST = QC, O = XXXXX, OU = ICP, CN = XXXXXX

verify error:num=19:self signed certificate in certificate chain

140528935810728:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1472:SSL alert number 40

140528935810728:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:

---

Certificate chain

0 s:/C=CA/ST=QC/O=XXXXX/OU=Serveurs/OU=unix/CN=URL

   i:/C=CA/ST=QC/O=XXXXX/OU=ICP/CN=XXXX

1 s:/C=CA/ST=QC/O=XXXXX/OU=ICP/CN=XXXX

   i:/C=CA/ST=QC/O=XXXXXX/OU=ICP/CN=XXXX

2 s:/C=CA/ST=QC/O=XXXXXX/OU=ICP/CN=XXXX

   i:/C=CA/ST=QC/O=XXXXX/OU=ICP/CN=XXXX

---

Server certificate

-----BEGIN CERTIFICATE-----

XXXXX

-----END CERTIFICATE-----

subject=/C=CA/ST=QC/O=XXXXX/OU=Serveurs/OU=unix/CN=URL

issuer=/C=CA/ST=QC/O=XXXXX/OU=ICP/CN=XXXXXX

---

Acceptable client certificate CA names

/C=CA/ST=QC/O=XXXXX/OU=Autorite-Certification/OU=XXXX

/C=CA/ST=QC/O=XXXXX/OU=ICP/CN=XXXX

/C=CA/ST=QC/O=XXXX/OU=ICP/CN=XXXX

/C=CA/ST=QC/O=XXXX/OU=ICP/CN=XXXX

/C=CA/ST=QC/O=XXXX/OU=ICP/CN=XXXX

Client Certificate Types: RSA sign, DSA sign, ECDSA sign

Server Temp Key: ECDH, P-256, 256 bits

---

SSL handshake has read 5943 bytes and written 146 bytes

---

New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

    Protocol  : TLSv1

    Cipher    : ECDHE-RSA-AES256-SHA

    Session-ID:

    Session-ID-ctx:

    Master-Key: A62BDBA5E58CA071B2056318CD579C4CAA87A55BCEB458F7154E34784946161D2B8FC259428D8F85DC8EA7C5CB4C3BE7

    Key-Arg   : None

    PSK identity: None

    PSK identity hint: None

    SRP username: None

    Start Time: 1479485992

    Timeout   : 300 (sec)

    Verify return code: 19 (self signed certificate in certificate chain)

---

If I run a curl I get this:

bdrovro100:~ # curl  -v --tlsv1 -vH "Accept: application/json" -X POST  --insecure https://url/app/web/orchestrator/update/step/123/456

*   Trying XXXX...

* Connected to URL (XXXX) port 443 (#0)

* ALPN, offering http/1.1

* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH

* successfully set certificate verify locations:

*   CAfile: none

  CApath: /etc/ssl/certs/

* TLSv1.2 (OUT), TLS header, Certificate Status (22):

* TLSv1.2 (OUT), TLS handshake, Client hello (1):

* TLSv1.0 (IN), TLS handshake, Server hello (2):

* TLSv1.0 (IN), TLS handshake, Certificate (11):

* TLSv1.0 (IN), TLS handshake, Server key exchange (12):

* TLSv1.0 (IN), TLS handshake, Request CERT (13):

* TLSv1.0 (IN), TLS handshake, Server finished (14):

* TLSv1.0 (OUT), TLS handshake, Certificate (11):

* TLSv1.0 (OUT), TLS handshake, Client key exchange (16):

* TLSv1.0 (OUT), TLS change cipher, Client hello (1):

* TLSv1.0 (OUT), TLS handshake, Finished (20):

* TLSv1.0 (IN), TLS alert, Server hello (2):

* error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

* Closing connection 0

curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

Any idea how I could make this work ?

Hello,

I was wondering if there's a way to compare a VM template accross multiple vCenters, is there some sort of function that could do something like a md5sum but on the actual Template.

In order to compare it accross all the other templates with the same name on the other vCenters ?

That would help me confirm that the template is the same everywere.

Thanks,

Hey guys,

I have been searching around for information regarding this question but have had no luck in finding it. I am sure this question has been asked before but i can find no trace. I am currently learning how to use vRO and to automate simple tasks in my environment, so please bare with me.

When executing a workflow you normally get prompted for a form of some kind to fill out the information you asked for throughout the workflow. I have been trying to create 1 form for the various vCenters i maintain as an example cloning a vm and having the ip address inputted during sysprep and join to the domain. In order to do this i was thinking of using a dynamic input, meaning if datacenter A is selected it should now show you the clusters in that datacenter, which after 1 is selected ask what vDS network you would like to choose to place the VM on. I started the process with creating an array of datacenters that are allow to be used, after which based on which one selected a javascript action is called to query that datacenter to grab the clusters. Same process for clusters, with the intent of not caring which host to pick to pull the vDS information since they are in the same cluster. I know i can than query the host it auto selects for the vDS information, but here is where i struggle. I am no javascript wiz and my attempt to call all the queries at once haven't been successful so i am having to create a new action for each query due to this lack of knowledge. This process i am trying to create is much easier under powercli as i know how to get the information and work with what i get, there is a lot better support vs javascript and vRO from what i can find. The one thing i cant seem to find any information on is how to setup a dynamic input using powercli.

When the form appears and asks for a question you normally have the presentation section call an action against a variable to get the array of information to select. How do you call a powercli script to start this action while returning an array of what you need? I believe that you may be able to get this to work if you attach an external script workflow after you query the other objects but make the data available via a paused user input once the main workflow starts to ask for your information once its able to query that information. Because the form seems to start before the workflow actually starts i haven't been able to see something to get the script to execute first, which is what i want vs having a paused moment to ask more questions.

I am sure my thinking is very flaw on this, so i am asking for help correcting this thinking. If there is a good book i should read about using powercli with vRO i would be glad to read it, if it helps figure out my issue or a blog or a forum question.

Any suggestion in understanding this would be grateful!

Thank you!

I have the below queries regarding vRA - vRealize Automation.

1 - Can this product be purchased separately or it should be bought as suite (vRealize suit)

2 - With vRealize Automation does vRO comes inbuit ?

3 - What is the approximate cost of vRealize Automation ( My understanding is that it is per CPU basis)

Hello,

I am experimenting at the moment with vRO and the PowerShell Plugin. Especial with the “Generate an Action for a PowerShell Cmdlet“ Workflow.

At the moment for me it looks like that only Cmdlet from SnapIns are available for the workflow. Is that true?

What about Modules? Is working with “generate action from a PowerShell Script” maybe the only workaround?

Any recommended Reads about this topic? Documentation is net very useful at this point…

We have a set of workflows with a scriptable step that I'd like to edit through a text editor rather than through Orchestrator client. There are too many workflows to touch individually, and at this point I think it will be much more efficient to conduct a search/replace in batch mode.

I was able to perform an update by expanding my workflow package into a folder. I am on 5.5, so import back is not available but I do have 7.1 instance in my environment where I can import from folder, convert back to a single package format and export again for further import to 5.5 instance.

So far workflow functionality is good, but I did notice a couple of quirks with versioning. Upon import into my 5.5, and increment of a version through the package manager (increment version option on the package itself), some workflows would get a "not the latest" warning. This doesn't seem to be happening to all of the updated workflows and goes way if version is incremented again. Second issue is that versions prior to my batch update are no longer available for a rollback or compare after import. If at all possible, I'd like to retain prior change history. I see that once the original package is expanded into xml format there is a set of files specifically referencing version history and there is a signature for the last content version. I suspect that it will need to be updated with my batch change, but I am not exactly sure how or if it is even possible. Could anyone comment if you tried anything similar? Thanks.

I'm going through vSphere Web Client, Right Clicking a VM, going to All vRealize Orchestrator Actions > Clicking on my action. When I do this I have to manually click the + button to choose a Virtual machine to upgrade. Is there any way to auto populate this field with the VM I right clicked on to start the action?

I have a user interaction where the user can select 2 predefined values and the third fields' default value should update automatically with each change of the users' selection.

The first 2 fields include a predefined list of elements. A user can select one element from each list (string1 and string2).

The third field is a text field, which is filled by an action, like this:

var combinedString = string1 + " + " + string2;

return combinedString;

This works when the form is loaded the first time. However, when the user selects another element from one of the two lists, the value of the text field is not changed.

How can I get the user form to dynamically adjust the value of the third input field, depending on the choices from the first 2 lists?

Edit: I just built a simple workflow based on the action above and it does work when the Data Binding property is selected for the input field. It gets dynamically filled each time an input value is changed.

I did the same for main main workflow however and it does not work. There the action returns a value that is processed from 2 strings and an array of composite types. It works fine when I only try to combine 2 strings, but does not return anything when I use and action that processes the composite type.

Have you guys seem this before?

While in vRO java client i am able to select the correct items using a drop box here is an example using my mock lab:

Each item gets populated from a selection about the other. DC --> Cluster of chosen DC --> Hosts available in the cluster ---> Datastores on the host that was chosen --> portgroups that host has connections to. In the java client that connects to vRO everything works great and i am able to get the correct response to everything and execute it without any issues. The challenge for me is trying to figure why this process is not giving me the same results in the web interface selecting the same workflow.

Even though i select the same DataCenter and Cluster the 3rd option (Host) doesnt appear as a list / dropbox but a tree choice of everything in all the vCenter Hosts, Datastore, and vDS. Has anyone seen this before? I looked around but couldn't find anything definitive to this issue.Each one of these presentation is the same except they point to a different action call. 1 Last thing is that when i cancel out the questions for the workflow it come back and says you do not have permission to see this or its missing, i normally have to reload the web interface to make it happy again.

vRO version = 7.1.0.4 4262825 | java VM version 1.8.0_111

vCenter version = 6.0.0 build 3617395 | Flash player Win 22,0,0,209

According to the matrix these two version are compatible.

Thanks guys for your help and let me know if you need anymore information!

Running vRA 7.1 with embedded vRO.

vRA is configured to authenticate against AD, and vRO is configured to use AD as well via vRA's component-registry.

Access permissions to vRO are restricted to our development team, ie they are the only users that can login and work within the vRO client.

When an end-user (non-developer) requests an XaaS catalog item from within vRA that calls a vRO workflow, the Events tab for that workflow in the vRO client shows the workflow being run by that end-user.

Is that really what's happening? ie even though the end-user has no explicit permissions defined to access vRO, the workflow is executing as that user?

Or is the vRO/vRA integration such that vRO is aware of the requesting user from vRA and logs that user as the invoker, even though it's not really executing as that account? In which case, which user does the workflow run as?

Mostly just trying to confirm that the only entry point to run vRO workflows for our end-users is via vRA catalog items, and I'm not misunderstanding how the permissions work.

Thanks

matt

Hi,

I am trying to run a cmd to execute a script on the source host to stop application with input of the list of VM names.

vms = System.getModule("com.vmware.library.vc.cluster").getAllVMsOfCluster(cluster) ;
var vmtostop = sudo -u applicationx/stop.sh (vms) ;

on the WF Run SSH Command, i've set cmd local param to source param "vmtostop"

but the first script does not accept the 2nd line of vmtostop = script.

any hints would be appreciated. many thanks

Below is a list of the bug fixes in the CLI:

     1.  Fixed script evaluation (available since build 3774330)

          The issue is easily recognizable when someone log in the CLI and try to execute a script snippet.

          The error in the GUI was: Cannot connect to server. Do you want to quit?

          The error in the server.log was:

Error creating bean with name 'server' defined in class path resource [com/vmware/o11n/plugin/vcocli/pluginConfig.xml]: Invocation of init method failed;           nested exception is java.lang.IllegalStateException: SSLContext is not initialized.

     2. Fixed ip address mapping to work with vRA VA and embedded vRO server

Bellow there is attached the .vmoapp file which must be installed on the vRO Server + Windows and Linux clients containing the GUI CLI.

Hi,

We are creating Thick, EagerZeroed virtual disks using createVirtualDiskFlatVer2ConfigSpec. After that we set "deviceConfigSpec.device.backing.eagerlyScrub = true" etc and run "vm.reconfigVM_Task( configSpec )".

If I display the value of disk property "disk.backing.eagerlyScrub" to true, which is what we expect.

We run a workflow in vRO that uses vm.reconfigVM_Task(spec) to change the disk capacity.

Increasing the capacity of a disk seems to change the value of eagerlyScrub, as after the change it shows up as Lazy Zeroed ?!

Displaying the property again after the capacity has been changed, shows it being null, resulting in Lazy Zeroed.

If I then try and set eagerlyScrub to true, to ensure it stays eager zeroed, it fails. From that point on, I can't change any disk info as the disk file is locked.

Are we doing something wrong or could this be a bug or ...?

Many thanks,

Ed

PS To change the capacity of a disk, we use the following steps:

<loop over vm.config.hardware.device to retrieve the disk object with all current information of the disk>

var spec = new VcVirtualMachineConfigSpec();

spec.changeVersion = vm.config.changeVersion;

spec.deviceChange = System.getModule("com.vmware.onyx").array(VcVirtualDeviceConfigSpec, 1);

spec.deviceChange[0] = new VcVirtualDeviceConfigSpec();

spec.deviceChange[0].operation = VcVirtualDeviceConfigSpecOperation.edit;

spec.deviceChange[0].device = new VcVirtualDisk();

spec.deviceChange[0].device.key = disk.key;

spec.deviceChange[0].device.deviceInfo = new VcDescription();

spec.deviceChange[0].device.deviceInfo.label = disk.deviceInfo.label;

spec.deviceChange[0].device.deviceInfo.summary = disk.deviceInfo.summary;

spec.deviceChange[0].device.backing = new VcVirtualDiskFlatVer2BackingInfo();

spec.deviceChange[0].device.backing.fileName = disk.backing.fileName;

spec.deviceChange[0].device.backing.diskMode = disk.backing.diskMode;

spec.deviceChange[0].device.backing.split = disk.backing.split;

spec.deviceChange[0].device.backing.writeThrough = disk.backing.writeThrough;

spec.deviceChange[0].device.backing.thinProvisioned = disk.backing.thinProvisioned;

spec.deviceChange[0].device.backing.uuid = disk.backing.uuid;

spec.deviceChange[0].device.backing.contentId = disk.backing.contentId;

spec.deviceChange[0].device.backing.digestEnabled = disk.backing.digestEnabled;

spec.deviceChange[0].device.backing.sharing = disk.backing.sharing;

//

spec.deviceChange[0].device.backing.eagerlyScrub = disk.backing.eagerlyScrub; // when true - set to eager zero policy

System.log("disk.backing.eagerlyScrub="+disk.backing.eagerlyScrub);

//

spec.deviceChange[0].device.controllerKey = disk.controllerKey;

spec.deviceChange[0].device.unitNumber = disk.unitNumber;

spec.deviceChange[0].device.capacityInKB = newSizeKB;

spec.deviceChange[0].device.shares = new VcSharesInfo();

spec.deviceChange[0].device.shares.shares = disk.shares.shares;

spec.deviceChange[0].device.shares.level = disk.shares.level;

spec.deviceChange[0].device.storageIOAllocation = new VcStorageIOAllocationInfo();

spec.deviceChange[0].device.storageIOAllocation.limit = disk.storageIOAllocation.limit;

spec.deviceChange[0].device.storageIOAllocation.shares = new VcSharesInfo();

spec.deviceChange[0].device.storageIOAllocation.shares.shares = disk.storageIOAllocation.shares.shares;

spec.deviceChange[0].device.storageIOAllocation.shares.level = disk.storageIOAllocation.shares.level;

System.log("Extending disk: " + dskFileName);

task = vm.reconfigVM_Task(spec);

Message was edited by: EdSp (added in first sentence that when creating disk we also use reconfigVM_Task)

Basic workflow, with just one input/attribute, named "theModule" of type "Module".

Selecting any random Module

A scriptable task, with just 2 simple lines of code:

System.log(theModule.actions)
System.log(theModule.actions.lenght)

Line1 will output "undefined"

Line2 will throw a error: "Cannot read property "length" from undefined"

I have personally tested this on both vRO v7.0.1 and vRO v7.1.

I have also confirmation from other people testing this on vRO v7.0.1 and vRO v7.2

Anyway to get this to work?

Or is this a actual bug, that seems to have been in the software for at least the last 3 versions?

Hello,

I got two questions, regarding the Custom CompositeType, you can define a new CompositeType, that's cool, but am I right to assume that you can't simply duplicate or upgrade a current CompositeType ?

Also, I have to frequently modify my Configuration Elements, with new lines, or edit the array and change one single value, like the strings values within the array or even the template that is referenced.

Is there a way to just Edit values in the Config Elements ? A string or even a VC:VirtualMachine ?

Thanks,

Hello,

Am trying to control client access for vRO embedded in vRA 7.1.

vRA is configured to authenticate to AD using integrated windows authentication.

vRO is configured to use vRA's component registry at the authentication provider.

Have tested configuring an AD group as the admin group for vRO, and that works fine. AD users in that group can login successfully via the vRO client as a full administrator.

However, attempting to provide access to a different AD group by assigning permissions within the client gives an invalid username/password error when attempting loggin with the client. The following error shows up in /var/log/vco/app-server on the vra appliance:

server.log:2016-11-25 20:33:34.949+0000 [http-nio-127.0.0.1-8280-exec-1] ERROR {} [DefaultVerifier] User LDAP-USER-['MyUser'] - MyDomain\MyUser doesn't have necessary rights 'View', required to execute operation on (VSOServer, _ROOT).

server.log:2016-11-25 20:33:34.950+0000 [http-nio-127.0.0.1-8280-exec-1] INFO  {} [UsersController] Unsuccessful login attempt by user 'MyUser'. Access point type 'client'

server.log:ch.dunes.util.DunesServerException: ch.dunes.util.NotAuthorizedException: [0002]User 'MyUser' is not authorized!

MyUser is a member of the group SDDC-UAT-vRO-Developer, which has been assigned 'View' rights below.

The full environment has been completely restarted with no success.

Anyone have this working? Have I set it up correctly?

Thx

matt

I have  lab setup for vcenter server 6.0.2 and vRA 6.0.2

I am using vco embedded system.

But I cannt see the vsphere instance on the vCO configuration page.

I also removed the old plugin for the old vCO server

The extension manager shows the vco plugin .

Any help appreciated

When i look ate the logs from vcenter i get the below message