Hi all,

I'm currently building an workflow for adding additional several disks and additional 3 SCSI controller to a given virtual machine. After that the system isn't booting anymore, because the boot order in the Bios is nearly randomly.

I was trying to define the new boot order over the following code snippet. Unfortunalley this seems to brake the bios configuration. I can enter the bios, but I can not select or change anything in the boot order screen. No error message there is just nothing selectable anymore in the boot order screen. Anyone had this issue before ?

var bootOrder = new Array;

var bootDisk = new VcVirtualMachineBootOptionsBootableDiskDevice();

bootDisk.deviceKey = 2000;   // 2000 = Scsi0:0

bootOrder.push(bootDisk);

.

.

<done for several disks>

.

.

var spec = new VcVirtualMachineConfigSpec();

spec.bootOptions = new VcVirtualMachineBootOptions();

spec.bootOptions.bootOrder = bootOrder;

Task = VM.reconfigVM_Task(spec);

When Orchestrator 6.0 comes out, will it work with vSphere 5.1 and 5.5 ? Are there possible gotchas / caveats to planning to use Orchestrator 6.0 until you can upgrade your vSphere environment to 6.0?

I need orchestrator to talk to a number of third party systems for which no plug-in has been developed yet.  This is all part of a single Vm provisioning process.  Should I create a separate plug-in for each system for which no plug-in exists, or should I create one giant "Vm provisioning" plugin that can talk to multiple systems?

I need to make orchestrator talk to a number of third party products such as a CMDB, IPAM, DCHP and backup product during the provisioning process.  What is the best programming language to use? Assuming I am fluent or have people on my team fluent in java, python, vb.net, javascript, and ruby, what is the best language?

The following code is blowing up for me since upgrading to 5.5.2 .  It seems like setting a variable or iterating through the values from workflow.getInputParameters().keys is not working.  Create a scriptable task with this code and see if it blows up in your face.  It does in my environment and is crippling us.  May have to roll back to a previous version.  If someone else can verify this I'd appreciate it.  Also attaching a workflow.  I have two passes through since it seemed to work once through a couple of times but always failed on the second iteration.  I think if I completely bounce the vCO server (not just the service) it will actually set the variable once but after that it will always blow up on me.  Run the workflow a couple of times in a row.

System.log("workflow.getInputParameters() first run: " + workflow.getInputParameters());

System.log("workflow.getInputParameters().keys first run: " + workflow.getInputParameters().keys);

for (var i in workflow.getInputParameters().keys) {

  var curKey = keys[i];

  //print out properties in format key :::: value

  var curValue = workflow.getInputParameters().get(curKey)

  System.debug(curKey + " :::: " + curValue );

}

System.log("workflow.getInputParameters() second run: " + workflow.getInputParameters());

System.log("workflow.getInputParameters().keys second run: " + workflow.getInputParameters().keys);

for (var i in workflow.getInputParameters().keys) {

  var curKey = keys[i];

  //print out properties in format key :::: value

  var curValue = workflow.getInputParameters().get(curKey)

  System.debug(curKey + " :::: " + curValue );

}

I'm experiencing issues executing a workflow in Orchestrator due to Single Sign On issues. When I try to run the workflow from Orchestrator client I get "SSO server error". When I try to run it via the vSphere web client I get "401 A delegate token is required. Use VCOAuthorization header to pass delegate token for vCO".

I've found numerous posts about this issue, initially I had issues getting Orchestrator working from the web client until I removed the local OS from Default Domains.

When I look in imsTrace on the SSO server I can see the following errors:

2014-07-02 20:53:48,750, [castle-exec-56], (IMSUtilImpl.java:451), trace.com.rsa.riat.utils.IMSUtil, DEBUG, vcenter,,,,Group membership count for user: 11

2014-07-02 20:53:48,751, [castle-exec-56], (IMSUtilImpl.java:115), trace.com.rsa.riat.utils.IMSUtil, DEBUG, vcenter,,,,Fetching nameInfo

2014-07-02 20:53:48,751, [castle-exec-56], (BaseSTSImpl.java:207), trace.com.rsa.riat.ws.security.trust.impl.BaseSTSImpl, DEBUG, vcenter,,,,Authentication is complete

2014-07-02 20:53:48,752, [castle-exec-56], (BaseSTSImpl.java:208), trace.com.rsa.riat.ws.security.trust.impl.BaseSTSImpl, DEBUG, vcenter,,,,Calling post authentication prcoessing

2014-07-02 20:53:48,752, [castle-exec-56], (BaseSTSImpl.java:270), trace.com.rsa.riat.ws.security.trust.impl.BaseSTSImpl, DEBUG, vcenter,,,,Creating token context

2014-07-02 20:53:48,752, [castle-exec-56], (WSTrustContractFactory.java:52), trace.com.rsa.riat.ws.security.trust.impl.WSTrustContractFactory, DEBUG, vcenter,,,,Looking up token generator for tokentype:urn:oasis:names:tc:SAML:2.0:assertion

2014-07-02 20:53:48,752, [castle-exec-56], (WSTrustContractFactory.java:56), trace.com.rsa.riat.ws.security.trust.impl.WSTrustContractFactory, DEBUG, vcenter,,,,Token generator for tokentype urn:oasis:names:tc:SAML:2.0:assertion = com.rsa.riat.ws.security.saml2.SAML20TokenContractImpl

2014-07-02 20:53:48,753, [castle-exec-56], (BaseSTSImpl.java:279), trace.com.rsa.riat.ws.security.trust.impl.BaseSTSImpl, DEBUG, vcenter,,,,TokenGenerator: class com.rsa.riat.ws.security.saml2.SAML20TokenContractImpl

2014-07-02 20:53:48,753, [castle-exec-56], (BaseSTSImpl.java:282), trace.com.rsa.riat.ws.security.trust.impl.BaseSTSImpl, DEBUG, vcenter,,,,invoking token generator

2014-07-02 20:53:48,753, [castle-exec-56], (IMSUtilImpl.java:354), trace.com.rsa.riat.utils.IMSUtil, DEBUG, vcenter,,,,Looking up user: vCO-146e...

2014-07-02 20:53:48,757, [castle-exec-56], (DirContextImpl.java:1551), trace.com.rsa.ims.connectionpool.jca.common.DirContextImpl, DEBUG, vcenter,,,,search( {OU=OU,DC=ad,DC=gsoa,DC=ddau}, {(&(&(objectClass=User)(objectcategory=person))(objectClass=user)(samaccountname=vCO-146efc...))}, {SearchControls( SUBTREE_SCOPE, 0, 120000, [ObjectGUID, comment, description, givenname, initials, mail, msds-user-account-control-computed, samaccountname, sn, unicodepwd, userAccountControl], false, false )} )

2014-07-02 20:53:48,760, [castle-exec-56], (PrincipalAccessSQL.java:1683), trace.com.rsa.ims.admin.dal.sql.PrincipalAccessSQL, DEBUG, vcenter,,,,SELECT IMS_PRINCIPAL.ID,IMS_PRINCIPAL.CERT_DN,IMS_PRINCIPAL.EMAIL,IMS_PRINCIPAL.FIRST_NAME,IMS_PRINCIPAL.MIDDLE_NAME,IMS_PRINCIPAL.LAST_NAME,IMS_PRINCIPAL.LOGINUID,IMS_PRINCIPAL.PASSWORD,IMS_PRINCIPAL.PRINCIPAL_IS_DESCRIPTION, IMS_PRINCIPAL_DATA.ID,IMS_PRINCIPAL_DATA.ROW_VERSION,IMS_PRINCIPAL_DATA.LAST_UPDATED_BY,IMS_PRINCIPAL_DATA.LAST_UPDATED_ON,IMS_PRINCIPAL_DATA.IDENTITY_SRC_ID,IMS_PRINCIPAL_DATA.IDENTITY_SRC_KEY,IMS_PRINCIPAL_DATA.OWNER_ID,IMS_PRINCIPAL_DATA.START_DATE,IMS_PRINCIPAL_DATA.EXPIRATION_DATE,IMS_PRINCIPAL_DATA.REGISTRATION_FLAG,IMS_PRINCIPAL_DATA.LOGINUID,IMS_PRINCIPAL_DATA.LOGIN_DATE,IMS_PRINCIPAL_DATA.ENABLE_FLAG,IMS_PRINCIPAL_DATA.IMPERSONATABLE_FLAG,IMS_PRINCIPAL_DATA.IMPERSONATOR_FLAG,IMS_PRINCIPAL_DATA.FAIL_PASSWORD_COUNT,IMS_PRINCIPAL_DATA.FAIL_PASSWORD_DATE,IMS_PRINCIPAL_DATA.FAIL_EMERGENCY_COUNT,IMS_PRINCIPAL_DATA.FAIL_EMERGENCY_DATE,IMS_PRINCIPAL_DATA.CHANGE_PASSWORD_FLAG,IMS_PRINCIPAL_DATA.CHANGE_PASSWORD_DATE,IMS_PRINCIPAL_DATA.LOCKOUT_FLAG,IMS_PRINCIPAL_DATA.EXPIRE_LOCKOUT_DATE,IMS_PRINCIPAL_DATA.EMERGENCY_LOCKOUT_FLAG,IMS_PRINCIPAL_DATA.EXPIRE_EMERGENCY_LOCKOUT_DATE,IMS_PRINCIPAL_DATA.NOTES,IMS_PRINCIPAL_DATA.AUTHENTICATOR_BIT_FLAGS,IMS_PRINCIPAL_DATA.ADMINISTRATOR_FLAG,IMS_PRINCIPAL_DATA.EXUID,IMS_PRINCIPAL_DATA.SECURITY_QUES_ANSWERS,IMS_PRINCIPAL_DATA.SECURITY_QUES_REQUIRED_AUTHN,IMS_PRINCIPAL_DATA.SECURITY_QUES_REQUIRED_REG,IMS_PRINCIPAL_DATA.SECURITY_QUES_LANGUAGE,IMS_PRINCIPAL_DATA.SECURITY_QUES_COUNTRY,IMS_PRINCIPAL_DATA.SECURITY_QUES_VARIANT,IMS_PRINCIPAL_DATA.SECURITY_QUES_RESET,IMS_PRINCIPAL_DATA.FIRST_RBA_AUTH_DATE,IMS_PRINCIPAL_DATA.LAST_USED_SECONDARY_AUTH FROM IMS_PRINCIPAL, (SELECT IMS_PRINCIPAL_DATA.ID,IMS_PRINCIPAL_DATA.ROW_VERSION,IMS_PRINCIPAL_DATA.LAST_UPDATED_BY,IMS_PRINCIPAL_DATA.LAST_UPDATED_ON,IMS_PRINCIPAL_DATA.IDENTITY_SRC_ID,IMS_PRINCIPAL_DATA.IDENTITY_SRC_KEY,IMS_PRINCIPAL_DATA.OWNER_ID,IMS_PRINCIPAL_DATA.START_DATE,IMS_PRINCIPAL_DATA.EXPIRATION_DATE,IMS_PRINCIPAL_DATA.REGISTRATION_FLAG,IMS_PRINCIPAL_DATA.LOGINUID,IMS_PRINCIPAL_LOGIN_DATE.LOGIN_DATE,IMS_PRINCIPAL_DATA.ENABLE_FLAG,IMS_PRINCIPAL_DATA.IMPERSONATABLE_FLAG,IMS_PRINCIPAL_DATA.IMPERSONATOR_FLAG,IMS_PRINCIPAL_DATA.FAIL_PASSWORD_COUNT,IMS_PRINCIPAL_DATA.FAIL_PASSWORD_DATE,IMS_PRINCIPAL_DATA.FAIL_EMERGENCY_COUNT,IMS_PRINCIPAL_DATA.FAIL_EMERGENCY_DATE,IMS_PRINCIPAL_DATA.CHANGE_PASSWORD_FLAG,IMS_PRINCIPAL_DATA.CHANGE_PASSWORD_DATE,IMS_PRINCIPAL_DATA.LOCKOUT_FLAG,IMS_PRINCIPAL_DATA.EXPIRE_LOCKOUT_DATE,IMS_PRINCIPAL_DATA.EMERGENCY_LOCKOUT_FLAG,IMS_PRINCIPAL_DATA.EXPIRE_EMERGENCY_LOCKOUT_DATE,IMS_PRINCIPAL_DATA.NOTES,IMS_PRINCIPAL_DATA.AUTHENTICATOR_BIT_FLAGS,IMS_PRINCIPAL_DATA.ADMINISTRATOR_FLAG,IMS_PRINCIPAL_DATA.EXUID,IMS_PRINCIPAL_DATA.SECURITY_QUES_ANSWERS,IMS_PRINCIPAL_DATA.SECURITY_QUES_REQUIRED_AUTHN,IMS_PRINCIPAL_DATA.SECURITY_QUES_REQUIRED_REG,IMS_PRINCIPAL_DATA.SECURITY_QUES_LANGUAGE,IMS_PRINCIPAL_DATA.SECURITY_QUES_COUNTRY,IMS_PRINCIPAL_DATA.SECURITY_QUES_VARIANT,IMS_PRINCIPAL_DATA.SECURITY_QUES_RESET,IMS_PRINCIPAL_DATA.FIRST_RBA_AUTH_DATE,IMS_PRINCIPAL_DATA.LAST_USED_SECONDARY_AUTH FROM IMS_PRINCIPAL_DATA WITH (NOLOCK) inner join IMS_PRINCIPAL_LOGIN_DATE on (IMS_PRINCIPAL_DATA.ID = IMS_PRINCIPAL_LOGIN_DATE.PRINCIPAL_ID) ) IMS_PRINCIPAL_DATA  WHERE UPPER(IMS_PRINCIPAL.LOGINUID) = UPPER(IMS_PRINCIPAL_DATA.LOGINUID) AND IMS_PRINCIPAL_DATA.IDENTITY_SRC_ID = '000000000000000000001000d0011000' AND  UPPER(IMS_PRINCIPAL.LOGINUID) = UPPER(?)   ORDER BY UPPER(IMS_PRINCIPAL.LOGINUID)

2014-07-02 20:53:48,760, [castle-exec-56], (IMSUtilImpl.java:262), trace.com.rsa.riat.utils.IMSUtil, DEBUG, vcenter,,,,Could not find user vCO-146efc... in domain null

2014-07-02 20:53:48,761, [castle-exec-56], (DelegateRequestValidator.java:97), trace.com.rsa.riat.ws.security.trust.WSTrustContract, ERROR, vcenter,,,,Delegate is invalid

com.rsa.riat.ws.security.trust.authn.AuthnPluginException: Authentication Failed

Have you ever wanted orchestrate nodes, roles, data bags, attributes, etc. on a Chef Server?  Give this plugin and package a try!

See the attached pdf for a workflow listing and documentation of the workflows in this package:

This solution interfaces directly with the Chef Server REST API.  Works with all three variations of Chef (Open Source, Private, Hosted).

Workflows that interact with the guest OS for Chef-Client first run use either SSH or VMtools with workflows from: Guest script manager package

The plugin helps with signing the authentication headers as required by the Chef API.  The rest of this solution is pure vCO JavaScript.

Dependencies: HTTP-REST Plugin.

To install:  The attached zip contains 2 files:

• o11nplugin-chef.dar - Install as a plugin through the vCO configuration interface.  This plugin only has a single method to aid in signing requests
• com.vmware.pso.chef.<date>.package - The package of vCO workflows and actions to import.

To get running, simply run the "Library/Chef/Set Private Key" workflow.  This workflow will store your private key per chefHostname and userid.  Use the same chefHostname and userid in any other workflow.  The orgName input is optional but required if you are using private or hosted chef.

UPDATES:

• 1/11/2015:
  • Reduced verbosity of logging by default.  Debug logging can be enabled per Chef Server using Toggle Debug Logging workflow.
  • Removed RESTHostManager.reloadConfiguration() call from every Chef Server API Execution improving performance.
  • The orgName input is automatically hidden from the presentation if target Chef Server is an open source variant.
  • The client private key can be provided as an input to any Chef Server workflow.  This is useful if you are storing your private keys elsewhere (besides the Chef Private Keys Configuration Element) or reading it from a guest OS as in: Linux VMTools Delete Instance with own key workflow which deletes a Node and Client with it's own key.
  • Tag Node and Untag Node workflows add or remove Knife tags on nodes.
  • Chef-Client first run workflows for Linux via SSH and VMtools.
  • Chef-Client first run workflows for Windows via VMtools.
• 11/16/2013:
  • Refactored hashing and encryption actions to reuse actions from CryptoJS Hashers and Ciphers
  • Much more granular data bag support.  Workflows to retrieve, add/update, delete individual data bag item attributes.
  • More complete encrypted data bag support.  Workflows to add encrypted data bag item attributes, convert data bag items from cleartext to/from encrypted.

I am trying to invoke workflows using python but getting below SSL Certificate verify failed

Code Sample:-

from vmw.vco.client import Client

c = Client(url='https://IP:8281/vco/vmware-vmo-webcontrol/webservice?WSDL', username='vmware', password='password')

print c.echo('foo')

Traceback (most recent call last):

  File "<pyshell#20>", line 1, in <module>

    print c.echo('foo')

  File "C:\Python27\lib\site-packages\vmw\vco\client.py", line 290, in echo

    return self._echo(message=msg)

  File "C:\Python27\lib\site-packages\vmw\vco\client.py", line 363, in _func

    resp = getattr(self.service, name)(req)

  File "C:\Python27\lib\site-packages\vmw\vco\generated\VSOWebControlService_client_sync.py", line 48, in echo

    self.binding.Send(None, None, request, soapaction="", **kw)

  File "C:\Python27\lib\site-packages\vmw\ZSI\client.py", line 291, in Send

    self.h.connect()

  File "C:\Python27\lib\httplib.py", line 1215, in connect

    self.sock = self._context.wrap_socket(self.sock,

  File "C:\Python27\lib\ssl.py", line 350, in wrap_socket

    _context=self)

  File "C:\Python27\lib\ssl.py", line 566, in __init__

    self.do_handshake()

  File "C:\Python27\lib\ssl.py", line 788, in do_handshake

    self._sslobj.do_handshake()

SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

>>>

Any idea?

I need to eager zero a Virtual Disk while building a VM. I found the function eagerZeroVirtualDisk_Task() under VcVirtualDiskManager, which takes in 2 params:

name - (string) The name of the disk, either a datastore path or a URL referring to the virtual disk that should be inflated.

datacenter - (VcDatacenter) If name is a datastore path, the datacenter for that datastore path. Not needed when invoked directly on ESX. If not specified on a call to VirtualCenter, name must be a URL.

How do I get the correct datastore path given the virtual disk? I intend to iterate through the devices in the VM to get the disks.

Thanks!

When a user logs into the vSphere Web Client, they only see the VMs they have permissions on - this avoids a lot of confusion.

When the same user runs a workflow from the vCO Web Operator or Client, they are presented with the entire vCenter directory tree - asking a user to drill through 1,000 VMs is difficult.

Is there a way to limit the VC:VirtualMachine input to only the VMs the user as access to?

I've got a few Snapshot workflows, but the snapshot options that precede the workflows in the vSphere web client will no doubt create confusion. So I'm hoping to only educate users on the vCO Web Operator or Client. This is version 5.1.2

Thanks!

Hi I get an error if I add a SOAP host to the vmware orchestrator.

The logs shows me the error:

2015-01-12 21:58:14.452+0100 [WorkflowExecutorPool-Thread-10] WARN  {xxx@domain:Add a SOAP host:2A828080808080808080808080808080818080800126658240472157fdafc0fce:ff8080814add88c2014adff096640039} [SOAPHost] SOAP host is not available: SOAPHost[Id: 46c73a6e-47fd-4be0-b621-860e9c6d11ff, Name:hostname, WSDL URI: null, Authentication type: None]

java.lang.IllegalArgumentException: WSDL content is not allowed to be empty!

This is the WSDL:

I am working on a workflow that is basically converting my vCAC blueprint so I can change up the request form a bit.  All my data driven relationships properties are working properly if the action return a single value but I have a couple of properties that would return an array of a list of answers for the user to pick in the next question.  I am struggling to get the multiple value arrays to be be displayed properly in the next drop down.  What am I missing that is different from single value and multiple calue returns?

Thanks

Steve

Hi all,

I created a workflow to deploy a virtual machine for one of my customer. The workflow deploy a VM from a template, connect the nic to a DVportgroup, run sysprep if needed, add disk if needed, change ram if needed, change CPU if needed and install a bunch of software for the VM to be compliant in the customer environment.

During the deployment, if the user want to add a disk to his VMs, he needs to answer a simple question and enter the size of his disk. The format (thick or thin) is automatically selected as per as their standard.

My workflow is running and work well but they want to add an option for a number of disk. Let's say a user want to add three disks! I add this fields : How many disks you want to add? And put the answer in a Number variable. I added a counter after the add disk workflow as you can see in the picture below.

When the counter reach the number of disk the user wants, it will go to the next steps.

This work but always create the disk with the same variable of size, so all disk have the same size! That's not very handy!  

I want to know what is the best way to have a size variable for each drive to be created? The number will never be the same. Let's say i want to add 3 disks, one of 250Gb, 300Gb and 350Gb. I want to let my user enter 3 sizes variable.

I guess i will have to ask my user to enter the different size separated by a ; or , and in the code read those numbers. This will be stored in one variable. But, is there other way?

Thanks for taking time to read and helping!

Hi,

I'm trying to create an approval policy on vCAC 6.1

I logged in and as an Tenant Administrator and filled out all the required fields to add a new approval policy (administration -> approval policies -> add (green plus button))

After hitting the "Add" button it didn't throw any error but also didn't added any policy either. I tried this few times now (with different policy types) but no success.

I cant think what I'm doing wrong but maybe I suppose to do something before adding a new approval policy? Any ideas?

Thanks,

_Peter

vCO workflows have version numbers although you have to put the version numbers explicitly via vCO Client (UI). What about Packages (vCO workflow packages)? When I export the packages and then import them to different systems for different use cases, how can I make sure I install the correct version of packages?

Thanks.

I need some help for checking when the password will expire for an AD user via Orchestrator.

The passwords expire every 90 days.

I found code to show me when the password was last set but it is not readable.

pwdLastSet = user.getAttribute("pwdLastSet");
System.log("Password last set: " + pwdLastSet);

Output:

[2015-01-15 10:23:46.208] [I] Password last set: 130657846662968750

I found this about this pwdLastSet value: the value is stored as a large integer that represents the number of 100 nanosecond intervals since January 1, 1601 (UTC)

Hi,

I have a standalone vCO (5.5.1) configured with vCAC 6.0.1 .

Custom workflows have been written to do some tasks once the machine is provisioned from vCAC. Workflow Stubs are being used for this.

I am facing a very strange issue.

Once a VM is provisioned, at the vCO side, WFStubMachineProvisioned workflow is throwing the following error:

"Cannot execute workflow : ModelObjectRelation, not loaded when accessing ( get() )"

Not sure why this error is popping out.

Hope anybody in the community can help me out.

Thanks,

SK

Orchestrator 6.0.1 will ship with a new plugin that exposes the vSphere PBM API to workflows.

PBM (a.k.a. SPBM) is part of vSphere, but has a separate API, provided to clients by a dedicated web service. The PBM plugin for vRO is distributed separately from the vSphere plugin, but reads its configuration to obtain a list of defined vSphere hosts. Therefore, to connect vRO to a PBM service, one would need to configure the vSphere plugin and add the corresponding vCenter Server instance.

I need to get a handle on how to find something in the vsphere API for use in javascript.

For example take this line of code:

var vimHost = vm.vimHost;

Where would I go to discover there is a class called "vm" and that it has a property called "vimhost"

where would I find those details?

Thanks!

Hi,

I'm trying figure out how to fill all 3 inputs of my workflow that is running in loop, exactly changing VM resources (ram, cpu).

I'm using "Start workflow in a series" and I'm able to run it on VM I select, but how can I fill rest of inputs, my WF ends with validation error that inputs haven't accurate values.

Thanks for any hint