VCSA 6.5 -> 6.7 upgrade — Failed to authenticate with guest

Today I was upgrading a VCSA 6.5 instance to 6.7 as I’ve done a dozen times.  It’s a really simple setup – embedded PSC, etc.  However, I just couldn’t get it to work!

I was constantly presented with “Error in getting source info” from the UI and the upgrade logs contained:

I know you’re thinking “well, yeah, it says ‘Checking if password expired’ …” but alas, it says it is not:

There’s clearly an issue in either an API call or some mechanism checking the password expiration status since we’re seeing malformed STDOUT returns and the password is marked as not expired above.

Strange – the password is not expired… yet when I was in VAMI under Administration the password expiration showed that it had expired in 1970 which is usually an indicator that it has in fact expired.  Oddly enough, though, I could SSH to and access the console of the VCSA with the known expired “not expired” password.

I ended up resetting the root user password using  root@vc-fqdn [ ~ ]# passwd New password: where I reset the password to a temporary password, rebooted, and then reset the password back to the original password, rebooted, and then attempted the upgrade.  At this point everything worked as expected.

Truly weird.  If it were expired I’d have not been able to log in and would have had to use this VMware KB in order to reset the root credentials (I’ve had to do this before on other VCSA’s).

Debating on turning the original VCSA back on and checking the auth logs but…  then again, I’d rather just move forward 🙂

Edit:  I decided that pressing on would not be beneficial to the community.  So, I resurrected the original VCSA and did some searching:

Turns out the root credential was in fact expired.  Not sure why I was still able to login and SSH but that’s life.

Protip:  You need to keep an eye on this (unlike I have!) because if the root account expired then the script (/etc/cron.daily/logrotate) that runs to prune logs will not successfully execute and you will fill up /dev/sda3 – learned this one the hard way many moons ago.

Hope you guys find this useful!

Author: Jon

Share This Post On

5 Comments

  1. Thanks for posting this; I had exactly the same issue with the expired ‘root’ password when attempting to upgrade to VCSA 6.7 and used your notes above to change the password via the BASH shell in an SSH session.

    Post a Reply
  2. This root password is always such a PITA, given me so many headaches when it expires even though set to not expire! Come on VMware, thanks for the write up sir.

    Post a Reply
  3. Thanks that was very helpful, I didn’t need to reboot.

    Post a Reply
  4. Got the same error.
    Changing the root password was the solution.
    Thank you.

    Post a Reply

Submit a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Share This
%d bloggers like this: