Loading

×Sorry to interrupt
Uncaught ReferenceError: addCTracking is not defined
throws at https://kb.vmware.com/resource/KM_TealiumTrackingJS?v=0.5:100:1

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

UAA authentication tab in PKS 1.6 fails to save with error “URI::InvalidURIError bad URI(is not URI?):LDAP URLs” (76495)

Last Updated: 1/7/2020Categories: TroubleshootingTotal Views: 3283Language:
English

1 like this article

Subscribe to get an email
newsletter with new updates

1 people found this helpful Please provide article feedback:

Symptoms

·         When UAA authentication is configured for multiple LDAP URLs with space separated, you see the below error when you save:
500 An error occurred.
URI::InvalidURIError
bad URI(is not URI?): "ldaps://ldap1_fqnd ldaps:// ldap2_fqdn ldaps:// ldap3_fqdn"

·         You are unable to apply changes to install/upgrade PKS as the UAA configuration is not saved.

·         You do not see this error when you provide a single LDAP server for UAA authentication.

Cause

Multiple LDAP servers are supported in PKS, however for PKS 1.6 LDAPBindVerifier option was added in ops manager. This option verifies that the specified LDAP server exists and the provided credentials are valid. Unfortunately, with current ops manager(2.7.x), this verifier works with a single LDAP server only.

Resolution

This issue is set to resolved in upcoming Ops Manager versions.

Workaround

To work around this issue, you can use a single LDAP server and proceed with PKS install/upgrade.

If you would like to use multiple LDAP servers in PKS, disable the LDAPBindVerifier option in Ops Manager to skip the validation.

1.       Get the Opsmanager bearer token for admin user by following the below steps:

a.       Install uaac on opsmanager or client machine and target your Opsmanager IP:
ubuntu@pks-client:~$  uaac target https:// YOUR_OPSMAN_IP /uaa --skip-ssl-validation

Unknown key: Max-Age = 86400
Target: https://192.168.20.26/uaa

b.       Log in to your Ops Manager with the Client name opsman and empty Client secret:
ubuntu@pks-client:~$ uaac token owner get
Client ID:  opsman
Client secret:
User name:  admin
Password:  ********************

Successfully fetched token via owner password grant.
Target: https://192.168.20.26/uaa
Context: admin, from client opsman

c.       Retrieve your Ops Manager access token for admin user:
ubuntu@pks-client:~$ uaac context

2.       export bearer token you collected in previous step:
export BEARER="token"

3.       Get the staged product info by running:
curl -k "https://opsmgr-ip/api/v0/staged/products" -X GET -H "Authorization: Bearer $BEARER"|jq .

4.       Disable the LDAPBindVerifier by running:
curl -k "https://opsmgr-ip/api/v0/staged/products/pivotal-container-service-<id>/verifiers/install_time/LDAPBindVerifier" -X PUT -H "Content-Type: application/json" -H "Authorization: Bearer $BEARER" -d '{ "enabled": false }'| echo

5.       The expected response should be : {}

6.       Run the below command and confirm that LDAPBindVerifier value set to enabled:false.
curl -k "https://opsmgr-ip/api/v0/staged/products/pivotal-container-service-<id>/verifiers/install_time" -X GET -H "Authorization: Bearer $BEARER"|jq .

7.       Now provide the multiple URLs in the UAA configuration tab in PKS and click on save.

8.       You still see the 500 error in opsmgr UI, ignore this error and proceed with apply changes.

9.       Confirm that you are able to install/upgrade PKS.

For more information, see:
Retrieve bearer token: https://docs.pivotal.io/pivotalcf/2-5/opsman-api/#the-basics
Turning off a verifier for Ops manager: https://docs.pivotal.io/pivotalcf/2-5/opsman-api/#turning-off-a-verifier-for-a-specific-product

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
vCloud Director 设备安装最佳实践 (76559)

KB
•
Linux 仮想マシンで SRM IP サブネット ルールのカスタマイズがスキップされる。切断された NIC に対する IP アドレス構成が報告されない (76492)

Results 1-2 of 2

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

Related Versions:

VMware PKS 1.x

Take Our Survey

Support Assistant