Orchestrator workflow permissions

Similar Questions

• Initiate Orchestrator workflow through REST/Post with JSON body

  I am trying to initiate a workflow custom Orchestrator by issuing a MESSAGE from a client (in this case a violin) with the parameters in JSON format in the body.

  So far, I have been unable to get what anyone other than a 400 Bad Request and a "the request sent by the client was syntactically incorrect ()." in response.

  My environment is

  vCenter Orchestrator 5.1.1 Build 2942

  Java version 1.6.0.26

  The rest 1.0.1 Plugin is installed

  To verify that I am indeed able to initiate a workflow via a POST, I tested with XML in the MESSAGE body, just like a validation test. Given a data center TestDC2 I send the following

  POST https://10.144.20.62:8281/api/stream/d7614e92-0578-42b6-9c1f-04bd8a0533d3/executions / HTTP/1.1

  Authorization: Basic XXXXXXXXXXXXXXXXXXXX

  User-Agent: Mozilla/5.0 (Windows NT; Windows NT 6.1; en - us) WindowsPowerShell/3.0

  Content-Type: application/xml

  Host: 10.144.20.62:8281

  Content-Length: 311

  Connection: Keep-Alive

  " <-xmlns = execution context" http://www.VMware.com/VCO "> "

  < Parameters >

  < name of the parameter = "datacenterName" type = "string" >

  < string > TestDC2 < / string >

  < / parameter >

  < name of the parameter = "customerVMFolder" type = "string" >

  < string > aNewFolderVMFolder < / string >

  < / parameter >

  < / Parameter >

  < / execution context >

  I get a response of success

  HTTP/1.1 202 accepted

  Location: https://10.144.20.62:8281/api/stream/d7614e92-0578-42b6-9c1f-04bd8a0533d3/executions/ff8080813e847992013fa4ac4c2b046f /

  ETag: "0d41d8cd98f00b204e9800998ecf8427e".

  Content-Length: 0

  Date: Wednesday, July 3, 2013 13:15:22 GMT

  Server: vCO Server

  and 'aNewFolderVMFolder' folder is created under TestDC2

  The JSON equivalent

  POST https://10.144.20.62:8281/api/stream/d7614e92-0578-42b6-9c1f-04bd8a0533d3/executions / HTTP/1.1

  Authorization: Basic XXXXXXXXXXXXXXXXXXXX

  User-Agent: Mozilla/5.0 (Windows NT; Windows NT 6.1; en - us) WindowsPowerShell/3.0

  Content-Type: application/json

  Host: 10.144.20.62:8281

  Content-Length: 173

  Connection: Keep-Alive

  {

  'settings':]

  {'name': "datacenterName", "type": "string", "value": "TestDC2"},

  {'name': "customerVMFolder", "type": "string", "value": "aNewFolderVMFolder"}

  ]

  }

  gives a bad request

  HTTP/1.1 400 Bad Request

  Content-Type: text/html; charset = utf-8

  Content-Length: 965

  Date: Wednesday, July 3, 2013 13:21:02 GMT

  Connection: close

  Server: vCO Server

  < html > < head > < title > JBossWeb/2.0.1.GA - error report < / title > < style > <!-H1 {do-family: Tahoma, Arial, without serif; color: white; background-color: # 525 76; do-size: 22px ;}} H2 {do-family: Tahoma, Arial, without serif; color: white; background-color: # 525 76; do-size: 16px ;}} H3 {do-family: Tahoma, Arial, without serif; color: white; background-color: # 525 76; do-size: 14px ;}} BODY {do-family: Tahoma, Arial, without serif; color: black; background-color: white ;}} B {do-family: Tahoma, Arial, without serif; color: white; background-color: # 525 76 ;}} P {do-family: Tahoma, Arial, without serif;: white background; color: black; do-size: 12px ;}} A {color: black ;}} B.SID {color: black ;}} HR {color: # 525 76 ;} - > < / style > < / head > < body > < h1 > State HTTP 400 - < / h1 > < HR size = "1" = "noshade" noshade > < p-type > < b > < /b > < /p > < p > < b > report message < /b > < u > < / u > < / p > < p > < b > description < /b > < u > the request sent by} the client was syntactically incorrect (). < /u > < /p > < HR size = "1" noshade "noshade" = > < h3 JBossWeb/2.0.1.GA > < / h3 > < body / > < / html >

  After reading The POST CURL with vCO 5.1 REST API

  I also tried

  POST https://10.144.20.62:8281/api/stream/d7614e92-0578-42b6-9c1f-04bd8a0533d3/executions / HTTP/1.1

  Authorization: Basic YWRtaW46U2E1YWRtMW4 =

  User-Agent: Mozilla/5.0 (Windows NT; Windows NT 6.1; en - us) WindowsPowerShell/3.0

  Content-Type: application/json

  Host: 10.144.20.62:8281

  Content-Length: 266

  Connection: Keep-Alive

  {

  'settings':]

  {'name': 'datacenterName', 'type': 'string', 'field': 'local', 'value': {"value": "TestDC2", 'objectType': 'chain'}},

  {'name': 'customerVMFolder', 'type': 'string', 'field': 'local', 'value': {"value": "KamTestFolder", "objectType": "string"}}

  ]

  }

  with exactly the same results

  What I am doing wrong?

  Burke - State 415 code indicates the shift in the type of media, which is expected, because there is no Content-Type header

  KeyboardSlappingMonkey - I think that the body of the request should be something like the following (note the difference in the format of the value)

  {'settings': [{'name': 'datacenterName', 'type': 'string', 'value': {'chain': {'value': 'TestDC2'}}}, {"name": "customerVMFolder", "type": "string", "value": {'chain': {'value': 'KamTestFolder'}}}]}

  and you must pass the Content-Type header with the value application/json;v=5.1.1

  I hope this helps.

• Get-QADComputer fails if run PowerShell script through Orchestrator workflow

  I use the "Get-QADComputer" cmdlet in my .ps1 script that is supposed to run via Orchestrator.  I have several PowerShell scripts started by Orchestrator and run on a host windows without any problem.  For this script, I have these 2 commands and still error.  The script does not error when run locally.

  Add-PSSnapin Quest.ActiveRoles.ADManagement - ErrorAction SilentlyContinue

  $Computer = get-QADComputer-identity "server01" | where {$_.name - eq "server01"}

  In troubleshooting, I ran Get-PSSnapin and can see that the snap for AD is loaded successfully.  I tried Connect-QADService and who also gives the same error, although it works very well on place.

  I use vCO 5.1.1. device.   On the hosts Windows where are the scripts PowerShell, the AD snap is version 1.6.0.2683.

  Here is the error in the logs Orchestrator...

  PowerShellInvocationError: Errors found during execution of script

  System.Runtime.InteropServices.COMException (0x8007054B): the specified domain does not exist or could not be contacted.

  at Interop.ActiveDs.IADsOpenDSObject.OpenDSObject (String lpszUserName, String lpszPassword, String lpszDNName, Int32 lnReserved)

  to Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.AdsiDirectory.NativeBind (adsPath String, AuthenticationTypes bindFlags)

  at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.AdsiDirectory.BindToObject (String dn)

  at Quest.ActiveRoles.ArsPowerShellSnapIn.DirectoryAccess.ConnectorFactory.Create (String serverName, user String, SecureString password, type of ConnectorType)

  to Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.ConnectionAwareCmdlet.EstablishConnection (ConnectionProperties connectionProperties)

  at Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.ConnectionAwareCmdlet.GetContainer)

  at Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.GetUserCmdlet.BeginProcessing)

  at System.Management.Automation.Cmdlet.DoBeginProcessing)

  at System.Management.Automation.CommandProcessorBase.DoBegin)

  (Name of the dynamic Script Module: invokeScript #14)

  Thanks for the info.  I use the workflow "Invoke an external script" to run many of my host admin PowerShell scripts.  It is easier for me to keep all .ps1 files in one place and not import them into Orchestrator.  The article prompted me to switch my connection to host basic Powershell to Kerberos.  To do this, I had to update /etc/krb5.conf on the device of the vCO.  I've referenced VMware KB2036986 to work around the problem "unable to get kdc for the Kingdom.  This issue was mainly because we couldn't have krb5 configured previously.

  Now, I got a different error during execution of the workflow after bouncing vCO.

  System.NullReferenceException: Object Reference not set to an instance of an object.

  Has pointed out me the need to first make the connection AD.  He has not worked before without Kerberos authentication.  Once I added these lines of code, Get-QADComputer finally worked without error!   Thanks for the help.

  $pass = ConvertTo-SecureString - AsPlainText-Force - String "password".

  Connect-QADService - "example.com\serviceaccount" ConnectionAccount - ConnectionPassword $pass

  $Computer = get-QADComputer-identity "server01" | where {$_.name - eq "server01"}

  Disconnect-QADService

• Orchestrator workflow change startup BIOS

  New to orchestrator and have some problems.

  Tried to get a workflow that will change the setting to a virtual machine to boot to the BIOS during the next reboot.

  Tried using the following script and put it in action and then place it in the workflow, but it does nothing:

  var myVcVirtualMachineBootOptions = new VcVirtualMachineBootOptions();
  enterBIOSSetup = true;

  any help would be greatly appreciated.

  Thank you

  I tested the script posted by Kyle. It works very well.

  In your workflow, add an entry of type vc: virtual machine

  Add this as an entry in your box of scriptable.

  Paste this code:

  spec var = new VcVirtualMachineConfigSpec();

  spec.bootOptions = new VcVirtualMachineBootOptions();

  spec.bootOptions.enterBIOSSetup = true;

  vm.reconfigVM_Task (spec);

  "vm" should be highlighted since you have vm as input.

  Validate the workflow.

  Run it.

  If you have never done workflow previously, I recommend going through the tutorials on vcoteam.info. You'll find all the basics on the input parameters, linking entries and so on.

  Christophe.

• vCenter Orchestrator Workflow - sanitation

  Can anyone help to create a workflow to automatically correct the hosts?

  Thank you

  Hello

  Can you be more pls developed on your condition?

  If I understand correctly, you want to use VMware Update Manager in the Orchestrator product and would like to create workflows. Currently, this is no plugin for AUVS in vCO, so it is not possible to take advantage of the feature VUM in vCO. Incase my understanding is incorrect, pls correct the same.

• Customer Orchestrator workflow runtime log erased

  When I run a workflow, the token has all kinds of text in the newspaper, just as I expect. The next day, there is nothing in the log tab but I recall being able to look at the logs of previous race days after the fact. Am I wrong?

  If I check that the config vCO web page and scroll back in the paper, I see entries for the execution of the workflow, I do not see it in the client more.

  Has it always been like that or I did something wrong?

  Edit: It actually seems that I lose the paper when I close and reopen the client. The variables are still there, but the log is empty.

  Thank you

  This is because you closed the client. The system.logs are returned by the server to the client. If you close the client logs are not sent.

  If you want to keep the newspapers use Server.log. This will add items in the events tab of the workflow.

• Orchestrator device doesn't remember newspapers of Workflow

  Our unit version: 5.1.0 build 2725

  Hello!

  It is sometimes necessary to write information to a workflow with the Systems.log () method in the Logs Section of an Orchestrator Workflow. But unfortunately orchestrator doesn't remember the entry of these newspapers after logout?

  Example:

  Very simple WF: enter text and save this text... nothing else, see pdf attachment

  Then I entered 'Text1' and run the Windows Firewall:

  

  as you can see in newspaper it is my "Text1".

  This log entry is recorded in the journal orchestrator:

  28 2013-03- + 0100 INFO [performance] 12:15:09.450 run workflow "paper method.
  28-03-2013 12:15:09.747 + 0100 [SCRIPTING_LOG] INFO [Log method (28/03/13 12:15:09)] Text1
  28 2013-03- + 0100 INFO [WorkflowHandler] log method 12:15:09.834

  now I close orchestrator and you connect again and go to my previous WF run

  

  The newspaper went! ??

  I remember that newspapers must be in the orchestrator database as long I did not remove the completed wf run... and with the old version of the orchestrator unit, it was the truth... but now?

  Any ideas to save the journal entries?

  This is normal. If you want to keep the newspapers use Server.log

  More information on vco logs here: http://www.vcoteam.info/learn-vco/how-to-handle-vcenter-orchestrator-logs.html

  Christophe.

• the host performance, no update values not returned to the orchestrator script...

  Hope someone can tell what I'm doing wrong.

  I'm still on 5.5 and trying to get the load data for ESXi hosts (via connected to the orchestrator Server vcenter) to decide on which host is the best target for vmotion-action.

  As I could not find any workflow builtin or efforts to get data to load, I tried to dig myself via a script.

  • find all hosts
  • for each reading of the host.summary.quickStats.overallCpuUsage host

  I have values, but they are static and do not get updated.

  If I use perl-sdk and perform the same actions to vcenter I get updated for each esxi host values.

  Browse objects via the web on the server vcenter watch also updated these values.

  If only my orchestrator workflow seems to be wrong.

  I do not suspect that the workflow in orchestrator performs a query only the inventory and not the living objects. It is much faster than doing the same thing with perl-sdk.

  My little script (which could be run in a single Scriptable task with no impression one journal entry/exit). Problem can be seen by newspaper printing. Total used MHz does not change in my environment.

  --------------------------------CUT

  var host = System.getModule("com.vmware.library.vc.host").getAllHostSystems ();

  var tothz = 0;

  for {(i in hosts)

  var cpu_used =. summary.quickStats.overallCpuUsage of hosts [i];

  tothz = tothz + cpu_used;

  }

  
  

  System.log ("tothz:"+ tothz ");

  --------------------------------CUT

  Q1: I am doing something stupid in my script?

  Q2: I have to do some extra steps to get the updated values?

  Q3: Is there a better way to find/load-performance data for ESXi hosts?

  Stupid enough to write the sollution myself

  It is possible to force an update of the inventory values for objects that are important to your script/workflow.

  It can be done by the following function in a script.

  VcPlugin.refreshObjects (object-to-update - in - stock)

  So for my specific problem, I could solve it with a single additional line.

  --------------------------------CUT

  var host = System.getModule("com.vmware.library.vc.host").getAllHostSystems ();

  var tothz = 0;

  for {(i in hosts)

  VcPlugin.refreshObjects (the hosts [i]) / *.< my="" new="" line="">

  var cpu_used =. summary.quickStats.overallCpuUsage of hosts [i];

  tothz = tothz + cpu_used;

  }

  System.log ("tothz:"+ tothz ");

  --------------------------------CUT

  This seems to force an update of the inventory values before I use them.

  It will certainly slow down my script a little, but it's part of the game.

• vCAC Design Center - error creates a custom workflow

  I've implemented a very small vCAC lab environment and I try to play with custom in the vCAC designer workflows.  I installed the client, launched and clicked on load.  I select WFStubBuildingMachine, double-click the construction of machine, then a custom code.  I then drag an InvokeVcoWorkflow object in the custom code section and attach it to the original node.  When I click on the selection of a vCenter Orchestrator workflow button, I'm greeted by an error occurred during the processing of this application and I can't go any further.  The only other mistake that I see at the bottom where it is said:

  Value for a required activity argument 'VirtualMachineId' has not been provided.  I though that was passed in by default, and I don't see anywhere to add it.  I am not finding anything in my research, so I am at a loss here.

  Any help would be appreciated.

  Thank you.

  If you run the designer as an administrator, it should work fine.

• Workflow slow when you take snapshots

  I have a question about the connections of vCenter.

  Is there a limit on the maximum number of requests can be sent per second for an individual to vCenter connection?

  The reason why I ask is that we have a 'problem' with Orchestrator.

  We created a workflow check if it is possible to create a snapshot (enough storage, has no snapshot,...) and it works for 1-2 seconds.

  But when we begin to create Snapshot (default Orchestrator workflow), and while the snapshot is being created we run the same validate workflow (see above) then this runs workflows for 8 to 10 seconds (factor 4-5 slower)

  And we put the finger on the question of the "vim3WaitTaskEnd" in the instant of creation. If the vote is set to 2 seconds (by default), we have these problems. If we increase the terms of the poll to 300 seconds (to remove it), we have no more of these issues.

  While the snapshot is created, we run the same snapshot to validate, but as a different user, then she extends over only 1-2 seconds again.

  So there must be some sort of maximum number of orders per session/connection?

  
  

  Or y at - it a solution for this?

  The upgrade to version 5.5.1 fixes

• Definition of Orchestrator to execute a script PowerCLI

  What is the best way to implement Orchestrator to run a powerCLI script?

  Hello TheVMinator,

  Here are the first two ways that come to mind for me:

  1. VCO run under Windows - use the 'command' to fall at a command prompt, and then run your scripts PowerCLI from the vCO Server (you can use the method described in this article to access the object of the control: How to execute a PERL Script from a vCenter Orchestrator Workflow)
  2. Install the PowerShell plug-in, configure WinRM, then run your PowerCLI scripts on the remote host that you configured via WinRM (reference: seamless integration with PowerCLI and PowerShell plugin |) VMware vCenter Orchestrator Blog - VMware Blogs)

• 'You do not have permissions for this item' - the HARDWARE SPECIFICATION

  Dear members,
  
  I'm trying to access a material specification, but I am constantly presented with the following message: ""you do not have permissions for this item.
  
  Curiously, I could already access specifications but now I am presented with this.
  
  I have the same problem with the profiles of LIO.
  
  Does anyone have a known solution for this?
  
  Kind regards

  This happens usually when you do not have read permission according to the State of the workflow of the specification. Different permissions can be set up for different status in the Administration of the WFA (WorkFlow).

  In addition, if you use business units as a safety feature (rather than just BU visibility), you might get this message. In this case, you should not be able to see this specification in a search result, though, so if you see in the results of material technical search page, is not a DRINK problem, it's a workflow issue permission to read.

  There is an additional possibility, that is if your team has put in place the extensibility point of SpecVetoHandler, which allows for personalized reading permission checks added. It is a technical extensibility point configured in the config file CustomPluginExtensions.xml.

  But more likely, it's a workflow permissions problem. You should ask your users to s Adminitrator of workflow.

  Concerning
  Ron

• How to run scripts powershell to Orchestrator

  Hello

  is it possible to run powershell Orchestrator-workflow scripts?

  I got it only work with a powershell ssh server on another system (http://www.powershellinside.com/powershell/ssh/)

  and Executive a ssh command inside the workflow.

  Kind regards

  Joerg

  This can be done in the 4.0 update release 2 (which was released on June 10, 2010).

  To do this, you will first need to modify the configuration of server vCO since issuing an operating system command is prohibited by default for security reasons.  Please keep in mind that everything you do here are run with the credentials of the user running the process of vCO (default localSystem).

  1. the file to edit is vmo.properties under the application-server/server/vmo/conf directory.

  Add a line to the bottom

  com VMware.js.allow - local-process = true

  and save the config file.

  The details of how to proceed is in the guide of the administrator under "Definition of system properties"-> "JavaScript access to the operating system commands Set.

  2. create a new workflow and paste the following line in a box "that contains a script task.

  command = new command ("cmd /c copy c:
  Orchestrator
  c: test.txt
  Orchestrator
  test1.txt');

  command = new command ("powershell.exe - order copy c:")
  Orchestrator
  c: test.txt
  Orchestrator
  test2.txt");

  Command.Execute (true);

  3. Optional: If you want to have access to another part of the file system, please take a look at the "Set Server file system Access to the Workflows and JavaScript" section in the Administrator's Guide. The configuration file referenced in the guide is not there by default, so you have to create it.

  Please keep in mind that which allows commands to be run on a server with a workflow has some security implications.  Running PowerShell this way also means that:

  -you are limited to running the PowerShell script without the ability to interact with your script to halfway through the script

  -You can build the string to start the PowerShell script (like providing a virtual machine with VM.name), but the output of the PowerShell script would have to write to a file that you can then open and read with another stream of work (or action).

  I hope this helps.

  SIA

• Rename or create a new dvPortGroup in a workflow

  Hi all!

  I was wondering if it is possible to create or rename a dvPortGroup in orchestrator workflow.

  I'm provisioning Custom VMs and I need an attachment, a network interface to a dvPortGroup (which can be created or renamed). I would like to see an example or point to the relevant API to make the name change.

  Thank you

  Hello

  Yes, it is very well possible to call this method, ReconfigureDVPortgroup_Task, to Orchestrator.

  Once you have configured your vCenter Orchestrator with, you can call the API of Orchestrator with a workflow, even how to access other managed objects and call the API. All you need is to write your own scripts customized for the workflow. So, regarding your question, if this method is available in Orchestrator or not, yes it's available. You can call the same task to a scriptable worklfow. The method is available under: reconfigureDVPort_Task (VcDVPortConfigSpec_port);  You must pass the specifications according to your requirement. .

  When you write your sript to a task scriptable element, you can discover all the objects and methods in vSphere from the Search API tab (left side) please refer to the attached screenshot for the same thing, VCO.jpg. In addition, you can call all the vSphere API in a workflow. For more details on how to write scripts, and workflows, see http://www.vmware.com/pdf/vco_40_developers_guide.pdf, section development of workflows in Orchestrator Developer Guide.

  Hope the above information helps.

  -Angela-

• Run the command in the comments: dnscmd

  I use the command run in comments to run commands on a host windows below. The account that runs the command has permissions to run these commands.

  cmd.exe /c dnscmd xx.xx.xx.xx hostName1 some.dns.host /recorddelete has xx.xx.xx.xx/f

  cmd.exe /c dnscmd xx.xx.xx.xx /recorddelete some.dns.host hostname1 PTR/f

  (real info IP and host names are hidden to protect the innocent)

  Both run successfully (and should be) run interactively from a CMD prompt, I get the expected result and indicates a nslookup on the hostname '... cannot find < hostname >: field Non-existend' as expected. (img1 attached)

  If run via the command run in the comments, the first command runs (to delete the a record, however, while the second command seems to work, the PTR record is not deleted and nslookup on the hostname returns ' name: < hostname > '(attached img2))

  Thoughts?

  
  

  Here is an excerpt of the object 'command' treatment of an article on my blog: How to run a PERL Script from a vCenter Orchestrator Workflow

  
  // Prepare Command line and parameters to execute:
  
  cmd = scriptName + " " + scriptParams;
  
  System.debug("executing cmd: " + cmd);
  
  // Create and execute the command:
  
  var command = new Command(cmd);
  
  command.execute(true);
  
  // Display command results and output 
  
  var scriptResult = command.result;
  
  System.debug("Script Result: " + scriptResult);
  
  var scriptOutput = command.output;
  
  System.debug("Script Output: " + scriptOutput);
  

  As you can see from the code above, you'll want to look at the results and the exit of the execution of the object of your cmd. I hope that this release will contain some clues as to why your second command fails...