Symptoms
vCenter Server configured with External PSC, gives an error: Licensing on vSphere Client fails with error message "Received SOAP response fault from TCP:<vCenter FQDN>:443 GetLicenses Authorization result: User does not have admin rights to perform the operation" In the cis-license\license.log file on PSC (), you will see entries similar to:
<YYYY-MM-DD>T<time></time> pool-3-thread-1 INFO vim.vmomi.server.impl.ValidatorFutureImpl Validation failed for 85422: Authentication result: Missing session auth data<YYYY-MM-DD>T<time></time> pool-3-thread-1 WARN common.vmomi.authn.impl.SsoAuthenticatorImpl authenticate: Session auth data not set in request: sessionNonce: '94ac6fae-9348-4ab7-81de-4b57469564d6' sessionUser: '' requestUri: '/ls/sdk' requestContext: '{operationID=743694ae-7883-4bca-a531-46cfef0f1f6a}'<YYYY-MM-DD>T<time></time> pool-3-thread-1 INFO vim.vmomi.server.impl.ValidatorFutureImpl Validation failed for 85423: Authentication result: Missing session auth data<YYYY-MM-DD>T<time></time> pool-3-thread-1 WARN common.vmomi.authz.impl.PrivilegeAuthorizerImpl authorize: Authorization result: User does not have admin rights to perform the operation (94ac6fae-9348-4ab7-81de-4b57469564d6): sessionNonce: '94ac6fae-9348-4ab7-81de-4b57469564d6' sessionUser: '' requestUri: '/ls/sdk' requestContext: '{operationID=20b481a4-c0d3-4d6e-b93c-62f5279c9a5a}'<YYYY-MM-DD>T<time></time> pool-3-thread-1 INFO vim.vmomi.server.impl.ValidatorFutureImpl Validation failed for 85424: Authorization result: User does not have admin rights to perform the operation (94ac6fae-9348-4ab7-81de-4b57469564d6)<YYYY-MM-DD>T<time></time> pool-3-thread-1 WARN common.vmomi.authn.impl.SsoAuthenticatorImpl Invalid SSO token in request: sessionNonce: '94ac6fae-9348-4ab7-81de-4b57469564d6' sessionUser: '' requestUri: '/ls/sdk' requestContext: '{operationID=9124a94a-a77b-46d1-86d6-67af9ac56eed}'
com.vmware.vim.vmomi.server.exception.InvalidSignatureException: Expired message timestamp.at com.vmware.vim.vmomi.server.security.impl.WsSecurityMessage.validateTimestamp(WsSecurityMessage.java:492)
at com.vmware.vim.vmomi.server.security.impl.WsSecurityMessage.findAuthenticationInfo(WsSecurityMessage.java:224)at com.vmware.vim.vmomi.server.security.impl.RequestSignatureValidatorImpl.validateMessage(RequestSignatureValidatorImpl.java:57)at com.vmware.vim.vmomi.server.impl.ActivationImpl.findSamlToken(ActivationImpl.java:154)..........
Cause
This issue occurs due to the time set difference between vCenter Server and PSC.
Resolution
To resolve this issue, correct the time on vCenter Server or PSC to make sure both the servers are at the same time.
