AMS Migration Service - No Agentless discovered servers displaying after sucessful vCenter client install

Question

Hi!

after install sucessfully vCenter client ("all green" outputs) according https://docs.aws.amazon.com/mgn/latest/ug/agentless-mgn.html, no Agentless Discovered Servers is show up in Source Servers console. The migration subnet acl is ok (it allows all ports on inbound and outbound rulles from vCenter client local VM thought a site-to-site VPN), since I can ping a dummy EC2 on this subnet and telnet it on port 1500.

I can't find any documentation about local logs on client, but, i found by myself in /var/lib/aws-vcenter-client/active/vcenter_commands_client.log the follow lines at every 10 minutes reporting about a permission error:

```
2023-05-31 18:26:32,849 INFO running discovery command [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 0]
2023-05-31 18:26:32,850 INFO Traceback (most recent call last): [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 1]
2023-05-31 18:26:32,851 INFO   File "", line 1103, in  [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 2]
2023-05-31 18:26:32,851 INFO   File "", line 1022, in command_handler [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 3]
2023-05-31 18:26:32,852 INFO   File "contextlib.py", line 113, in __enter__ [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 4]
2023-05-31 18:26:32,852 INFO   File "", line 127, in open_vcenter_session [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 5]
****2023-05-31 18:26:32,852 INFO PermissionError: [Errno 13] Permission denied [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 6]****
2023-05-31 18:26:32,859 INFO script finished execution with exit code 1 [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY]
2023-05-31 18:26:32,966 ERROR Failed running last command, returned bad exit code [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, exit_code: 1]
```

Besides this, i can't track which script throws this error.

Any idea? What else should i check?

Thanks.

Accepted Answer

Hi again... Finally I descovered the reason before spend some bucks on support! The documentation link above says:

> The certificate must be located in a file that's readable to the vCenter client user, such as a shared directory. If the certificate is not located in a shared directory, you will see a permission error in the logs

Since instalation script doesn't get an error, I didn't pay attention on it. So, when I changed permissions on that folder with chmod, everything worked like a charm!

Answer

Looking at the logs, we can observe this specific message.

****2023-05-31 18:26:32,852 INFO PermissionError: [Errno 13] Permission denied [cirrus/http_commands_client/http_commands_client.py] [_origin_client_type: vcenter_commands_client, _origin_vcenter_client_id: xxxx, vcenter_client_version: 1.1.7, channel_worker_thread_id: 7, script_id: xxxx, script_name: DISCOVERY, line_number: 6]****

The above message needs a more in-depth investigation by the internal team. Please feel free to open a case from the account where you have your resources so the internal team can assist.

Answer

Looking at the error message, it appears to be a permission issue. Please verify if you are meeting all the prerequisites for Agentless replication. 
[+] https://docs.aws.amazon.com/mgn/latest/ug/agentless-mgn.html
[+] https://docs.aws.amazon.com/mgn/latest/ug/agentless-mgn.html#client-notes-mgn

In case, if you are still facing permission issues even after meeting all the requirements, we require details that are non-public information to further carry out investigation. Please open a support case with AWS if not already for further assistance.

Answer

Thank you all by the answer... all pre-requisites are ok... I'll open a suport case so.

AMS Migration Service - No Agentless discovered servers displaying after sucessful vCenter client install

Relevanter Inhalt