Press "Enter" to skip to content

vCAC 6 Approval Emails with Nested Groups

Hey All,

recently doing an install of vCAC 6.0.1 for a client and come across an issue I thought I might post about as I could not find anything on it.
It appears that for approval Emails it will only go one group deep, If you have nested groups anyone located within the second group down will not receive an email but can still approve through the portal.

This is something I have been able to replicate in my test lab too. I don’t think this would be a issue generally but it is more of an issue if you use “custom groups” in vCAC as it treats that inbuilt group as the first group and any members of groups you placed under it will not receive email notifications for approvals.

For example,

1) add a group
vcacnested

2) Select custom group give it a name and then you can add users or groups from AD under this, then hit ADD
vcacnested02

3) now you have a custom group, keep in mind the same applied to nested AD groups too but I can see this or a combination of the both being the most used.
vcacnested03

If you now make an approval policy and use the custom group created the users within the AD group that I added will not get an approval Email.

If you putty into vCAC appliance and go to “/var/log/vmware/vcac/catalina.out” you can see the errors or general work that is happening in the background.
This is a snippet from when running a catalog item with an approval flow for the custom group just created,

 Level#1: level 1 - Created work item for approvers [, GROUPS:test Custom Group@vsphere.local] in Approval Request c7ffca67-63a3-4b11-bdb8-770fb6fb9207
 2014-06-25 21:22:11,201 [queue-pool-executer-2] [approvals] DEBUG com.vmware.vcac.core.approvals.events.ApprovalProcessorActivator.processApproval:41 - Completed processing item from queue to (evaluate/advance) Approval [28ac9197-3160-45bf-94af-aa9827943fda]
 2014-06-25 21:22:11,802 [queue-pool-executer-2] [work-item] INFO com.vmware.vcac.core.workitem.integration.activator.WorkItemServiceActivator.handleMessage:19 - Message received: [[Payload=WorkItemPayload: {workItemId=a3cd64bf-4908-41d5-88d9-b674c31d34cb, workItemPrincipals= [Principal [id=test Custom Group@vsphere.local, principalType=GROUP, displayName=null]]}][Headers={id=1ca2f503-1cf2-476e-96ee-47d395c5b3fc, timestamp=1403695331137, JdbcChannelMessageStore.SAVED=true, JdbcChannelMessageStore.CREATED_DATE=1403695331137, retrieveDelegates=true}]]
 2014-06-25 21:22:11,834 [queue-pool-executer-2] [work-item] WARN com.vmware.vcac.core.workitem.service.WorkItemFormsCallbackService.getFormsEndpoint:108 - No user session. Using solution user credentials
 2014-06-25 21:22:13,381 [tomcat-http--10] [approvals] DEBUG com.vmware.vcac.core.approvals.service.forms.impl.FormsServiceImpl.getNotificationForm:145 - Notification form requested for approval request c7ffca67-63a3-4b11-bdb8-770fb6fb9207
 2014-06-25 21:22:13,393 [tomcat-http--10] [approvals] WARN com.vmware.vcac.core.approvals.service.forms.impl.ExternalFormsGatewayImpl.createFormsEndpoint:92 - No user session. Using solution user credentials
 2014-06-25 21:22:13,632 [tomcat-http--36] [catalog] WARN com.vmware.vcac.catalog.provider.gateway.impl.ProviderFormGatewayImpl.createSolutionUserClient:267 - No user session. Using solution user credentials
 2014-06-25 21:22:13,769 [tomcat-http--51] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:71 - {Form Request: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:13,771 [tomcat-http--51] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getRequestId:169 - {Form Request Context Params: [machineRequestId: null]}
 2014-06-25 21:22:13,771 [tomcat-http--51] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getSubtenantId:156 - {Form Request Context Params: [subtenantId: 752c8557-81ec-4c87-b867-5698a0213aad] for [blueprintId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:13,772 [tomcat-http--51] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:101 - {Form Response successful for: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:14,240 [queue-pool-executer-3] [catalog] WARN com.vmware.vcac.catalog.provider.gateway.impl.ProviderFormGatewayImpl.createSolutionUserClient:267 - No user session. Using solution user credentials
 2014-06-25 21:22:14,384 [tomcat-http--31] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:71 - {Form Request: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:14,385 [tomcat-http--31] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getRequestId:169 - {Form Request Context Params: [machineRequestId: null]}
 2014-06-25 21:22:14,385 [tomcat-http--31] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getSubtenantId:156 - {Form Request Context Params: [subtenantId: 752c8557-81ec-4c87-b867-5698a0213aad] for [blueprintId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:14,386 [tomcat-http--31] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:101 - {Form Response successful for: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
 2014-06-25 21:22:14,644 [tomcat-http--53] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id 8eef5919-6126-4256-93cf-b94c06b7821c
 2014-06-25 21:22:14,662 [queue-pool-executer-2] [work-item] INFO com.vmware.vcac.core.workitem.integration.activator.WorkItemServiceActivator.handleMessage:21 - Message successfully handled with messageId [1ca2f503-1cf2-476e-96ee-47d395c5b3fc]
 2014-06-25 21:22:14,748 [tomcat-http--5] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id c43b2a5b-853e-4101-a96a-6f3ded9e9166

Now if I create another approval policy with just the assets group we get this:

Level#1: level 1 - Created work item for approvers [, GROUPS:Assets@virtualiseme.com.au] in Approval Request 002251ca-ce52-4987-b429-6a1ec17b5969
2014-06-25 21:25:26,134 [queue-pool-executer-1] [approvals] DEBUG com.vmware.vcac.core.approvals.events.ApprovalProcessorActivator.processApproval:41 - Completed processing item from queue to (evaluate/advance) Approval [8a1e7bb7-ff29-45ac-b2f0-e3ba21b54607]
2014-06-25 21:25:26,809 [queue-pool-executer-1] [work-item] INFO com.vmware.vcac.core.workitem.integration.activator.WorkItemServiceActivator.handleMessage:19 - Message received: [[Payload=WorkItemPayload: {workItemId=e2646e5c-e5f5-4b7a-bcb0-1f322285678c, workItemPrincipals= [Principal [id=Assets@virtualiseme.com.au, principalType=GROUP, displayName=null]]}][Headers={id=40cf8560-103b-43f7-823d-369ac0293039, timestamp=1403695526061, JdbcChannelMessageStore.SAVED=true, JdbcChannelMessageStore.CREATED_DATE=1403695526061, retrieveDelegates=true}]]
2014-06-25 21:25:26,842 [queue-pool-executer-1] [work-item] WARN com.vmware.vcac.core.workitem.service.WorkItemFormsCallbackService.getFormsEndpoint:108 - No user session. Using solution user credentials
2014-06-25 21:25:26,970 [tomcat-http--8] [approvals] DEBUG com.vmware.vcac.core.approvals.service.forms.impl.FormsServiceImpl.getNotificationForm:145 - Notification form requested for approval request 002251ca-ce52-4987-b429-6a1ec17b5969
2014-06-25 21:25:26,982 [tomcat-http--8] [approvals] WARN com.vmware.vcac.core.approvals.service.forms.impl.ExternalFormsGatewayImpl.createFormsEndpoint:92 - No user session. Using solution user credentials
2014-06-25 21:25:27,179 [tomcat-http--13] [catalog] WARN com.vmware.vcac.catalog.provider.gateway.impl.ProviderFormGatewayImpl.createSolutionUserClient:267 - No user session. Using solution user credentials
2014-06-25 21:25:27,310 [tomcat-http--27] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:71 - {Form Request: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:27,312 [tomcat-http--27] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getRequestId:169 - {Form Request Context Params: [machineRequestId: null]}
2014-06-25 21:25:27,312 [tomcat-http--27] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getSubtenantId:156 - {Form Request Context Params: [subtenantId: 752c8557-81ec-4c87-b867-5698a0213aad] for [blueprintId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:27,313 [tomcat-http--27] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:101 - {Form Response successful for: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:29,252 [queue-pool-executer-2] [catalog] WARN com.vmware.vcac.catalog.provider.gateway.impl.ProviderFormGatewayImpl.createSolutionUserClient:267 - No user session. Using solution user credentials
2014-06-25 21:25:29,394 [tomcat-http--7] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:71 - {Form Request: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:29,395 [tomcat-http--7] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getRequestId:169 - {Form Request Context Params: [machineRequestId: null]}
2014-06-25 21:25:29,396 [tomcat-http--7] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getSubtenantId:156 - {Form Request Context Params: [subtenantId: 752c8557-81ec-4c87-b867-5698a0213aad] for [blueprintId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:29,397 [tomcat-http--7] [iaas-proxy] INFO com.vmware.vcac.iaas.controller.BlueprintFormController.getForm:101 - {Form Response successful for: [serviceId: d6911a75-5a39-4fb0-8402-75818dbf1742], [formId: Infrastructure.Virtual-Request.Details], [bindingId: 9c7cd9ab-0d45-4d48-a673-d9c87f7231b7]}
2014-06-25 21:25:29,423 [tomcat-http--19] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id 9e275847-f75d-4ba0-9008-9958ce1065f0
2014-06-25 21:25:29,447 [queue-pool-executer-1] [work-item] INFO com.vmware.vcac.core.workitem.integration.activator.WorkItemServiceActivator.handleMessage:21 - Message successfully handled with messageId [40cf8560-103b-43f7-823d-369ac0293039]
2014-06-25 21:25:29,721 [tomcat-http--30] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id f7143498-2c54-439a-81cd-9147c11ac3a3
2014-06-25 21:25:32,815 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id 9e275847-f75d-4ba0-9008-9958ce1065f0
2014-06-25 21:25:32,826 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationScenarioConfigurationServiceImpl.retrieveConfiguration:113 - Retrieving notification configuration for tenant : vsphere.local
2014-06-25 21:25:34,237 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.UserNotificationPreferenceServiceImpl.getEnabledProviders:134 - Retrieving enabled providers for user[name=asset01@virtualiseme.com.au] in tenant[name=vsphere.local]
2014-06-25 21:25:34,259 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.UserNotificationPreferenceServiceImpl.getEnabledProviders:134 - Retrieving enabled providers for user[name=asset02@virtualiseme.com.au] in tenant[name=vsphere.local]
2014-06-25 21:25:34,273 [queue-pool-executer-1] [notification] ERROR com.vmware.vcac.notification.events.NotificationListenerImpl.sendRichNotificationToUser:111 - There is no notification provider available/enabled to recipient [asset02@virtualiseme.com.au] in tenant [vsphere.local] for sending out Notification [id=9e275847-f75d-4ba0-9008-9958ce1065f0, notificationScenarioId=com.vmware.csp.core.approval.workitem.request, recipients=[Principal [id=Assets@virtualiseme.com.au, type=GROUP]], content=com.vmware.vcac.notification.domain.FormsNotificationContent@5bdb2617, serviceId=3db23918-ea15-4b07-8031-6987a944cab4, tenantName=vsphere.local]
2014-06-25 21:25:34,275 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:90 - Updating notification 9e275847-f75d-4ba0-9008-9958ce1065f0 for recipient asset02@virtualiseme.com.au's delivery status to DISABLED for notification provider type EMAIL_PROVIDER
2014-06-25 21:25:34,323 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id f7143498-2c54-439a-81cd-9147c11ac3a3
2014-06-25 21:25:34,335 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationScenarioConfigurationServiceImpl.retrieveConfiguration:113 - Retrieving notification configuration for tenant : vsphere.local
2014-06-25 21:25:34,384 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:170 - count recipient Delivery Statuses: RecipientDeliveryStatus [recipientId=scott@virtualiseme.com.au, deliveryStatuses={}, message=null], status = INPROGRESS
2014-06-25 21:25:34,386 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:183 - notificationDeliveryStatus=NotificationDeliveryStatus [notificationId=f7143498-2c54-439a-81cd-9147c11ac3a3, deliveryStatus=INPROGRESS, recipientDeliveryStatuses=[RecipientDeliveryStatus [recipientId=scott@virtualiseme.com.au, deliveryStatuses={}, message=null]], version=1], size=1, numberOfInProgress=1, numberOfSent=0, numberOfFailed=0, numberOfDisabled=0
2014-06-25 21:25:34,386 [queue-pool-executer-1] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.retrieveNotificationDeliveryStatus:72 - Retrieve notification delivery status NotificationDeliveryStatus [notificationId=f7143498-2c54-439a-81cd-9147c11ac3a3, deliveryStatus=INPROGRESS, recipientDeliveryStatuses=[RecipientDeliveryStatus [recipientId=scott@virtualiseme.com.au, deliveryStatuses={}, message=null]], version=1]
2014-06-25 21:25:34,387 [queue-pool-executer-1] [notification] WARN com.vmware.vcac.notification.events.NotificationListenerImpl.onNotification:90 - notification [Notification [id=f7143498-2c54-439a-81cd-9147c11ac3a3, notificationScenarioId=csp.catalog.notifications.request.submission, recipients=[Principal [id=scott@virtualiseme.com.au, type=USER]], content=com.vmware.vcac.notification.domain.FormsNotificationContent@4130c4c3, serviceId=null, tenantName=vsphere.local]] is not sent: notification scenario [csp.catalog.notifications.request.submission] is not enabled in tenant [vsphere.local]
2014-06-25 21:25:35,807 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.events.EmailNotificationListenerImpl.handleMessage:19 - Message received: [[Payload=RichNotification [recipientId=asset01@virtualiseme.com.au, notificationId=9e275847-f75d-4ba0-9008-9958ce1065f0, notificationProviderId=970264b0-fb53-4950-a906-1dcfd3bdbd36]][Headers={id=8b085d37-d923-4f70-9bab-b364ea9f6251, timestamp=1403695534257, JdbcChannelMessageStore.SAVED=true, JdbcChannelMessageStore.CREATED_DATE=1403695534257, NotificationProviderType=EMAIL_PROVIDER}]]
2014-06-25 21:25:35,814 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationProviderServiceImpl.retrieveNotificationProvider:77 - Retrieving notification provider for id: 970264b0-fb53-4950-a906-1dcfd3bdbd36
2014-06-25 21:25:35,821 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationServiceImpl.retrieve:94 - Retrieving notification with id 9e275847-f75d-4ba0-9008-9958ce1065f0
2014-06-25 21:25:37,595 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.InboundNotificationServiceImpl.create:71 - Saved InboundNotification [getNotificationId()=9e275847-f75d-4ba0-9008-9958ce1065f0, getUserToken()=c4cd0e66-0d6c-41a1-aad2-ada7da0c2175, getSubject()=null, getFromUser()=asset01@virtualiseme.com.au, getMessageReceivedAt()=null, getUserId()=asset01@virtualiseme.com.au] into database for future reference
2014-06-25 21:25:37,600 [queue-pool-executer-2] [notification] ERROR velocity.logVelocityMessage:151 - Left side of '>=' operation is not a Number at extensions/csp.places.iaas.forms.vm[line 32, column 22]
2014-06-25 21:25:37,607 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.MessageSenderServiceEmailImpl.sendMessage:331 - Sending notification [Notification [id=9e275847-f75d-4ba0-9008-9958ce1065f0, notificationScenarioId=com.vmware.csp.core.approval.workitem.request, recipients=[Principal [id=Assets@virtualiseme.com.au, type=GROUP]], content=com.vmware.vcac.notification.domain.FormsNotificationContent@7dfd56e, serviceId=3db23918-ea15-4b07-8031-6987a944cab4, tenantName=vsphere.local]] to recipient [asset01@virtualiseme.com.au] with token [c4cd0e66-0d6c-41a1-aad2-ada7da0c2175] using provider [smtp://vcac-noreply%40virtualiseme.com.au:******@hmail.virtualiseme.com.au:25/INBOX]
2014-06-25 21:25:37,645 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:90 - Updating notification 9e275847-f75d-4ba0-9008-9958ce1065f0 for recipient asset01@virtualiseme.com.au's delivery status to SENT for notification provider type EMAIL_PROVIDER
2014-06-25 21:25:37,680 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:170 - count recipient Delivery Statuses: RecipientDeliveryStatus [recipientId=asset02@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=DISABLED}, message=null], status = DISABLED
2014-06-25 21:25:37,680 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:170 - count recipient Delivery Statuses: RecipientDeliveryStatus [recipientId=asset01@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=SENT}, message=null], status = SENT
2014-06-25 21:25:37,681 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.updateNotificationDeliveryStatus:183 - notificationDeliveryStatus=NotificationDeliveryStatus [notificationId=9e275847-f75d-4ba0-9008-9958ce1065f0, deliveryStatus=INPROGRESS, recipientDeliveryStatuses=[RecipientDeliveryStatus [recipientId=asset02@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=DISABLED}, message=null], RecipientDeliveryStatus [recipientId=asset01@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=SENT}, message=null]], version=1], size=2, numberOfInProgress=0, numberOfSent=1, numberOfFailed=0, numberOfDisabled=1
2014-06-25 21:25:37,681 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.service.impl.NotificationDeliveryStatusServiceImpl.retrieveNotificationDeliveryStatus:72 - Retrieve notification delivery status NotificationDeliveryStatus [notificationId=9e275847-f75d-4ba0-9008-9958ce1065f0, deliveryStatus=SENT, recipientDeliveryStatuses=[RecipientDeliveryStatus [recipientId=asset02@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=DISABLED}, message=null], RecipientDeliveryStatus [recipientId=asset01@virtualiseme.com.au, deliveryStatuses={EMAIL_PROVIDER=SENT}, message=null]], version=1]
2014-06-25 21:25:37,682 [queue-pool-executer-2] [notification] INFO com.vmware.vcac.notification.events.EmailNotificationListenerImpl.handleMessage:21 - Message successfully handled with messageId [8b085d37-d923-4f70-9bab-b364ea9f6251]

you will notice it has picked up the 2 users asset01 and asset02 on the assets group.

Thats it, when using approval policies and you want to use emails to approve or reject requests then you can not have nested groups either in AD or within vCAC.

Cheers

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Anti SPAM BOT Question * Time limit is exhausted. Please reload CAPTCHA.