Credential Mismatch After Changing NSX Advanced Load Balancer Controller Password

Problem

Credential mismatch after changing NSX Advanced Load Balancer controller password.

Cause

If you change controller password for admin user from outside of NSX-T from the Avi Vantage Platform UI, the new password does not refresh in NSX-T. Any change of password outside of NSX-T is not reflected in NSX Manager. NSX Manager does not reflect the state of the cluster.

Solution

1. From a browser, log in with admin privileges to an NSX Manager at https://<nsx-manager-ip-address>.
2. If you changed the password outside of NSX-T, run the following API to change password.
   PUT https://<NSX-Manager-IPaddress>/api/v1/alb/controller-nodes/deployments/<node_id>

   {
   "form_factor": "SMALL",
   "user_settings": {
   "admin_password": "Tilak@123456"
   },
   "deployment_config": {
   "vc_id": "755bd5cb-3700-456c-b74e-25f5140f4a50",
   "compute_id": "domain-c201",
   "host_id": null,
   "storage_id": "datastore-206",
   "management_network_id": "network-207",
   "hostname": "controller-AA",
   "placement_type": "AlbControllerVsphereClusterNodeVmDeploymentConfig",
   "disk_provisioning": "THIN",
   "dns_servers": [
   "8.8.8.8"
   ]
   }
   }
   

3. If you changed the password from NSX-T, run the following API to change password, DNS and NTP servers in NSX-T and on the NSX Advanced Load Balancer controller.

   PUT https://<NSX-Manager-IPaddress>/api/v1/alb/controller-nodes/deployments/<node-ID>?running_config=true