8 Replies Latest reply on May 25, 2012 9:26 AM by Scott Dunbar

    SSO error: cannot find proxy service URL

    Scott Dunbar May 24, 2012 12:22 PM

      Its late and Ive prob made a small error

      Want to get NSH proxy working from a single appserver Dev env running 8.2

       

      I have set the

      ProxySvcPort=9842

      ProxyServiceURLs=service:proxysvc.bladelogic.blsess://fqdnOfAppServer:9842

       

      ammended the /rsc/secure file and added appserver_protocol=ssoproxy:auth_profile=DEV

       

      when I launch NSH on the appserver I get

      SSO error: cannot find proxy service URL because no service URLs in the cached credential mactched the current authentication profile.

       

      Am I supposed to make a change the to the authenticationProfiles.xml?

      • 2705 Views
      • Tags:
        • 1. SSO error: cannot find proxy service URL
          Santhosh Kurimilla May 24, 2012 2:46 PM (in response to Scott Dunbar)

          Another common way of this error can be encountered is when the authenticating Application Server is not an ALL or NSH_PROXY Application Server instance or did not have the ProxySvcPort set. 

           

          To correct the issue verify the type of the authenticating Application Server (in Infrastructure Management area of the Console) and verify if the ProxySvcPort is set using "blasadmin -s <deploymentname> show app ProxySvcPort"

           

          Ref: https://kb.bmc.com/infocenter/index?page=content&id=S:KA323747

          • 2. SSO error: cannot find proxy service URL
            Rohit Nayyar May 24, 2012 5:25 PM (in response to Scott Dunbar)

            Hi Scott,

            Long time !

             

            look at this

            https://communities.bmc.com/communities/message/179728

             

            U need to acquire credentials using blcred

            as u have set auth_profile=DEV

            u need a profile called Dev in authprofiles.xml pointing to the appserver which is running a NSH proxy service i.e it has atlease one ALL type of instance or a NSH_Proxy type instance up and running

            After u have set ProxySvcPort=9842, make sure to restart the appserver service/daemon !

             

            Thanks,

            Rohit

            • 3. Re: SSO error: cannot find proxy service URL
              Scott Dunbar May 25, 2012 6:41 AM (in response to Rohit Nayyar)

              Hi guys

               

              thanks I should have said I have covered the basics.  Yes I have a profile called DEV in my authorisationprofiles.xml and yes my appserver is of type ALL and I get this message before and after acquiring creds.  Creds aquire without issue.

               

              Name = aserver.adomain.com

              Display Name = aserver.adomain.com

              Server Type = ALL

              State = VALID

              Status = Ready

              Elapsed Time = 0 day(s) 19 hour(s) 10 minute(s) 57second(s)

              Start Date = Thu May 24 12:06:21 EDT 2012

              Needs Restart = false

              Service Type = Automatic

               

              aserver$ cat authenticationProfiles.xml

              <?xml version="1.0"encoding="UTF-8"?>

              <ServiceProfiles>

                <ServiceProfile>

                  <Name>DEV</Name>

                 <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>

                 <AuthenticationType>SRP</AuthenticationType>

                </ServiceProfile>

              <ServiceProfile>

                  <Name>DEV_AD</Name>

                 <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>

                 <AuthenticationType>ADK_PASSWORD</AuthenticationType>

                </ServiceProfile>

              </ServiceProfiles>

               

               

              bladmin:default>show AuthServer ProxyServiceURLs

              ProxyServiceURLs:service:proxysvc.bladelogic.blsess://aserver.adomain.com:9842

              bladmin:default>show AppServer ProxySvcPort

              ProxySvcPort:9842

               

              aserver$ cat /usr/lib/rsc/secure

              rscd:port=4750:protocol=5:tls_mode=encryption_only:encryption=tls:

              default:port=4750:protocol=5:auth_profile=DEV:appserver_protocol=ssoproxy:tls_mode=encryption_only:encryption=tls:

               

              aserver$ nsh

              SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile

              Error in Initializing RBAC User and Role (SSO Proxy)

              Network Shell can be used for local access

              aserver$ blcred cred -acquire

              profile name: DEV

              username: Scott_BMC

              password:

              Authentication succeeded: acquired session credential

              aserver$ agentinfo atestserver.com

              SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile

              Can't access host"atestserver.com": No error

              aserver$

              • 4. Re: SSO error: cannot find proxy service URL
                Bill Robinson
                Bill Robinson Moderator May 25, 2012 7:59 AM (in response to Scott Dunbar)

                If you run ‘blcred cred –list’ do you have a proxy svc url?

                 

                When you login via the gui, do you have the ‘cache credentials for this session checked’ ?

                 

                Is the appserver listening on the proxysvcport (usually 9842) ?

                1 of 1 people found this helpful
                • 5. SSO error: cannot find proxy service URL
                  Rohit Nayyar May 25, 2012 7:59 AM (in response to Scott Dunbar)

                  what is this returning

                  blcred cred -list

                  • 6. SSO error: cannot find proxy service URL
                    Scott Dunbar May 25, 2012 8:51 AM (in response to Rohit Nayyar)

                    My error was here:

                    service:proxysvc.bladelogic>.<blsess://aserver.adomain.com:9842

                     

                    should be

                     

                    ProxyServiceURLs:service:proxysvc.bladelogic:blsess://aserver.adomain.com:9842

                     

                    Hard to spot!  Thanks though

                    • 7. SSO error: cannot find proxy service URL
                      Rohit Nayyar May 25, 2012 9:01 AM (in response to Scott Dunbar)

                      okies !

                      U set this manually ?

                      I dont think u need to set it expilitly !

                      • 8. SSO error: cannot find proxy service URL
                        Scott Dunbar May 25, 2012 9:26 AM (in response to Rohit Nayyar)

                        I could be mistaken but you can set it in blasadmin or when editing the appserver via infrastructure manager

                        Docs indicate you set it manually hence the typo