8 Replies Latest reply: May 25, 2012 9:26 AM by Scott Dunbar RSS

SSO error: cannot find proxy service URL

Scott Dunbar
Scott Dunbar May 24, 2012 12:22 PM

Its late and Ive prob made a small error

Want to get NSH proxy working from a single appserver Dev env running 8.2

 

I have set the

ProxySvcPort=9842

ProxyServiceURLs=service:proxysvc.bladelogic.blsess://fqdnOfAppServer:9842

 

ammended the /rsc/secure file and added appserver_protocol=ssoproxy:auth_profile=DEV

 

when I launch NSH on the appserver I get

SSO error: cannot find proxy service URL because no service URLs in the cached credential mactched the current authentication profile.

 

Am I supposed to make a change the to the authenticationProfiles.xml?

  • 2199 Views
  • Tags:
  • 1. SSO error: cannot find proxy service URL
    Santhosh Kurimilla
    Santhosh Kurimilla May 24, 2012 2:46 PM (in response to Scott Dunbar)

    Another common way of this error can be encountered is when the authenticating Application Server is not an ALL or NSH_PROXY Application Server instance or did not have the ProxySvcPort set. 

     

    To correct the issue verify the type of the authenticating Application Server (in Infrastructure Management area of the Console) and verify if the ProxySvcPort is set using "blasadmin -s <deploymentname> show app ProxySvcPort"

     

    Ref: https://kb.bmc.com/infocenter/index?page=content&id=S:KA323747

  • 2. SSO error: cannot find proxy service URL
    Rohit Nayyar
    Rohit Nayyar May 24, 2012 5:25 PM (in response to Scott Dunbar)

    Hi Scott,

    Long time !

     

    look at this

    https://communities.bmc.com/communities/message/179728

     

    U need to acquire credentials using blcred

    as u have set auth_profile=DEV

    u need a profile called Dev in authprofiles.xml pointing to the appserver which is running a NSH proxy service i.e it has atlease one ALL type of instance or a NSH_Proxy type instance up and running

    After u have set ProxySvcPort=9842, make sure to restart the appserver service/daemon !

     

    Thanks,

    Rohit

  • 3. Re: SSO error: cannot find proxy service URL
    Scott Dunbar
    Scott Dunbar May 25, 2012 6:41 AM (in response to Rohit Nayyar)

    Hi guys

     

    thanks I should have said I have covered the basics.  Yes I have a profile called DEV in my authorisationprofiles.xml and yes my appserver is of type ALL and I get this message before and after acquiring creds.  Creds aquire without issue.

     

    Name = aserver.adomain.com

    Display Name = aserver.adomain.com

    Server Type = ALL

    State = VALID

    Status = Ready

    Elapsed Time = 0 day(s) 19 hour(s) 10 minute(s) 57second(s)

    Start Date = Thu May 24 12:06:21 EDT 2012

    Needs Restart = false

    Service Type = Automatic

     

    aserver$ cat authenticationProfiles.xml

    <?xml version="1.0"encoding="UTF-8"?>

    <ServiceProfiles>

      <ServiceProfile>

        <Name>DEV</Name>

       <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>

       <AuthenticationType>SRP</AuthenticationType>

      </ServiceProfile>

    <ServiceProfile>

        <Name>DEV_AD</Name>

       <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>

       <AuthenticationType>ADK_PASSWORD</AuthenticationType>

      </ServiceProfile>

    </ServiceProfiles>

     

     

    bladmin:default>show AuthServer ProxyServiceURLs

    ProxyServiceURLs:service:proxysvc.bladelogic.blsess://aserver.adomain.com:9842

    bladmin:default>show AppServer ProxySvcPort

    ProxySvcPort:9842

     

    aserver$ cat /usr/lib/rsc/secure

    rscd:port=4750:protocol=5:tls_mode=encryption_only:encryption=tls:

    default:port=4750:protocol=5:auth_profile=DEV:appserver_protocol=ssoproxy:tls_mode=encryption_only:encryption=tls:

     

    aserver$ nsh

    SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile

    Error in Initializing RBAC User and Role (SSO Proxy)

    Network Shell can be used for local access

    aserver$ blcred cred -acquire

    profile name: DEV

    username: Scott_BMC

    password:

    Authentication succeeded: acquired session credential

    aserver$ agentinfo atestserver.com

    SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile

    Can't access host"atestserver.com": No error

    aserver$

  • 4. Re: SSO error: cannot find proxy service URL
    Bill Robinson
    Bill Robinson May 25, 2012 7:59 AM (in response to Scott Dunbar)

    If you run ‘blcred cred –list’ do you have a proxy svc url?

     

    When you login via the gui, do you have the ‘cache credentials for this session checked’ ?

     

    Is the appserver listening on the proxysvcport (usually 9842) ?

  • 5. SSO error: cannot find proxy service URL
    Rohit Nayyar
    Rohit Nayyar May 25, 2012 7:59 AM (in response to Scott Dunbar)

    what is this returning

    blcred cred -list

  • 6. SSO error: cannot find proxy service URL
    Scott Dunbar
    Scott Dunbar May 25, 2012 8:51 AM (in response to Rohit Nayyar)

    My error was here:

    service:proxysvc.bladelogic>.<blsess://aserver.adomain.com:9842

     

    should be

     

    ProxyServiceURLs:service:proxysvc.bladelogic:blsess://aserver.adomain.com:9842

     

    Hard to spot!  Thanks though

  • 7. SSO error: cannot find proxy service URL
    Rohit Nayyar
    Rohit Nayyar May 25, 2012 9:01 AM (in response to Scott Dunbar)

    okies !

    U set this manually ?

    I dont think u need to set it expilitly !

  • 8. SSO error: cannot find proxy service URL
    Scott Dunbar
    Scott Dunbar May 25, 2012 9:26 AM (in response to Rohit Nayyar)

    I could be mistaken but you can set it in blasadmin or when editing the appserver via infrastructure manager

    Docs indicate you set it manually hence the typo