8 Replies Latest reply on May 25, 2012 9:26 AM by Scott Dunbar

SSO error: cannot find proxy service URL

Scott Dunbar May 24, 2012 12:22 PM

Its late and Ive prob made a small error

Want to get NSH proxy working from a single appserver Dev env running 8.2

I have set the

ProxySvcPort=9842

ProxyServiceURLs=service:proxysvc.bladelogic.blsess://fqdnOfAppServer:9842

ammended the /rsc/secure file and added appserver_protocol=ssoproxy:auth_profile=DEV

when I launch NSH on the appserver I get

SSO error: cannot find proxy service URL because no service URLs in the cached credential mactched the current authentication profile.

Am I supposed to make a change the to the authenticationProfiles.xml?

1. SSO error: cannot find proxy service URL

Santhosh Kurimilla May 24, 2012 2:46 PM (in response to Scott Dunbar)

Another common way of this error can be encountered is when the authenticating Application Server is not an ALL or NSH_PROXY Application Server instance or did not have the ProxySvcPort set.

To correct the issue verify the type of the authenticating Application Server (in Infrastructure Management area of the Console) and verify if the ProxySvcPort is set using "blasadmin -s <deploymentname> show app ProxySvcPort"

Ref: https://kb.bmc.com/infocenter/index?page=content&id=S:KA323747
Like Show 0 Likes(0)

Actions
2. SSO error: cannot find proxy service URL

Rohit Nayyar May 24, 2012 5:25 PM (in response to Scott Dunbar)

Hi Scott,
Long time !

look at this
https://communities.bmc.com/communities/message/179728

U need to acquire credentials using blcred
as u have set auth_profile=DEV
u need a profile called Dev in authprofiles.xml pointing to the appserver which is running a NSH proxy service i.e it has atlease one ALL type of instance or a NSH_Proxy type instance up and running
After u have set ProxySvcPort=9842, make sure to restart the appserver service/daemon !

Thanks,
Rohit
Like Show 0 Likes(0)

Actions
3. Re: SSO error: cannot find proxy service URL

Scott Dunbar May 25, 2012 6:41 AM (in response to Rohit Nayyar)

Hi guys

thanks I should have said I have covered the basics. Yes I have a profile called DEV in my authorisationprofiles.xml and yes my appserver is of type ALL and I get this message before and after acquiring creds. Creds aquire without issue.

Name = aserver.adomain.com
Display Name = aserver.adomain.com
Server Type = ALL
State = VALID
Status = Ready
Elapsed Time = 0 day(s) 19 hour(s) 10 minute(s) 57second(s)
Start Date = Thu May 24 12:06:21 EDT 2012
Needs Restart = false
Service Type = Automatic

aserver$ cat authenticationProfiles.xml
<?xml version="1.0"encoding="UTF-8"?>
<ServiceProfiles>
<ServiceProfile>
    <Name>DEV</Name>
   <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>
   <AuthenticationType>SRP</AuthenticationType>
</ServiceProfile>
<ServiceProfile>
    <Name>DEV_AD</Name>
   <ServiceURL>service:authsvc.bladelogic:blauth://aserver.adomain.com:9840</ServiceURL>
   <AuthenticationType>ADK_PASSWORD</AuthenticationType>
</ServiceProfile>
</ServiceProfiles>

bladmin:default>show AuthServer ProxyServiceURLs
ProxyServiceURLs:service:proxysvc.bladelogic.blsess://aserver.adomain.com:9842
bladmin:default>show AppServer ProxySvcPort
ProxySvcPort:9842

aserver$ cat /usr/lib/rsc/secure
rscd:port=4750:protocol=5:tls_mode=encryption_only:encryption=tls:
default:port=4750:protocol=5:auth_profile=DEV:appserver_protocol=ssoproxy:tls_mode=encryption_only:encryption=tls:

aserver$ nsh
SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile
Error in Initializing RBAC User and Role (SSO Proxy)
Network Shell can be used for local access
aserver$ blcred cred -acquire
profile name: DEV
username: Scott_BMC
password:
Authentication succeeded: acquired session credential
aserver$ agentinfo atestserver.com
SSO Error: Cannot find proxy service URL becauseno service URLs in the cached credential matched the current authenticationprofile
Can't access host"atestserver.com": No error
aserver$
Like Show 0 Likes(0)

Actions
4. Re: SSO error: cannot find proxy service URL

Bill Robinson May 25, 2012 7:59 AM (in response to Scott Dunbar)

If you run ‘blcred cred –list’ do you have a proxy svc url?

When you login via the gui, do you have the ‘cache credentials for this session checked’ ?

Is the appserver listening on the proxysvcport (usually 9842) ?
1 of 1 people found this helpful
Like Show 0 Likes(0)

Actions
5. SSO error: cannot find proxy service URL

Rohit Nayyar May 25, 2012 7:59 AM (in response to Scott Dunbar)

what is this returning
blcred cred -list
Like Show 0 Likes(0)

Actions
6. SSO error: cannot find proxy service URL

Scott Dunbar May 25, 2012 8:51 AM (in response to Rohit Nayyar)

My error was here:
service:proxysvc.bladelogic>.<blsess://aserver.adomain.com:9842

should be

ProxyServiceURLs:service:proxysvc.bladelogic:blsess://aserver.adomain.com:9842

Hard to spot! Thanks though
Like Show 0 Likes(0)

Actions
7. SSO error: cannot find proxy service URL

Rohit Nayyar May 25, 2012 9:01 AM (in response to Scott Dunbar)

okies !
U set this manually ?
I dont think u need to set it expilitly !
Like Show 0 Likes(0)

Actions
8. SSO error: cannot find proxy service URL

Scott Dunbar May 25, 2012 9:26 AM (in response to Rohit Nayyar)

I could be mistaken but you can set it in blasadmin or when editing the appserver via infrastructure manager
Docs indicate you set it manually hence the typo
Like Show 0 Likes(0)

Actions