5 Replies Latest reply on Jan 25, 2016 6:45 AM by Bill Robinson

    SSO Error: Received SSO session reject message "IPADDRESS_MISMATCH" error running NSH Script Job after enabling NSH Proxy in secure file of application server

    Yanick Girouard

      In order to use automation principals, I had to enable the NSH Proxy in the secure file of the application, but after I did this I'm getting this error when running any NSH Script Job:

       

      SSO Error: Received SSO session reject message "IPADDRESS_MISMATCH"

       

      Error11-May-2015 1:31:29 PM SSO Error: Received SSO session reject message "IPADDRESS_MISMATCH"
      Error11-May-2015 1:31:29 PMError in Initializing RBAC User and Role (SSO Proxy)
      Error11-May-2015 1:31:29 PMNetwork Shell can be used for local access

       

      In the app server logs I see this (where {IP_ADDRESS} is the IP of our app server):

       

      [11 May 2015 13:31:29,150] [Nsh-Proxy-Thread-9] [WARN] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] client's IP address does not match that written into ticket: /0:0:0:0:0:0:0:1 != /{IP_ADDRESS}

      [11 May 2015 13:31:29,150] [Nsh-Proxy-Thread-9] [WARN] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] Client's session credential was rejected

      [11 May 2015 13:31:29,150] [Nsh-Proxy-Thread-9] [INFO] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] failure establishing session with proxy service

      [11 May 2015 13:31:29,275] [Nsh-Proxy-Thread-8] [WARN] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] client's IP address does not match that written into ticket: /0:0:0:0:0:0:0:1 != /{IP_ADDRESS}

      [11 May 2015 13:31:29,275] [Nsh-Proxy-Thread-8] [WARN] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] Client's session credential was rejected

      [11 May 2015 13:31:29,275] [Nsh-Proxy-Thread-8] [INFO] [Anonymous:Anonymous:0:0:0:0:0:0:0:1] [BLSSOPROXY] failure establishing session with proxy service

       

      Our app server is running on Windows, and this is in BSA 8.5.00.469. Would this have anything to do with how the app server's binding to its IP when it starts?