AnsweredAssumed Answered

PI Server connection

Question asked by dpilc on Jul 21, 2015
Latest reply on Mar 31, 2016 by chegardt

Like • Show 0 Likes0
Comment • 10

Hello everyone,

I have problem with connection to PI Server (Credentials validation failed).

I have 2 machines (different domains) on the first one I have PI Server and I want to get access to server from the second one.

I added trust with second machine ip but i cannot add mapping with user from my second machine.

I checked message logs and found it (I changed ip addresses and domain and user name):

Unsuccessful login ID: 46. Address: xxx.xxx.xxx.xxx. Name: SMTHost.exe(8232):remote. Credentials used: pidemo. Method: Explicit Login. Error: [-10431] Authentication method is disabled by current server policy

[Server] PISERVER [ID] 7139 [Time] 2015-07-20 07:11:38 [Program] pinetmgr [Priority] 10 [ProcessOSUser] SYSTEM [ProcessID] 1504 [Severity] Information

Credentials validation failed: ID: 46. Address: xxx.xxx.xxx.xxx.. Name: SMTHost.exe(8232):remote. Package: Windows Login (SSPI,NTLM) Details: GenerateContext: Login is denied. (0x8009030c) Last Error: [-10407] No Access - Secure Object

[Server] PISERVER [ID] 7138 [Time] 2015-07-20 07:11:38 [Program] pinetmgr [Priority] 10 [ProcessOSUser] SYSTEM [ProcessID] 1504 [Severity] Information

Unsuccessful login ID: 46. Address: 1xxx.xxx.xxx.xxx.. Name: SMTHost.exe(8232):remote. Credentials used: domain\user. Method: Trust. Error: [-10413] No trust relation for this request]

And the last thing I have an access to AF Server.

Thanks for help

No one else has this question

Outcomes

André Åsheim

Jul 21, 2015 11:54 AM

Can you share the details of your trust?

The easiest way to do this is to add a trust where the only limitations is the IP address (and NetMask) Example IP: 192.168.1.10 NetMask: 255.255.255.255 Mapped to PIDEMO

In addition in order to make your client only trying the trust open About PI-SDK

Go to Connections-->Click Connections-->Options in the top menu (CTRL+O)

Remove Windows Security and Default User from the Protocol Order

Actions

dpilc @ André Åsheim on Jul 21, 2015 12:44 PM

Hi,

Thanks for your replay.

I did all this things and still not working.

I tried used pidemo or OS user (from pi server machine) credentials.

here screen from message logs (1 - pidemo , 2 - os user)

Actions

mhalhead

@ dpilc on Jul 21, 2015 1:43 PM

Hi,

What are the security settings on the PI server? Explicit logins are disabled, are trusts still enabled?

If they are okay try changing the authentication protocol order on the client, put the trust first. And check the IP address is configured in the trust.

Actions

Coolhunter

@ mhalhead on Jul 22, 2015 5:13 AM

Check if the security settings have explicit logins disabled.. from the security menu in SMT.

Actions

dpilc @ Coolhunter on Jul 22, 2015 11:08 AM

Hello again,

I've changed security settings and I have still same problem.

I also switched off all options and doest't work

Actions

jose_dai @ dpilc on Jul 22, 2015 11:25 AM

Hi Dawid,

You have the two machines in different domains, right ?, The domain where is located the Pi server is a trusted domain for the second domain or viceversa?

I tell you it, because in my office We have three different domain, the enterprise domain, develop domain and PI demo domain. So, from my local machine(enterprise domain) I can connect to the different PI server located in each domain.

I have created the following trust for ie, for our PI demo domain

and the security we have the following

Probably You need to create a mapping for the user that you wish connect as well.

Regards.

Actions

Srinivas @ jose_dai on Jul 22, 2015 1:03 PM

Hi Dawid,

Did you check the port 5450 is opened? , are you able to telnet the PI server on port 5450 from another server.?

Regards,

Srinivas

Actions

dpilc Jul 23, 2015 1:55 PM

Hello again,

I think that I know the problem.

I testedconnection to this PI Server from another, third machine and it works fine.

The differene is that previous machine is a member of domain (different than PI Server) and the third machine has no domain.

In log file of machine with domain i have

Unsuccessful login (....) Method: Explicit Login.

in machine with no domain

Successful login (....) Method: Windows OS

any advices:

Actions

cvallee @ dpilc on Jul 24, 2015 1:41 PM

Hi Dawid,

At this point I think it would be best for you to contact OSIsoft's Technical Support, they will be able to assist you in order to solve your connection problem in a timely fashion.

View the Contact Us webpage for your local technical support number or by email them at techsupport@osisoft.com

Actions

chegardt

@ dpilc on Mar 31, 2016 5:55 PM

Hi David,

It looks like this question was never answered. Did you manage to resolve this issue? If so, what steps did you take?

If not, it could be an issue with the Protocol Order in the Known Server Table. You may need to make sure trust (or WIS) is included and is above the other protocols.

Actions

10 Replies

André Åsheim Jul 21, 2015 11:54 AM
Mark Correct
Correct Answer
Can you share the details of your trust?
The easiest way to do this is to add a trust where the only limitations is the IP address (and NetMask) Example IP: 192.168.1.10 NetMask: 255.255.255.255 Mapped to PIDEMO

In addition in order to make your client only trying the trust open About PI-SDK
Go to Connections-->Click Connections-->Options in the top menu (CTRL+O)
Remove Windows Security and Default User from the Protocol Order
Like • Show 0 Likes0
Actions
- dpilc @ André Åsheim on Jul 21, 2015 12:44 PM
  Mark Correct
  Correct Answer
  Hi,
  
  Thanks for your replay.
  
  I did all this things and still not working.
  I tried used pidemo or OS user (from pi server machine) credentials.
  here screen from message logs (1 - pidemo , 2 - os user)
  Like • Show 0 Likes0
  Actions
  - mhalhead @ dpilc on Jul 21, 2015 1:43 PM
    Mark Correct
    Correct Answer
    Hi,
    
    What are the security settings on the PI server? Explicit logins are disabled, are trusts still enabled?
    
    If they are okay try changing the authentication protocol order on the client, put the trust first. And check the IP address is configured in the trust.
    Like • Show 0 Likes0
    Actions
    - Coolhunter @ mhalhead on Jul 22, 2015 5:13 AM
      Mark Correct
      Correct Answer
      Check if the security settings have explicit logins disabled.. from the security menu in SMT.
      
      Like • Show 0 Likes0
      Actions
      - dpilc @ Coolhunter on Jul 22, 2015 11:08 AM
        Mark Correct
        Correct Answer
        Hello again,
        
        I've changed security settings and I have still same problem.
        I also switched off all options and doest't work
        Like • Show 0 Likes0
        Actions
        jose_dai @ dpilc on Jul 22, 2015 11:25 AM
        Mark Correct
        Correct Answer
        Hi Dawid,
        
        You have the two machines in different domains, right ?, The domain where is located the Pi server is a trusted domain for the second domain or viceversa?
        
        I tell you it, because in my office We have three different domain, the enterprise domain, develop domain and PI demo domain. So, from my local machine(enterprise domain) I can connect to the different PI server located in each domain.
        
        I have created the following trust for ie, for our PI demo domain
        
        and the security we have the following
        
        Probably You need to create a mapping for the user that you wish connect as well.
        
        Regards.
        Like • Show 0 Likes0
        Actions
        Srinivas @ jose_dai on Jul 22, 2015 1:03 PM
        Mark Correct
        Correct Answer
        Hi Dawid,
        Did you check the port 5450 is opened? , are you able to telnet the PI server on port 5450 from another server.?
        
        Regards,
        Srinivas
        Like • Show 0 Likes0
        Actions
dpilc Jul 23, 2015 1:55 PM
Mark Correct
Correct Answer
Hello again,

I think that I know the problem.
I testedconnection to this PI Server from another, third machine and it works fine.
The differene is that previous machine is a member of domain (different than PI Server) and the third machine has no domain.

In log file of machine with domain i have
Unsuccessful login (....) Method: Explicit Login.

in machine with no domain
Successful login (....) Method: Windows OS

any advices:
Like • Show 0 Likes0
Actions
- cvallee @ dpilc on Jul 24, 2015 1:41 PM
  Mark Correct
  Correct Answer
  Hi Dawid,
  
  At this point I think it would be best for you to contact OSIsoft's Technical Support, they will be able to assist you in order to solve your connection problem in a timely fashion.
  
  View the Contact Us webpage for your local technical support number or by email them at techsupport@osisoft.com
  Like • Show 0 Likes0
  Actions
- chegardt @ dpilc on Mar 31, 2016 5:55 PM
  Mark Correct
  Correct Answer
  Hi David,
  
  It looks like this question was never answered. Did you manage to resolve this issue? If so, what steps did you take?
  
  If not, it could be an issue with the Protocol Order in the Known Server Table. You may need to make sure trust (or WIS) is included and is above the other protocols.
  Like • Show 0 Likes0
  Actions

PI Server connection

Outcomes

Related Content

Recommended Content