Authentication from non-trusted host requires a credential

Authentication from non-trusted host requires a credential

book

Article ID: KB0082203

calendar_today

Updated On:

Products Versions
TIBCO Streaming 10.2.x

Description

In some cases, your StreamBase application may fail to run on Windows machines with Hypervisors installed and virtual network interfaces defined (configured by VMWare or Oracle VirtualBox).  An example error message is:
 
28:2018-03-21 13:57:12.592000|SEC|WARN |11936|kssl_mimpl0.cpp(5465)|Authentication from non-trusted host [ip-192-168-56-1] by principal [Administrator] requires a credential.

Issue/Introduction

StreamBase 10 application fails to run on Windows machines with Hypervisors installed and virtual network interfaces defined.

Environment

Windows

Resolution

This is a known issue, but no permanent fix has been implemented as of SB 10.2.1.  

A temporary solution is to add the hostname associated with the virtual interface as a trusted host when installing the node.  For example..
 
epadmin install node application=target\deployApp-0.0.1-SNAPSHOT-ep-application.zip nodename=A.sbuser nodedirectory=..\.nodes trustedhosts=hostname

To further troubleshoot the issue, obtain the following details to send to the Technical Support team if you decide to open a Support Case..

Machine IP configuration:
 
C:\Users\Administrator>ipconfig
 
Windows IP Configuration
 
 
Ethernet adapter Ethernet 2:
 
  Connection-specific DNS Suffix  . : dns.suffixName
  Link-local IPv6 Address . . . . . : xxxx::xxxx:xxxx:xxxx:xxx%xx
  IPv4 Address. . . . . . . . . . . : xxx.xx.xx.x
  Subnet Mask . . . . . . . . . . . : xxx.xxx.xxx.x
  Default Gateway . . . . . . . . . : xxx.xx.xx.x
 
Ethernet adapter VirtualBox Host-Only Network:
 
  Connection-specific DNS Suffix  . :
  Link-local IPv6 Address . . . . . : xxxx::xxxx:xxxx:xxxx:xxx%x
  IPv4 Address. . . . . . . . . . . : 192.168.56.1
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . :
 
Tunnel adapter isatap.ec2.internal:
 
  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . : dns.suffixName
 
Tunnel adapter isatap.{xxx-xxx-xx-xxxx}:
 
  Media State . . . . . . . . . . . : Media disconnected
  Connection-specific DNS Suffix  . :

Trusted hosts and principals for the node:
 
C:\Demos\workspace\StreamingAnalyticsViz\LiveDataVisualizations>epadmin servicen
ame=LiveDataVisualizations.Administrator display security type=hosts
[LiveDataVisualizations.Administrator] Host = localhost
 
[LiveDataVisualizations.Administrator] Host = spotfiredemo
 
[LiveDataVisualizations.Administrator] Host = xxx.xx.xx.xx
 
[LiveDataVisualizations.Administrator] Host = 192.168.56.1
 
[LiveDataVisualizations.Administrator] Host = 127.0.0.1
 
C:\Demos\workspace\StreamingAnalyticsViz\LiveDataVisualizations>epadmin servicen
ame=LiveDataVisualizations.Administrator display security type=principals
[LiveDataVisualizations.Administrator] Principal = Administrator
[LiveDataVisualizations.Administrator] Roles = administrator,switchadmin
[LiveDataVisualizations.Administrator] Empty Password Allowed = true
[LiveDataVisualizations.Administrator] Trusted Host Only User = false
[LiveDataVisualizations.Administrator] Password Required = false
[LiveDataVisualizations.Administrator] Password Expiration (Days) = 0
 
[LiveDataVisualizations.Administrator] Principal = guest
[LiveDataVisualizations.Administrator] Roles = switchadmin,administrator
[LiveDataVisualizations.Administrator] Empty Password Allowed = true
[LiveDataVisualizations.Administrator] Trusted Host Only User = false
[LiveDataVisualizations.Administrator] Password Required = false
[LiveDataVisualizations.Administrator] Password Expiration (Days) = 0