Professional OPC
Development Tools

logos

Online Forums

Technical support is provided through Support Forums below. Anybody can view them; you need to Register/Login to our site (see links in upper right corner) in order to Post questions. You do not have to be a licensed user of our product.

Please read Rules for forum posts before reporting your issue or asking a question. OPC Labs team is actively monitoring the forums, and replies as soon as possible. Various technical information can also be found in our Knowledge Base. For your convenience, we have also assembled a Frequently Asked Questions page.

Do not use the Contact page for technical issues.

The UADemoPublisher program (console application) is a demonstration publisher for OPC UA PubSub.

EasyOPC-UA Demo Application - Authorization errors

More
22 May 2025 11:12 #14190 by support
Hello.

The error message that you have provided indicates that it comes from a run when you were using Anonymous user, and the server has rejected it. If you intend to use Anonymous, you have to reconfigure the server to accept it. There is nothing that can be done on the client side.

If, however, you *think* you were using user name/password authentication, then post here the code you used - the method call and how the argument - endpoint descriptor - was constructed. There is most likely some problem in that part, because i reality, the Anonymous user was used.

Best regards

Please Log in or Create an account to join the conversation.

More
22 May 2025 10:59 #14189 by dastan.zhalilov@erg.kz
Hello support!

I have a case with OPC UA client connection.
I have OPC UA server from Siemens WinCC in the network. TCP connection is fine, but I can not get tags. It is getting to error when I am clicking button Browse data...
I have put user name and password (Sign and Encrypt-Basic256Sha256  <--- OPC UA server uses), also tried put Kerberos.
Even anonimous connection didn't help. Below error from my connection:

Exceptions

Type: OpcLabs.EasyOpc.UA.Engine.UAEngineException
Data: ErrorId_{045406CD-8EEA-4F21-B3D6-DC9DB5A34E58}: OpcLabs.{4D759503}
HelpLink: 
HResult: -2146233088 (0x80131500)
InnerException:
    OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
    + Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
    + This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
    + The user identity used was: Anonymous.
    + The problem might be caused by the fact that no (non-anonymous) user name token was specified.
    + The client method called (or event/callback invoked) was 'BrowseMultiple[1]'. ---> OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
       --- End of inner exception stack trace ---
    Activity Trace: 
    Data:
        7b4d9f28-22a8-41d6-93ea-e4d8c2a75da8:
            ((48, 1), Opc.Ua.TraceEventArgs)
            ((48, 1), Opc.Ua.TraceEventArgs)
            ((48, 1), Opc.Ua.TraceEventArgs)
            ((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
            ((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
            ((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
            ((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
        c3c0e69e-bf8f-4bfa-8e93-816783737e55: 48
        8970fe52-aaa4-40f7-9a6e-74cdcee56724: static Session.Create
        fd56f367-2e94-4459-8095-98aacd38f0fe: 
        eca5c2ee-d5aa-491f-8ae6-e051b97f84aa: opcfoundation.org/UA/SecurityPolicy#Basic256Sha256
        OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
    Error Code: 1
    Error Id: OpcLabs.UAEngine=1
    HelpLink: 
    HResult: -2146232832 (0x80131600)
    InnerException: OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
        Data: OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
        Error Id: Opc.UA.ServiceResult=0x801F0000
        Help Link: 
        HResult: -2146232832 (0x80131600)
        InnerException: 
        Internal Code: 2149515264
        Message: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
        Service Result: BadUserAccessDenied
            Additional Info: 
            Description: Endpoint does not support the user identity type provided.
            Inner Result: 
            Message: Endpoint does not support the user identity type provided.
            Qualified Symbolic ID: 
                Expanded Text: 
                Is Null: True
                Is Standard: True
                Name: 
                Namespace Index: 0
                Namespace URI: 
                Namespace URI String: 
                Standard Name: 
            Status Code: BadUserAccessDenied
                Code Bits: BadUserAccessDenied
                Code Bits Symbol: BadUserAccessDenied
                Condition: 31
                Description: User does not have permission to perform the requested operation.
                Flag Bits: 0
                Has Data Value Info: False
                Info Type: NotUsed
                Internal Value: 2149515264
                Is Bad: True
                Is Good: False
                Is Uncertain: False
                Limit Info: None
                Overflow: False
                Semantics Changed: False
                Severity: BadOrFailure
                Status Info: Error
                Structure Changed: False
            Text: {BadUserAccessDenied}. Endpoint does not support the user identity type provided.
        Service Target Site: Void OpenValidateIdentity(Opc.Ua.IUserIdentity ByRef, Opc.Ua.UserIdentityToken ByRef, Opc.Ua.UserTokenPolicy ByRef, System.String ByRef, Boolean ByRef)
            DeclaringType: OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim
            Module: OpcLabs.EasyOpcUA.dll
                Assembly: OpcLabs.EasyOpcUA, Version=5.82.175.1, Culture=neutral, PublicKeyToken=6faddca41dacb409
                CustomAttributes: 
                FullyQualifiedName: E:\Distr\net472\OpcLabs.EasyOpcUA.dll
                MDStreamVersion: 131072
                MetadataToken: 1
                ModuleHandle: System.ModuleHandle
                    MDStreamVersion: 131072
                ModuleVersionId: e8454f69-8da1-4916-a7f5-a016573f1dfa
                Name: OpcLabs.EasyOpcUA.dll
                ScopeName: OpcLabs.EasyOpcUA.dll
        Source: OpcLabs.EasyOpcUA
        Stack Trace:
               at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.OpenValidateIdentity(IUserIdentity& identity, UserIdentityToken& identityToken, UserTokenPolicy& identityPolicy, String& securityPolicyUri, Boolean& requireEncryption)
               at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.Open2(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain)
               at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.<Create>d__4.MoveNext()
            --- End of stack trace from previous location where exception was thrown ---
               at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
               at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
               at OpcLabs.EasyOpc.UA.Toolkit.Sdk.ToolkitSession.<Create>d__2.MoveNext()
        TargetSite: 
    Message:
        UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
        + Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
        + This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
        + The user identity used was: Anonymous.
        + The problem might be caused by the fact that no (non-anonymous) user name token was specified.
        + The client method called (or event/callback invoked) was 'BrowseMultiple[1]'.
    Source: 
    Stack Trace: 
    TargetSite: 
Message: Problem browsing OPC Unified Architecture nodes.
Source: 
StackTrace: 
TargetSite: 
 

Please Log in or Create an account to join the conversation.

Moderators: supportvaclav.zaloudek
Time to create page: 0.156 seconds