Online Forums
Technical support is provided through Support Forums below. Anybody can view them; you need to Register/Login to our site (see links in upper right corner) in order to Post questions. You do not have to be a licensed user of our product.
Please read Rules for forum posts before reporting your issue or asking a question. OPC Labs team is actively monitoring the forums, and replies as soon as possible. Various technical information can also be found in our Knowledge Base. For your convenience, we have also assembled a Frequently Asked Questions page.
Do not use the Contact page for technical issues.
The UADemoPublisher program (console application) is a demonstration publisher for OPC UA PubSub.
EasyOPC-UA Demo Application - Authorization errors
22 May 2025 11:12 #14190
by support
Replied by support on topic EasyOPC-UA Demo Application - Authorization errors
Hello.
The error message that you have provided indicates that it comes from a run when you were using Anonymous user, and the server has rejected it. If you intend to use Anonymous, you have to reconfigure the server to accept it. There is nothing that can be done on the client side.
If, however, you *think* you were using user name/password authentication, then post here the code you used - the method call and how the argument - endpoint descriptor - was constructed. There is most likely some problem in that part, because i reality, the Anonymous user was used.
Best regards
The error message that you have provided indicates that it comes from a run when you were using Anonymous user, and the server has rejected it. If you intend to use Anonymous, you have to reconfigure the server to accept it. There is nothing that can be done on the client side.
If, however, you *think* you were using user name/password authentication, then post here the code you used - the method call and how the argument - endpoint descriptor - was constructed. There is most likely some problem in that part, because i reality, the Anonymous user was used.
Best regards
Please Log in or Create an account to join the conversation.
- dastan.zhalilov@erg.kz
-
Topic Author
- Offline
- Elite Member
-
Less
More
- Posts: 22
- Thank you received: 0
22 May 2025 10:59 #14189
by dastan.zhalilov@erg.kz
Hello support!
I have a case with OPC UA client connection.
I have OPC UA server from Siemens WinCC in the network. TCP connection is fine, but I can not get tags. It is getting to error when I am clicking button Browse data...
I have put user name and password (Sign and Encrypt-Basic256Sha256 <--- OPC UA server uses), also tried put Kerberos.
Even anonimous connection didn't help. Below error from my connection:
Exceptions
Type: OpcLabs.EasyOpc.UA.Engine.UAEngineException
Data: ErrorId_{045406CD-8EEA-4F21-B3D6-DC9DB5A34E58}: OpcLabs.{4D759503}
HelpLink:
HResult: -2146233088 (0x80131500)
InnerException:
OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
+ Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
+ This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
+ The user identity used was: Anonymous.
+ The problem might be caused by the fact that no (non-anonymous) user name token was specified.
+ The client method called (or event/callback invoked) was 'BrowseMultiple[1]'. ---> OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
--- End of inner exception stack trace ---
Activity Trace:
Data:
7b4d9f28-22a8-41d6-93ea-e4d8c2a75da8:
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
c3c0e69e-bf8f-4bfa-8e93-816783737e55: 48
8970fe52-aaa4-40f7-9a6e-74cdcee56724: static Session.Create
fd56f367-2e94-4459-8095-98aacd38f0fe:
eca5c2ee-d5aa-491f-8ae6-e051b97f84aa: opcfoundation.org/UA/SecurityPolicy#Basic256Sha256
OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
Error Code: 1
Error Id: OpcLabs.UAEngine=1
HelpLink:
HResult: -2146232832 (0x80131600)
InnerException: OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
Data: OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
Error Id: Opc.UA.ServiceResult=0x801F0000
Help Link:
HResult: -2146232832 (0x80131600)
InnerException:
Internal Code: 2149515264
Message: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
Service Result: BadUserAccessDenied
Additional Info:
Description: Endpoint does not support the user identity type provided.
Inner Result:
Message: Endpoint does not support the user identity type provided.
Qualified Symbolic ID:
Expanded Text:
Is Null: True
Is Standard: True
Name:
Namespace Index: 0
Namespace URI:
Namespace URI String:
Standard Name:
Status Code: BadUserAccessDenied
Code Bits: BadUserAccessDenied
Code Bits Symbol: BadUserAccessDenied
Condition: 31
Description: User does not have permission to perform the requested operation.
Flag Bits: 0
Has Data Value Info: False
Info Type: NotUsed
Internal Value: 2149515264
Is Bad: True
Is Good: False
Is Uncertain: False
Limit Info: None
Overflow: False
Semantics Changed: False
Severity: BadOrFailure
Status Info: Error
Structure Changed: False
Text: {BadUserAccessDenied}. Endpoint does not support the user identity type provided.
Service Target Site: Void OpenValidateIdentity(Opc.Ua.IUserIdentity ByRef, Opc.Ua.UserIdentityToken ByRef, Opc.Ua.UserTokenPolicy ByRef, System.String ByRef, Boolean ByRef)
DeclaringType: OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim
Module: OpcLabs.EasyOpcUA.dll
Assembly: OpcLabs.EasyOpcUA, Version=5.82.175.1, Culture=neutral, PublicKeyToken=6faddca41dacb409
CustomAttributes:
FullyQualifiedName: E:\Distr\net472\OpcLabs.EasyOpcUA.dll
MDStreamVersion: 131072
MetadataToken: 1
ModuleHandle: System.ModuleHandle
MDStreamVersion: 131072
ModuleVersionId: e8454f69-8da1-4916-a7f5-a016573f1dfa
Name: OpcLabs.EasyOpcUA.dll
ScopeName: OpcLabs.EasyOpcUA.dll
Source: OpcLabs.EasyOpcUA
Stack Trace:
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.OpenValidateIdentity(IUserIdentity& identity, UserIdentityToken& identityToken, UserTokenPolicy& identityPolicy, String& securityPolicyUri, Boolean& requireEncryption)
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.Open2(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain)
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.<Create>d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at OpcLabs.EasyOpc.UA.Toolkit.Sdk.ToolkitSession.<Create>d__2.MoveNext()
TargetSite:
Message:
UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
+ Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
+ This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
+ The user identity used was: Anonymous.
+ The problem might be caused by the fact that no (non-anonymous) user name token was specified.
+ The client method called (or event/callback invoked) was 'BrowseMultiple[1]'.
Source:
Stack Trace:
TargetSite:
Message: Problem browsing OPC Unified Architecture nodes.
Source:
StackTrace:
TargetSite:
I have a case with OPC UA client connection.
I have OPC UA server from Siemens WinCC in the network. TCP connection is fine, but I can not get tags. It is getting to error when I am clicking button Browse data...
I have put user name and password (Sign and Encrypt-Basic256Sha256 <--- OPC UA server uses), also tried put Kerberos.
Even anonimous connection didn't help. Below error from my connection:
Exceptions
Type: OpcLabs.EasyOpc.UA.Engine.UAEngineException
Data: ErrorId_{045406CD-8EEA-4F21-B3D6-DC9DB5A34E58}: OpcLabs.{4D759503}
HelpLink:
HResult: -2146233088 (0x80131500)
InnerException:
OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
+ Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
+ This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
+ The user identity used was: Anonymous.
+ The problem might be caused by the fact that no (non-anonymous) user name token was specified.
+ The client method called (or event/callback invoked) was 'BrowseMultiple[1]'. ---> OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
--- End of inner exception stack trace ---
Activity Trace:
Data:
7b4d9f28-22a8-41d6-93ea-e4d8c2a75da8:
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), Opc.Ua.TraceEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
((48, 1), System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs)
c3c0e69e-bf8f-4bfa-8e93-816783737e55: 48
8970fe52-aaa4-40f7-9a6e-74cdcee56724: static Session.Create
fd56f367-2e94-4459-8095-98aacd38f0fe:
eca5c2ee-d5aa-491f-8ae6-e051b97f84aa: opcfoundation.org/UA/SecurityPolicy#Basic256Sha256
OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
Error Code: 1
Error Id: OpcLabs.UAEngine=1
HelpLink:
HResult: -2146232832 (0x80131600)
InnerException: OpcLabs.EasyOpc.UA.UAServiceException: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
Data: OpcLabs.EasyOpc.UA.Implementation.ErrorEnhancingEasyUAClient.Processed: True
Error Id: Opc.UA.ServiceResult=0x801F0000
Help Link:
HResult: -2146232832 (0x80131600)
InnerException:
Internal Code: 2149515264
Message: OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
Service Result: BadUserAccessDenied
Additional Info:
Description: Endpoint does not support the user identity type provided.
Inner Result:
Message: Endpoint does not support the user identity type provided.
Qualified Symbolic ID:
Expanded Text:
Is Null: True
Is Standard: True
Name:
Namespace Index: 0
Namespace URI:
Namespace URI String:
Standard Name:
Status Code: BadUserAccessDenied
Code Bits: BadUserAccessDenied
Code Bits Symbol: BadUserAccessDenied
Condition: 31
Description: User does not have permission to perform the requested operation.
Flag Bits: 0
Has Data Value Info: False
Info Type: NotUsed
Internal Value: 2149515264
Is Bad: True
Is Good: False
Is Uncertain: False
Limit Info: None
Overflow: False
Semantics Changed: False
Severity: BadOrFailure
Status Info: Error
Structure Changed: False
Text: {BadUserAccessDenied}. Endpoint does not support the user identity type provided.
Service Target Site: Void OpenValidateIdentity(Opc.Ua.IUserIdentity ByRef, Opc.Ua.UserIdentityToken ByRef, Opc.Ua.UserTokenPolicy ByRef, System.String ByRef, Boolean ByRef)
DeclaringType: OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim
Module: OpcLabs.EasyOpcUA.dll
Assembly: OpcLabs.EasyOpcUA, Version=5.82.175.1, Culture=neutral, PublicKeyToken=6faddca41dacb409
CustomAttributes:
FullyQualifiedName: E:\Distr\net472\OpcLabs.EasyOpcUA.dll
MDStreamVersion: 131072
MetadataToken: 1
ModuleHandle: System.ModuleHandle
MDStreamVersion: 131072
ModuleVersionId: e8454f69-8da1-4916-a7f5-a016573f1dfa
Name: OpcLabs.EasyOpcUA.dll
ScopeName: OpcLabs.EasyOpcUA.dll
Source: OpcLabs.EasyOpcUA
Stack Trace:
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.OpenValidateIdentity(IUserIdentity& identity, UserIdentityToken& identityToken, UserTokenPolicy& identityPolicy, String& securityPolicyUri, Boolean& requireEncryption)
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.Open2(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain)
at OpcLabs.EasyOpc.UA.Sdk.Shims.SessionShim.<Create>d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at OpcLabs.EasyOpc.UA.Toolkit.Sdk.ToolkitSession.<Create>d__2.MoveNext()
TargetSite:
Message:
UA SDK error (Opc.UA.ServiceResult=0x801F0000) in 'static Session.Create'. OPC UA service result - {BadUserAccessDenied}. Endpoint does not support the user identity type provided. Endpoint does not support the user identity type provided.
+ Connection attempt #3; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:05:53.4840000.
+ This error should mean an authorization (permissions) problem, not an authentication problem, but some servers are using it instead of rejecting the identity token (BadIdentityTokenRejected).
+ The user identity used was: Anonymous.
+ The problem might be caused by the fact that no (non-anonymous) user name token was specified.
+ The client method called (or event/callback invoked) was 'BrowseMultiple[1]'.
Source:
Stack Trace:
TargetSite:
Message: Problem browsing OPC Unified Architecture nodes.
Source:
StackTrace:
TargetSite:
Please Log in or Create an account to join the conversation.
Moderators: support, vaclav.zaloudek
Time to create page: 0.156 seconds