Illegal SID: You must login to the appropriate domain to access the probe

Products

• DX Infrastructure Management
• NIMSOFT PROBES

Issue/Introduction

I get the error Illegal SID or ?Illegal SID: You must login to the appropriate domain to access the probe."


 

Environment

Release:
Component: UIMHUB

Resolution

This error indicates a problem with hub security settings.? Follow these steps to synchronize security files between the tunnel Server and the tunnel Client.

1. Stop the Nimsoft Robot Watcher Service on the tunnel Server
2. Go to $NIMROOT\hub folder (where $NIMROOT=Nimsoft install location)
3. Delete all files named 'security' with a prefix (security.cfg, security.dat, security.bak)
4. Start the Nimsoft Robot Watcher Service on the tunnel Server

To check if security.cfg file has been synced up, you can do one/both of the following:

1. In the Infrastructure Manager click on the Nimsoft Domain in the left navigation area and check under Security column on the right hand.? The value for your hub should be 'Enabled.'
2. Check the version value in the security.cfg file on the new hub. It should be the same version number as can be found in security.cfg on the existing/primary hub.

You may also need to do the following:

1. Check the box marked "Disable IP Validation" in hub GUI on tunnel server and all secondary hubs

<Please see attached file for image>

Verify the above setting by using "hubsec_setup_get" callback with key set as 'ignore_ip'

On tunnel Client's hub.cfg, add "check_cn = no" under tunnel entry or using hub GUI un-check "Check Server common name" in tunnel client entry.

With these actions taken, your issue should be resolved

 

Additional Information

IMPORTANT:
Note that in some cases the two actions listed below may be enough to resolve this error.

Using the Probe Utility which is accessed by selecting the probe and pressing Ctrl-P:

1. Using hub probe callback "hubsec_setup_put" on tunnel server add "ignore_ip = yes" (key=ignore_ip , value=yes)
2. Verify the above setting by using "hubsec_setup_get" callback with key as ignore_ip