IBM Support

The IBM IoT MessageSight server could not connect to the OAuth authorization server

Troubleshooting


Problem

IBM IoT MessageSight server can not connect to the OAuth authorization server and client connection authorization is failing with:
mqtt.c:3093: MQTT error: rc=The connection is not authorized

Symptom

MQTT client connections cannot be validated over  OAuth server due to certificate problems and symptoms might indicate that the OAuth server cannot be reached

Cause

The certificate uploaded on IBM IoT MessageSight used to establish a secure connection with the OAuth server does not include the key for the certificate validation.

Diagnosing The Problem

In order to confirm the issue, please check traces for below error messages:
Security.1 oauth.c:140: curl_easy_perform() failed: Problem with the local SSL certificate
Security.1 oauth.c:142: Set error "The IBM IoT MessageSight server could not connect to the OAuth authorization server. The cURL return code is 58." (184)  
Security.1 oauth.c:390: sendCurlRequest() failed: cRC=58 rc=184 url='OAuth server address'
 
Security.1 CWLNA6164 N: The connection is not authorized because OAuth authentication failed. ClientID="xxxxxxxxx", AuthorizationToken="xxxxxxx", Error="The IBM IoT MessageSight server could not connect to the OAuth authorization server. The cURL return code is {0}.", RC=184

mqtt.c:3093: MQTT error: rc=The connection is not authorized. (5) command=CONNECT connect=xxxxxxxxxxx

Resolving The Problem

Check if the certificate of the OAuth server that is used the IBM IoT MessageSight profile,  includes the key certificate.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSWMAJ","label":"IBM IoT MessageSight"},"Component":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"2.0, 5.0","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
04 February 2019

UID

ibm10793877