The token supplied to the function is invalid

Hello,

I have recently set up a new TeamCity instance, and after a reboot of a set of servers over the weekend, I can no longer log in using my Domain (NTLM) account.

When I try, I am met with the error message:

"The token supplied to the function is invalid"

This only happens when I try to log into the TeamCity Web Interface through a remote machine.  When I do it locally on the TeamCity Server, it works correctly.

I found this YouTrack ticket for the same issue:

https://youtrack.jetbrains.com/issue/TW-23821

However, this states that the issue was fixed, but this doesn't seem to be the case.

Any ideas on how to proceed?

Thanks

Gary

10 comments
Comment actions Permalink

Hi,

The issue that you mentioned occurred when several browser windows opened in web browser, which caused synchronization problems. Please try to login from single TeamCity page at a time.

Could you please also check that the settings on remote machine have not been changed, and you use the correct domain?

Please select debug-auth logging mode and attach teamcity-http-auth.log file.

0
Comment actions Permalink

Hello,

I was able to get logged into TeamCity, after I closed a browser I had opened on another machine, so that fixed it for me.

However, a brand new user to the system, who has never logged into before, is getting the same error.

Surely, it isn't the case that only one browser can be open at the same time?!?

Gary

0
Comment actions Permalink

Hi,

After login you should be able to use TeamCity in different browsers on different machines. If it does not work for you please attach log file mentioned in my previous comment.

0
Comment actions Permalink

Hello,

Please find attached the log as requested.

Any ideas on what could be causing this?

Thanks

Gary



Attachment(s):
teamcity-auth.log.zip
0
Comment actions Permalink

Hi,

How many browser tabs were opened when exception from log occurred?
Have you configured clients as described here? If not please try to configure.

0
Comment actions Permalink

Hello,

Thanks for getting back to me!

I have just tried again, using a single Internet Explorer instance, with a single tab open, and the same thing happened.

Yes, Internet Explorer is set up as described in that article.

One thing that I should mention...

Our TeamCity Server is located on one domain, DomainA, and the Client machine I am using is one another domain, DomainB.

However, I am providing my DomainA credentials when prompted for them in Internet Explorer.

Thanks

Gary

0
Comment actions Permalink

Hi,

Do you have other services except TeamCity which use NTLM?
Can you reproduce the issue in Firefox browser?
This error message "The token supplied to the function is invalid" is generated by Waffle framework, which is used by TeamCity. It looks like this issue is not on TeamCity side, but somewhere in configurations. For example see this forum thread. Also please check windows event log, there could be more error messages.

0
Comment actions Permalink

Hello,

On the same server I have an installation of Octopus Deploy which I provide my domain account to, and that works successfully.

I have just tried using Firefox, and I can log into using my domain account without any problems.  But on Chrome and Internet Explorer, I can't.

Gary

0
Comment actions Permalink

Please double check that you configured browser correctly and added URLs are absolutely the same as you use when trying to connect to TeamCity.

0
Comment actions Permalink

Hello,

Yes, I added the configuration exactly as desribed in that article.

As a test, I have moved the server URL from "Local Intranet" to "Trusted Sites", and now I can get access to TeamCity in both Internet Explorer and Chrome.

Any idea why I need to make a different change than what is documented?

Gary

0

Please sign in to leave a comment.