OPC DA Data Source

[EulertronikTw]

Hi. I was trying to create data points with OPC DA in scadabr and after talking with Fabio Durao, he suggested installing scada-lts. I did it, but the problem I got was the same as scadabr. So I will describe the issue hoping you could help me to solve it.

First of all, I tested the OPC DA Server with Matrikon Explorer and I could read/write tags without problems. The client and the server are on the same computer.

So I created a new Data Source with OPC DA. First thing I noticed is that OPC DA Properties ask for “Domain”, “User” and “Password” when Matrikon doesn't need that information.

I leave the domain in blank because the computer is in a workgroup. When I save it I obtained in the item server “Access is denied, please check whether the [domain-username-password] are correct … [0x00000005]”

Of course I disable the firewall and change COM security settings that everybody recommends to do.

With Matrikon Explorer I can access to all tags list and read them without problems:

I wish you could help me. I can do the test you need to find the solution. Thank in advance,

Juan

[Limraj]

Hi @EulertronikTw,

1. I take it you can't leave these fields blank?
2. Isn't there some global setting in 'Matrikon Explorer'? What do you need to enter there to connect to the server?
3. Could you configure the server to require this data? Perhaps the solution to your problem would be not to require and not to set these data when trying to connect to the server.

Regards,
Kamil Jarmusik

[odenisnobre]

Try this setting to see if it has any effect:

[EulertronikTw]

HI Kmail

1. Exact. I can't leave User and Password fields in blank.
2. There isn't global setting in Matrikon Explorer. Matrikon explorer detects OPC DA server and just with double click I can connect to it
3. No I can't configure OPC DA Server, and I can't leave them in blank
   

Thanks in advance

Juan

[odenisnobre]

Other settings that can be checked:

[odenisnobre]

From what I understand from the image, your OPC server is Citect and not Matrikon.
In this case Matrikon OPC Explorer is being a client.

[odenisnobre]

Another thing, is Scada-LTS running on the same machine where you are using Matrikon OPC Explorer?

[EulertronikTw]

• I'm trying to read values from Vijeo Citect OPC DA Server. I test the connection with Matrikon and it works. I can't do the same with scada-lts as client.
• Matrikon Explorer, Scada-Lts and Viejo Citect are in the same computer

Thanks

[EulertronikTw]

Other settings that can be checked:

Thanks, no diference

[EulertronikTw]

Try this setting to see if it has any effect:

thanks, but make no difference

[odenisnobre]

• I'm trying to read values from Vijeo Citect OPC DA Server. I test the connection with Matrikon and it works. I can't do the same with scada-lts as client.
• Matrikon Explorer, Scada-Lts and Viejo Citect are in the same computer

Thanks

Is the OPC Server service running with any user?
Does the user trying to connect have access to communicate with the server?

[Limraj]

@odenisnobre, Thanks for these tips. Based on this, we can conclude that this should work. :)
@EulertronikTw, I will prepare a version of the application in which you will not be required to provide these data, and they will not be set when you try to connect.

[EulertronikTw]

@odenisnobre, Thanks for these tips. :)
@EulertronikTw, I will prepare a version of the application in which you will not be required to provide these data, and they will not be set when you try to connect.

Excellent. I will be waiting for your news. I thank you and everyone who quickly responded to my concern.

[Limraj]

Hi @EulertronikTw,
I prepared versions without username/passowrd validation, additionally I corrected error messages. If you are using docekra this image pr-2501:
#2501
docker-compose-tutorial

If you don't use docker-compose, it will provide you with a fix later.

Regards,
Kamil Jarmusik

[EulertronikTw]

Hi @EulertronikTw, I prepared versions without username/passowrd validation, additionally I corrected error messages. If you are using docekra this image pr-2501: #2501 docker-compose-tutorial

If you don't use docker-compose, it will provide you with a fix later.

Regards, Kamil Jarmusik

Hi Kamil, I don't use docker, but I will try it. Thanks!

Juan

[Limraj]

@EulertronikTw from you can dowload zip with war. You need to unpack the zip and move the wara to webapps.
However, I have doubts whether our library allows connection without username/password authorization.

If I don't set the username and password, before the initialization of the connection, I get an error that these fields should be set. There is still a chance that if you set these fields empty, then if the server does not require authorization, it will work.
You can test this.

[Limraj]

@EulertronikTw Have you been able to test it?

[EulertronikTw]

@EulertronikTw Have you been able to test it?

Hi Kamil. Sorry for de delay. I tested it this weekend but without good results. Beside this, another person do some test for me and found that the problem is with Windows 10. He installed all (opc server Citect and scada-lts) in windows 7 and all work as expected. Now I'm installing docker to continue doing some test. I will write to you again. Thanks!

[Limraj]

Hi @EulertronikTw,
On windows 7, the older version also works, in the sense that you set the username/password, although the server does not require it?

[EulertronikTw]

Hi @EulertronikTw,
On windows 7, the older version also works, in the sense that you set the username/password, although the server does not require it?

Exactly. Now I need to know if the problem on Windows 10 is on the server or the client scada lts side.

[Limraj]

@EulertronikTw Where did you download the server from? Maybe there will be something on the owner website,
do they have support for windows 10, or people have reported something. You might also try on a different server.

[EulertronikTw]

@EulertronikTw Where did you download the server from? Maybe there will be something on the owner website,
do they have support for windows 10, or people have reported something. You might also try on a different server.

Yes, I Will try with an opc server simulator. Thanks

[Limraj]

@EulertronikTw Sorry, I was tired yesterday,

1. I understand that you have jave, tomcat, and opc da server in one version on windows 7 and windows 10, except that windows 10 does not work, but on windows 7 it works even on the old version of Scada-LTS ? (You can connect to server OPC DA from Scada-LTS)
2. Are you having issues with the Data Source list on your old code? Fixed loaded Data Source list #2499
3. In addition on windows 7 and 10, do you have another external client that can connect to this server on both systems?

Tips:

1. Check what protocol version is used in servers on windows 7 and 10, and compare it with the protocol versions supported by clients that can connect to these servers;
2. Update jave 11 to the latest possible version;
3. Update tomcat 9 to the latest possible version;
4. Update OPC server to the latest possible version;
5. If that doesn't help, it could be that the libraries in Scada-LTS are using native code which doesn't work in Windows 10. We can try porting the custom library code to Scada-LTS, it's just a few classes and update the deprecated libraries from org.openscada (We are using version 0.5.0 and the last stable one is 1.5.0). We also plan to implement plc4x and OPC UA, but that's in the future;

Regards,
Kamil Jarmusik

[Limraj]

Hi @EulertronikTw
Okay, if there is a possibility to configure without authorization data, then these fields should not be required. The messages have also been improved, so either way, we will carry these fixes to the next version.

The question is how are your tests progressing, are we doing something more with it?

[EulertronikTw]

Hi Kamil! I did some test this weekend. I installed scadlts on Win7 Virtual machine with the same results as Win10 (no communication between SCADA-LTS and Citect as OPC DA Server)

I also searched information about OPC DA version of Vijeo Citect. From the help, versions supported are v1.0a and v2.0:

When I test communication using Matrikon Explorer, it call CtOPC32.dll:

Seeing details of CtOPC32.dll, it supported OPC DA 2.0:

I also installed OPC Server Simulator from Matrikon and I could comunicate with SCADA-LTS without any problems:

Communication between Matrikon Explorer an Vijeo Citect 7.20 as OPC Server works perfectly but I don't know why.

Probably the problem is in the versions of OPC DA as you said. Which version of OPC DA use SCADA-LTS?

Thanks in advance,

Juan

[Limraj]

1. And could you try to force an older version of the protocol on your server, ie v1.0a? If it could be done and it works, that would be proof that protocol versions are involved.
2. Why are you entering your credentials?

edit:
3. You can also try to force a newer version of the protocol on the simulator;

[EulertronikTw]

Hi again.

1. And could you try to force an older version of the protocol on your server, ie v1.0a? If it could be done and it works, that would be proof that protocol versions are involved.
   No, I can't
2. Why are you entering your credentials?
   Because I need to enter them even to communicate with matrikon server simulator. Matrikon OPC Client don't ask for that information but may be take it from somewhere else
   edit: 3. You can also try to force a newer version of the protocol on the simulator;
   No, I can't do that either

[Limraj]

Because I need to enter them even to communicate with matrikon server simulator. Matrikon OPC Client don't ask for that information but may be take it from somewhere else"
You wrote at the beginning that you have a server that does not require authorization? Maybe I misunderstood something.

Edit:
So, after all, these authorization data were get? Does this mean we are restoring validation for these fields?

[Limraj]

Unfortunately, now I do not have windows in front of me ... look on the net how to run applications with administrator privileges on windows. It's about starting tomcat with these permissions.
Run this tool from tomcat, click stop and close, then try to run by right clicking the Scada-LTS shortcut, run as administrator.

[Limraj]

Hi @EulertronikTw,
I understand it didn't help. I need to dig into this topic more, it is also possible to change the library. You could also try following the instructions in the link. However, requiring such registry operations from the user is not a very good solution. This should work "out of the box".

edit:
It's certainly interesting that the simulator server works, only this particular one does not, but another client can connect to this server, so it's some system configuration, but related specifically to the library.
Another possibility is that this client process has a special setting in system that allows it to run dll for 32 bit version...
I need to find information on this...

https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/compatibility-limitations-32-bit-programs-64-bit-system

I'll be back when I know more. I can come back to that later.

It seems, however, that you can do it automatically by setting the appropriate flag in the library, I will prepare such a version of this small program and we'll see.
https://github.com/skyghis/j-interop-ng/blob/jcifs-ng/j-interop/README.md#A6

[Limraj]

Okay @EulertronikTw,
I set autoconfig, you can try again:
opc-da-1.0.1.jar

[EulertronikTw]

Hi Kmail. Here you are the files:

with matrikon server v1.0.1.txt
without server v1.0.1.txt
with citect server v1.0.1.txt

Thanks

Juan

[Limraj]

Now we have something like this:
org.jinterop.dcom.common.JIException: Access is denied, please check whether the [domain-username-password] are correct. Also, if not already done please check the GETTING STARTED and FAQ sections in readme.htm. They provide information on how to correctly configure the Windows machine for DCOM access, so as to avoid such exceptions. [0x00000005]
-> from https://copyprogramming.com/howto/utgard-access-denied :
00000005: Login error (does the user has administrator rights!?)
try:
https://copyprogramming.com/howto/run-explorer-as-administrator-windows-7

[Limraj]

1. Open "Scada-LTS service manager" -> click stop and close;

2. Next open cmd as admin:
   https://quehow.com/wp-content/uploads/2014/12/how-to-login-as-administrator-in-windows-7-step-12.jpg
   and:
   https://quehow.com/wp-content/uploads/2014/12/how-to-login-as-administrator-in-windows-7-step-22.jpg

Next in cmd:
cd "path_to_Scada-LTS_installation/tomcat/bin"
catalina.bat start

3. Sorry in cmd:
   cd "path_to_opc_ds_1_0_1/"
java -jar opc-da-1.0.1.jar -u user -p pass -s server -h host

[Limraj]

Hi @EulertronikTw,
If I wrote something unclear, let me know. Generally, the idea is to run the opc-da application through cmd that has been run with administrator privileges, i.e. with the 'Run as administrator' function. If that doesn't work, maybe we'll get another error.

[EulertronikTw]

Hi @EulertronikTw, If I wrote something unclear, let me know. Generally, the idea is to run the opc-da application through cmd that has been run with administrator privileges, i.e. with the 'Run as administrator' function. If that doesn't work, maybe we'll get another error.

Hi Kamil. Yes, I know that. My doubt was how to run SCADA LTS as administaror, because the interface is a web page.

I already ran opc-da-1.0.1.jar as Administator. I ran from PowerShell because with cmd I can't copy all the results.

What I didn't do, was stop scada-lts manager previously. So I ran it again:

without server v1.0.1.txt

with matrikon server v1.0.1.txt

with citect server v1.0.1.txt

Tell me if these test are what you need. Thanks!

[Limraj]

Hi @EulertronikTw
try:

1. Open regedit;
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
4. set the value to: 1
5. restart system, next run opc-da as administrator

[EulertronikTw]

Hi @EulertronikTw try:

1. Open regedit;
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
4. set the value to: 1
5. restart system, next run opc-da as administrator

Yes. I already did it too:

Citect.txt
Matrikon.txt
without server.txt

[Limraj]

If you are trying to solve a specific technical problem, you must keep certain settings permanently, e.g. you cannot change the system version. The first logs were for windows 7 and you should stick to that system. If you approach technical problems this way, you will not be able to solve any technical problem. Also let's go back to windows 7.

[Limraj]

Do you have it installed?: https://learn.microsoft.com/en-us/dotnet/framework/install/dotnet-35-windows

[EulertronikTw]

If you are trying to solve a specific technical problem, you must keep certain settings permanently, e.g. you cannot change the system version. The first logs were for windows 7 and you should stick to that system. If you approach technical problems this way, you will not be able to solve any technical problem. Also let's go back to windows 7.

Hi Kamil, you are right, my mistake was share win10 files, but I always test both cases: win7 in a virtual machine and win10 is the host. Here you are win 7 test:

Matrikon win7 v1.0.1.txt
Citect win7 v1.0.1.txt
no server win7 v1.0.1.txt

Thanks,

Juan

[EulertronikTw]

Do you have it installed?: https://learn.microsoft.com/en-us/dotnet/framework/install/dotnet-35-windows

yes

[Limraj]

Hi @EulertronikTw,
follow these steps in windows 7:

1. Open regedit;
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
   create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
3. set the value is: 1
4. restart system, next run opc-da as administrator

This .NET Framework 3.5 you have installed on windows 7 and 10?

[EulertronikTw]

Hi @EulertronikTw, follow these steps in windows 7:

1. Open regedit;
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
   create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
3. set the value is: 1
4. restart system, next run opc-da as administrator

This .NET Framework 3.5 you have installed on windows 7 and 10?

Here you are:

win7 v1.0.1.txt

[Limraj]

It's specifically about version 3.5, not 3.5.1, on windows it works so that you have different versions of this library installed at the same time.

edit:
It looks like ".NET 3.5 Service Pack 1" stands for 3.5.1.

I've run out of ideas for now, I'll try to figure something out on my computer tomorrow.
Thanks.

[EulertronikTw]

Hi Kamil. I ran .net 3.5 installer but there wasn't an output that confirm correct installation, so I verified in the register:

230425 - Win7 test opc-da v1.0.1.txt

I will try to catch logs with wireshark to understand what happen, and why it works with matrikon client and don't with scada-lts.

Tell me if you need more test. Thanks,

Juan

[EulertronikTw]

Hi @EulertronikTw, I changed versions for libraries with dependencies. try: opc-da-1.0.2.jar

here you are the test with version 1.0.2. Previously I stopped scada-lts service

230425 - Win7 test opc-da v1.0.2.txt

[Limraj]

@EulertronikTw

For each attempt, you must have set:

1. Open regedit;
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
2. create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
3. set the value is: 1
4. restart system, next run opc-da as administrator

[EulertronikTw]

@EulertronikTw

For each attempt, you must have set:

1. Open regedit;
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
2. create or modify 32-bit DWORD: LocalAccountTokenFilterPolicy
3. set the value is: 1
4. restart system, next run opc-da as administrator

ok. I did it as you mention, but LocalAccountTokenFilterPolicy was already set to 1

230425.-.Win7.test.opc-da.v1.0.2 - 1.txt

Juan

[Limraj]

@EulertronikTw Weird because now you have a different error in the logs.
If you don't have it set, you get: 0x00000005, if you have this: 0xC00000AC.
If you haven't changed anything and you're getting various errors, that would be weird...

It could also be that the library didn't manage to set something up and you get this one error the first time, and then the other one all the time.

One more fix:
opc-da-1.0.3_.jar

You can also try this dcom configuration:
https://www.ibm.com/support/pages/configuring-dcom-and-wmi-remotely-retrieve-windows-7-events

You can still install jdk/jre 8, that could be the cause of the problem too.

[EulertronikTw]

@EulertronikTw Weird because now you have a different error in the logs. If you don't have it set, you get: 0x00000005, if you have this: 0xC00000AC. If you haven't changed anything and you're getting various errors, that would be weird...

It could also be that the library didn't manage to set something up and you get this one error the first time, and then the other one all the time.

One more fix: opc-da-1.0.3_.jar

You can also try this dcom configuration: https://www.ibm.com/support/pages/configuring-dcom-and-wmi-remotely-retrieve-windows-7-events

You can still install jdk/jre 8, that could be the cause of the problem too.

ok. Give me some time for install jdk/jre 8

Here you are de last test:
230425 - Win7 test opc-da v1.0.3.txt

[Limraj]

@EulertronikTw
I'm done for today. Thanks for all the testing and patience. I need to recreate your environment and look at it myself. If you could confirm the version of the servers/clients, do you have all of them installed on one system?
I'd be back with information tomorrow or the day after tomorrow.

[EulertronikTw]

Hi Kamil. Today I couldn't send You anything. Tomorrow I Will send You a complete detail of each computer and test I did. Greetings

Juan

[Limraj]

Hi @EulertronikTw,
I tried to recreate your environment, installed Vijeo Citect and MatrikonOPC Explorer, created an OPC DA server in Vijeo Citect and similarly, I can't connect to this server from this java library, but MatrikonOPC has no problems with it. Except that I keep getting error 0x0...5. I've tried different settings. I have access to windows 10 Home edition, so I was working on that system.

I don't know if the problem is not an outdated authentication method, disabled in windows 7 and 10:
https://sourceforge.net/p/j-interop/discussion/840678/thread/5d555adb/
https://github.com/skyghis/j-interop-ng/blob/jcifs-ng/j-interop/README.md
https://ss64.com/nt/syntax-ntlm.html

On windows 10 home edition and some features are not available.

From the servers of the Poznań University of Technology, you can download a newer version Vijeo_Citect, if you have a license key:
http://elektronika.iee.put.poznan.pl/SCADA/Jak_instalowac_Vijeo_Citect_7_40_Expert.pdf
Vijeo_Citect_V740.zip
VijeoCitect-7.40- Service-Pack-2.zip

You could also try with another OPC DA server if you have access. @odenisnobre uses KEPServerEX.V6 and it seems to work well with our library. Another question is do you need to use this protocol? This is an outdated solution, and it looks like it is a solution dedicated to windows. It is worth considering Modbus IP, SNMP, maybe: MQTT, we use these protocols in production, so configuration should not be a problem. (of course, these are not all protocols, we also support: AMQP, Modbus Serial and others)

I'm sorry that we spent so much time on it, and we couldn't achieve a satisfactory effect, sometimes it happens. Thank you for your significant contribution. I encourage you to continue to be active if other problems arise.

Regards,
Kamil Jarmusik

[EulertronikTw]

Hi Kamil. Below my answers in italic bold

Hi @EulertronikTw, I tried to recreate your environment, installed Vijeo Citect and MatrikonOPC Explorer, created an OPC DA server in Vijeo Citect and similarly, I can't connect to this server from this java library, but MatrikonOPC has no problems with it. Except that I keep getting error 0x0...5. I've tried different settings. I have access to windows 10 Home edition, so I was working on that system.

I don't know if the problem is not an outdated authentication method, disabled in windows 7 and 10: https://sourceforge.net/p/j-interop/discussion/840678/thread/5d555adb/ https://github.com/skyghis/j-interop-ng/blob/jcifs-ng/j-interop/README.md https://ss64.com/nt/syntax-ntlm.html

On windows 10 home edition and some features are not available.

From the servers of the Poznań University of Technology, you can download a newer version Vijeo_Citect: http://elektronika.iee.put.poznan.pl/SCADA/Jak_instalowac_Vijeo_Citect_7_40_Expert.pdf Vijeo_Citect_V740.zip VijeoCitect-7.40- Service-Pack-2.zip

Thanks! I will try it. Is this a cracked version or requierd hardware keys? I have originals copies of Citect 7.2 with hardware USB keys that don't support newer version.

You could also try with another OPC DA server if you have access. Another question is do you need to use this protocol? This is an outdated solution, and it looks like it is a solution dedicated to windows. It is worth considering Modbus IP, SNMP, maybe: MQTT, we use these protocols in production, so configuration should not be a problem.

I didn't find another way to get data from Vijeo Citect so fast as OPC-DA is. My goal is to be able to create a copy of the VIJEO CITECT scada with access via the web, a feature that my current SCADA does not have. This is the reason for all this effort

I'm sorry that we spent so much time on it, and we couldn't achieve a satisfactory effect, sometimes it happens. Thank you for your significant contribution. I encourage you to continue to be active if other problems arise.

No problem. I am more than grateful for all the help received

Just when I received your reply, I was preparing the following information to clarify all the tests I did:

PC1 - SCADA Main Server
- Name: WIN-VCD6S8JQFC2
- OS: Win Server 2012 R2 Essentials
- SW:
- Vijeo Citect 7.2 -> OPC Servers: Citect.OPC.1 and Citect.OPCRemote.1
- Matrikon OPC Server Simulator: Matrikon.OPC.Simulation.
- NET Framework: v2.0.50727, v3.0, v4.0.30319
- Java: jdk1.8.0_181
- Eth.Addr.: 192.168.3.100

PC2 - SCADA Client and WorkStation Development
- Name: DESKTOP-3MV3IUP
- OS: Win10 Pro 21H2 x64
- SW:
- Vijeo Citect 7.2 (Client) -> OPC Servers: Citect.OPC.1 and Citect.OPCRemote.1
- Matrikon OPC Server Simulator -> OPC Server: Matrikon.OPC.Simulation.1
- VirtualBox+GuestAdditions
- SCADA-LTS
- NET Framework: v1.1, v1.1Hotfix, v2.0.50727, v3.0, v3.5, v4.0.30319, v4.5.2
- Java: jdk-11
- Eth.Addr.: 192.168.3.5

PC3 - Virtual Machine

• Name: Openmaint-PC
• OS: Win7 SP1 Ultimate x64
• SW:
  - Vijeo Citect 7.2 -> OPC Servers: Citect.OPC.1 and Citect.OPCRemote.1
  - Matrikon OPC Server Simulator: Matrikon.OPC.Simulation.1
  - SCADA-LTS
  - NET Framework: v2.0.50727, v3.0, v3.5, v4, v4.0, v4.5.2
  - Java: jdk-11, jre1.8.0_361
  - Java x86: jdk1.6.0_45, jre6
• Eth.Addr.: 10.0.2.15 (NAT connection)

Tests:

PC2:
Using Matrikon Explorer I can list all localhost OPC servers, list tags and read values.
On the other side, using SCADA-LTS I can’t list OPC localhost servers (always get this error: access is denied please check whether the [domain-username-password are correct] and this is the reason that I asked you to remove the domain-username-password to the requirements in SCADA-LTS. I thought that it was the problem because Matrikon don’t need that information (or get it from another way)
Then I tried to connect to OPC servers located in PC1 (Main SCADA Server), and I could list Citect OPC Servers but I couldn’t list tags. So I installed Matrikon Server Simulator on PC1, and I could read tags from it using SCADA-LTS. So the problem is between Citect and SCADA-LTS

PC3:
Same results as PC2. I can't see any difference between the tests I made in Wint10 and Win7 virtual machine

Thanks again for all the time spent solving my problem. I will gladly be a collaborator for tests if required. I plan to use SCADA-LTS with LoRa devices that we are developing.

Juan

Regards, Kamil Jarmusik

[Limraj]

Hi @EulertronikTw
We're glad you want to use Scada-LTS. :)
Once again, thank you for the time you put in, from my perspective it was not time wasted.

Regards,
Kamil Jarmusik