Active Directory users cannot log in: An error (1301) occurred while enumerating the groups. The group's SID could not be resolved

thom_schumacher · 22 May 2014 22:18

Running Octopus 2.4.5. Getting this after a fresh install:

An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:05:27
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:05:33
Principal 'naveen_pavuluri@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:05:33
Principal 'naveen_pavuluri@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:05:36
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:11
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:18
Principal 'naveen_pavuluri@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:06:18
Principal 'naveen_pavuluri@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:06:23
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:36
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:39
Principal 'Matthew_Zimmerman@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:06:39
Principal 'Matthew_Zimmerman@volusion.com' (Domain: '') could not be logged on via WIN32: 0x0000052E.
System.ComponentModel.Win32Exception (0x80004005): The user name or password is incorrect


 Warning    2014-05-22 17:06:49
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:50
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:51
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:52
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43


 Warning    2014-05-22 17:06:52
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.
   at System.DirectoryServices.AccountManagement.SidList.TranslateSids(String target, IntPtr[] pSids)
   at System.DirectoryServices.AccountManagement.SidList..ctor(SID_AND_ATTR[] sidAndAttr)
   at System.DirectoryServices.AccountManagement.AuthZSet..ctor(Byte[] userSid, NetCred credentials, ContextOptions contextOptions, String flatUserAuthority, StoreCtx userStoreCtx, Object userCtxBase)
   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOfAZ(Principal p)
   at System.DirectoryServices.AccountManagement.UserPrincipal.GetAuthorizationGroupsHelper()
   at Octopus.Server.Web.Infrastructure.Authentication.ActiveDirectoryMembership.GetMemberExternalSecurityGroupIds(String username) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\ActiveDirectoryMembership.cs:line 101
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.LoadAndCache(IDocumentSession session, User user, String cacheKey, String establishedWith) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 117
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalCache.GetPrincipal(IDocumentSession session, Guid identificationToken) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalCache.cs:line 86
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.GetPresentedUserIdentity(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 98
   at Octopus.Server.Web.Infrastructure.Authentication.OctopusPrincipalEstablisher.EstablishPrincipalForRequest(NancyContext context) in y:\work\db516cd4dfb6f424\source\Octopus.Server\Web\Infrastructure\Authentication\OctopusPrincipalEstablisher.cs:line 43

 Warning    2014-05-22 17:06:53
An exception was thrown while trying to establish a principal for the current request
System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1301) occurred while enumerating the groups.  The group's SID could not be resolved.

Paul_Stovell · 23 May 2014 00:36

Hi Thom,

Can you try applying this hotfix?

http://support.microsoft.com/kb/2830145

Paul

thom_schumacher · 23 May 2014 02:12

Sure

thom_schumacher · 23 May 2014 13:36

The hot fix provided only works for 2008 r2 and I’m running Server 2012

Nicholas_Blumhardt · 26 May 2014 00:54

Hi Thom,

I believe we’ve seen this once before and resolved it in that case by adjusting the AD permissions granted to the Octopus Server’s user account. (As a quick smoke check you might consider running the server as a domain admin just to see if access is the root cause.)

In the earlier case making the Octopus service account a member of the “Windows Authorization Access” resolved the issue, so this would be the first thing to try.

Let me know if this turns up any results, and if not, some details of the AD setup and the Octopus Server’s user account might help open up more avenues to investigate.

Regards,
Nick

thom_schumacher · 27 May 2014 16:50

ok … Nick I’ve tried what you suggested and I"m still faced with the same issue. To clarify things a bit more here is my present setup:

Octopus server is a member of a child domain of Corp called Dev there is a one way trust to the corp domain.

The user that octopus is using is a domain admin on the Corp domain and my users still cannot login at all. I can and members of my immediate team that are in the same active directory group as I am are able to login.

Paul_Stovell · 28 May 2014 23:17

Resolved: The Octopus service was configured to use a custom user account. That user account was a Domain Admin, but even domain admins aren’t part of the Windows Authorization Access group. Adding the service account to the Windows Authorization Access group solved the problem.

For anyone else who stumbles on this thread: if your Octopus server is running on Windows Server 2008, applying the hotfix (http://support.microsoft.com/kb/2830145) should resolve the issue. Alternatively, if your service runs as a custom user, you’ll need to add them to the Windows Authorization Access group.

thom_schumacher · 6 June 2014 15:00

This issue stil persists with the groups described I’m still having certain users that cannot login at all.

thom_schumacher · 6 June 2014 15:04

This looks almost exactly like the error I’m getting from Octopus:

and a potential solution. not sure if it is applicable