Failed to assign AD group in navigation settings
Hi,
can't assign AD groups under navigation settings, because no data found.
Aktuelle Portalversion: 11.0.4.2016 Management Pack Version: 7.7.2016.222 Version des Plattform-Cache: 3011.0.4 Plattformversion: 5.3.19 Add-Ins-Version: 1.0.2
1) Other query-fields like affected user are not affected
2) I checked if cireson service account has access to AD
3) I restart cache builder service and checked cache bulider logs for errors
4) Found error in the PlatformLog but I think it is not related to my issue.
Main Exception 2021-10-22T18:54:20.4912324+02:00: HResult: -2146232060, Source: .Net SqlClient Data Provider, Message: Das Ausführungstimeout ist abgelaufen. Der Timeoutzeitraum wurde überschritten, bevor der Vorgang beendet wurde, oder der Server antwortet nicht., InnerException: System.ComponentModel.Win32Exception (0x80004005): Der Wartevorgang wurde abgebrochen, StackTrace bei System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction) bei System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose) bei System.Data.SqlClient.TdsParserStateObject.ReadSniError(TdsParserStateObject stateObj, UInt32 error) bei System.Data.SqlClient.TdsParserStateObject.ReadSniSyncOverAsync() bei System.Data.SqlClient.TdsParserStateObject.TryReadNetworkPacket() bei System.Data.SqlClient.TdsParserStateObject.TryPrepareBuffer() bei System.Data.SqlClient.TdsParserStateObject.TryReadByte(Byte& value) bei System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady) bei System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName, Boolean async, Int32 timeout, Boolean asyncWrite) bei System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean& usedCache, Boolean asyncWrite, Boolean inRetry) bei System.Data.SqlClient.SqlCommand.ExecuteNonQuery() bei System.Data.Entity.Infrastructure.Interception.InternalDispatcher`1.Dispatch[TTarget,TInterceptionContext,TResult](TTarget target, Func`3 operation, TInterceptionContext interceptionContext, Action`3 executing, Action`3 executed) bei System.Data.Entity.Infrastructure.Interception.DbCommandDispatcher.NonQuery(DbCommand command, DbCommandInterceptionContext interceptionContext) bei System.Data.Entity.Core.Objects.ObjectContext.ExecuteStoreCommandInternal(String commandText, Object[] parameters) bei System.Data.Entity.Core.Objects.ObjectContext.ExecuteInTransaction[T](Func`1 func, IDbExecutionStrategy executionStrategy, Boolean startLocalTransaction, Boolean releaseConnectionOnSuccess) bei System.Data.Entity.Core.Objects.ObjectContext.<>c__DisplayClass59.<ExecuteStoreCommand>b__57() bei System.Data.Entity.SqlServer.DefaultSqlExecutionStrategy.Execute[TResult](Func`1 operation) bei PlatformCache.Data.Models.RuntimeCache.CacheManagementService.<Process>d__12.MoveNext() in D:\a\1\s\Cireson.WebConsole\PlatformCache.Data\Models\RuntimeCache\CacheManagementService.cs:Zeile 131., TargetSite: Void OnError(System.Data.SqlClient.SqlException, Boolean, System.Action`1[System.Action])
Best Answer
-
Peter_Muttenthaler Partner Advanced IT Monkey ✭✭✭
Hi,
Did you probably changed the "GroupQuery" setting in the Admin settings / setting elements:
Is the DN in AD and SCSM/Cireson same? Any other mismatches of the basic infos?
Do have multiple domains?
0
Answers
Did you check that the groups are in the ServiceManagement database under dbo.CI$DomainGroup? I have had some sporadic sync issues and discovered users not found in CI$User or groups missing in CI$DomainGroup
The groups are available via the out of the box user query. So I thought they should be also available in navigation settings.
As u mentioned I checked the table
for my group and my group is there. I also checked last sync process:
Hi,
Did you probably changed the "GroupQuery" setting in the Admin settings / setting elements:
Is the DN in AD and SCSM/Cireson same? Any other mismatches of the basic infos?
Do have multiple domains?
Did you probably changed the "GroupQuery" setting
I did. Sorry for the effort. I convinced I had checked as u can see under point no.1). I checked it again and u are rigth, that was reason.
BTW: I want to exclude groups from the standard user on behalf query. But I need it to configure navigation settings as well. So I have to change always groupQuery?
Hi @Steffen_Dobritz
Could please mark my comment as the answer?
Please ask a new question for the "on behalf" query.
Thanks in advance, have a good one! ;)