Home› Self-Service Portal - Community
Options

Failed to assign AD group in navigation settings

Steffen_DobritzSteffen_Dobritz Member IT Monkey ✭
in Self-Service Portal - Community

Hi,

can't assign AD groups under navigation settings, because no data found. 

Aktuelle Portalversion: 11.0.4.2016 Management Pack Version: 7.7.2016.222
Version des Plattform-Cache: 3011.0.4
Plattformversion: 5.3.19
Add-Ins-Version: 1.0.2

1) Other query-fields like affected user are not affected

2) I checked if cireson service account has access to AD

3) I restart cache builder service and checked cache bulider logs for errors

4) Found error in the PlatformLog but I think it is not related to my issue.


Main Exception 2021-10-22T18:54:20.4912324+02:00: HResult: -2146232060, Source: .Net SqlClient Data Provider, Message: Das Ausführungstimeout ist abgelaufen. Der Timeoutzeitraum wurde überschritten, bevor der Vorgang beendet wurde, oder der Server antwortet nicht., InnerException: System.ComponentModel.Win32Exception (0x80004005): Der Wartevorgang wurde abgebrochen, StackTrace   bei System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
  bei System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
  bei System.Data.SqlClient.TdsParserStateObject.ReadSniError(TdsParserStateObject stateObj, UInt32 error)
  bei System.Data.SqlClient.TdsParserStateObject.ReadSniSyncOverAsync()
  bei System.Data.SqlClient.TdsParserStateObject.TryReadNetworkPacket()
  bei System.Data.SqlClient.TdsParserStateObject.TryPrepareBuffer()
  bei System.Data.SqlClient.TdsParserStateObject.TryReadByte(Byte& value)
  bei System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
  bei System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName, Boolean async, Int32 timeout, Boolean asyncWrite)
  bei System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(TaskCompletionSource`1 completion, String methodName, Boolean sendToPipe, Int32 timeout, Boolean& usedCache, Boolean asyncWrite, Boolean inRetry)
  bei System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
  bei System.Data.Entity.Infrastructure.Interception.InternalDispatcher`1.Dispatch[TTarget,TInterceptionContext,TResult](TTarget target, Func`3 operation, TInterceptionContext interceptionContext, Action`3 executing, Action`3 executed)
  bei System.Data.Entity.Infrastructure.Interception.DbCommandDispatcher.NonQuery(DbCommand command, DbCommandInterceptionContext interceptionContext)
  bei System.Data.Entity.Core.Objects.ObjectContext.ExecuteStoreCommandInternal(String commandText, Object[] parameters)
  bei System.Data.Entity.Core.Objects.ObjectContext.ExecuteInTransaction[T](Func`1 func, IDbExecutionStrategy executionStrategy, Boolean startLocalTransaction, Boolean releaseConnectionOnSuccess)
  bei System.Data.Entity.Core.Objects.ObjectContext.<>c__DisplayClass59.<ExecuteStoreCommand>b__57()
  bei System.Data.Entity.SqlServer.DefaultSqlExecutionStrategy.Execute[TResult](Func`1 operation)
  bei PlatformCache.Data.Models.RuntimeCache.CacheManagementService.<Process>d__12.MoveNext() in D:\a\1\s\Cireson.WebConsole\PlatformCache.Data\Models\RuntimeCache\CacheManagementService.cs:Zeile 131., TargetSite: Void OnError(System.Data.SqlClient.SqlException, Boolean, System.Action`1[System.Action])


Best Answer

  • Options
    Peter_MuttenthalerPeter_Muttenthaler Partner Advanced IT Monkey ✭✭✭
    Answer ✓

    Hi,

    Did you probably changed the "GroupQuery" setting in the Admin settings / setting elements:

    image.png

    Is the DN in AD and SCSM/Cireson same? Any other mismatches of the basic infos?

    Do have multiple domains?

Answers

  • Options
    Matt_Howard1Matt_Howard1 Customer Adept IT Monkey ✭✭

    Did you check that the groups are in the ServiceManagement database under dbo.CI$DomainGroup? I have had some sporadic sync issues and discovered users not found in CI$User or groups missing in CI$DomainGroup

  • Options
    Steffen_DobritzSteffen_Dobritz Member IT Monkey ✭

    The groups are available via the out of the box user query. So I thought they should be also available in navigation settings.

    As u mentioned I checked the table 

    select * from CI$DomainGroup where DisplayName like '%mygroup%'

    for my group and my group is there. I also checked last sync process:

    USER   CI$User   2021-10-24 03:27:18.067   56   2021-10-24 05:27:18.067
SCOP   Access_CI$User_WorkItem   2021-10-24 04:23:21.983   0   2021-10-25 04:23:21.983
CONF   ConfigurationItem   2021-10-24 03:27:18.037   56   2021-10-24 04:27:18.037
ENUM   Enumeration   2021-10-23 17:27:18.823   656   2021-10-24 17:27:18.823
CATA   ServiceOffering   2021-10-23 17:27:18.823   656   2021-10-24 17:27:18.823
WORK   WorkItem   2021-10-24 04:23:19.983   0   2021-10-24 04:24:19.983
  • Options
    Peter_MuttenthalerPeter_Muttenthaler Partner Advanced IT Monkey ✭✭✭
    Answer ✓

    Hi,

    Did you probably changed the "GroupQuery" setting in the Admin settings / setting elements:

    image.png

    Is the DN in AD and SCSM/Cireson same? Any other mismatches of the basic infos?

    Do have multiple domains?

  • Options
    Steffen_DobritzSteffen_Dobritz Member IT Monkey ✭
    edited October 2021

    Did you probably changed the "GroupQuery" setting

    I did. Sorry for the effort. I convinced I had checked as u can see under point no.1). I checked it again and u are rigth, that was reason.

    BTW: I want to exclude groups from the standard user on behalf query. But I need it to configure navigation settings as well. So I have to change always groupQuery?

  • Options
    Peter_MuttenthalerPeter_Muttenthaler Partner Advanced IT Monkey ✭✭✭

    Hi @Steffen_Dobritz

    Could please mark my comment as the answer?

    Please ask a new question for the "on behalf" query.

    Thanks in advance, have a good one! ;)

Sign In or Register to comment.