Laserfiche.LicenseManager.InvalidUsernamePasswordException

asked on January 20, 2021

Hello,

I'm getting the following errors under Event Viewer > Laserfiche > Directory Server > Operational Trace.

AD Sync and All Laserfiche functions are working properly, trying to figure out where this error is coming from. I opened a support ticket and they said it was related to LDAP but I don't seem to believe it is after investigating.

Any way to trace this error?

EVENT ID: 24

Error of type 'Laserfiche.LicenseManager.InvalidUsernamePasswordException' while trying to issue a token. Laserfiche.LicenseManager.InvalidUsernamePasswordException: Exception of type 'Laserfiche.LicenseManager.InvalidUsernamePasswordException' was thrown.
at Laserfiche.LicenseManager.LFSecurityTokenService.GetLaserficheUser(SessionTokenParameters parameters)
at Laserfiche.LicenseManager.LFSecurityTokenService.GenerateSecurityToken(SessionTokenParameters tokenParams, Dictionary`2 claims)
at Laserfiche.LicenseManager.LFSecurityTokenService.IssueToken(String body, Nullable`1 port, WindowsIdentity winID)

Type:
Laserfiche.LicenseManager.InvalidUsernamePasswordException

Stack Trace:
at Laserfiche.LicenseManager.LFSecurityTokenService.GetLaserficheUser(SessionTokenParameters parameters)
at Laserfiche.LicenseManager.LFSecurityTokenService.GenerateSecurityToken(SessionTokenParameters tokenParams, Dictionary`2 claims)
at Laserfiche.LicenseManager.LFSecurityTokenService.IssueToken(String body, Nullable`1 port, WindowsIdentity winID) at Laserfiche.LicenseManager.LFSecurityTokenService.GetLaserficheUser(SessionTokenParameters parameters)
at Laserfiche.LicenseManager.LFSecurityTokenService.GenerateSecurityToken(SessionTokenParameters tokenParams, Dictionary`2 claims)
at Laserfiche.LicenseManager.LFSecurityTokenService.IssueToken(String body, Nullable`1 port, WindowsIdentity winID)

0 0

replied on January 20, 2021

Hi Chris,

This was also discussed here - https://answers.laserfiche.com/questions/171850/Event-Log-Error-24-in-LFDS-Server

Hope this helps point you in the right direction!

0 0

View 5 previous replies

replied on January 20, 2021

I have auditing enabled for SSO events and nothing in the logs shows "IsFailureEvent": true.

0 0

replied on January 20, 2021

Interesting, does it happen during certain events (like the AD sync) or just randomly throughout the day?

0 0

replied on January 20, 2021 • Show version history

Its throughout the day every 30 second's, is there anymore detailed logging I could enable?

1 0

replied on January 20, 2021

If you see this error repeatedly on an exact schedule, this could mean some automated process or end application is trying to log in to LFDS and failing due to using an outdated account or password or something.

What version of LFDS are you using? On recent versions you can check in the Audit Configuration tab on the LFDS site that "Sign In Failure" is being audited under the "Authentication events" section. After ensuring that is the case, if your license includes Audit Reporting you can search for events like so:

If you'd prefer to check in the audit logs on disk, make sure you search for both

"IsFailureEvent":true

and

"IsFailureEvent": true

to account for any changes in formatting.

1 0

replied on January 20, 2021

Laserfiche Directory Server Version 10.4.2.10, I don't have the authentication audit event type. I'm not seeing any of the IsFailureEvent: True, with both types of formatting. If it we're my service account failing login it would be locked via AD. Would it be possible Import Agent/Workflow causing this?

0 0

replied on January 20, 2021

What is the version of your Laserfiche Server? Do you see any login errors in the Workflow logs (in the WF Admin Console)?

1 0

replied on January 20, 2021 • Show version history

10.4.1 - Laserfiche Server and no failed logins from workflow logs.

0 0

replied on January 20, 2021

Did you check the Subscriber error log too (or looked at the Subscriber Trace to make sure none of the repository tabs show a yellow warning sign)? Do you have multiple Workflow Servers?

Import Agent should similarly complain about login errors in its event log if it is at fault.

That being said, I would also recommend upgrading the Laserfiche Server to 10.4.3 or higher. In version 10.4.1, the server incorrectly calls LFDS when you attempt to log in with a repository user (like "WFUser$") and that login fails.

1 0

Question

Question

Laserfiche.LicenseManager.InvalidUsernamePasswordException

Replies

Sign in to reply to this post.