You are viewing limited content. For full access, please sign in.

Question

Question

LFS received an unrecognized or unexpected error from LFDS. Service Call=LookupNestedGroupMembership

Laserfiche Directory Server Version 12 Self-Hosted
Updated December 21, 2025
asked on December 17, 2025 • Show version history

Just been doing some browsing in the Laserfiche Server event viewer logs today and saw the below error logged several times.

Log Name:      Laserfiche-ContentRepository-Service/Admin
Source:        Laserfiche-ContentRepository-Service
Date:          12/17/2025 9:28:08 AM
Event ID:      144
Task Category: None
Level:         Error
Keywords:      
User:          XXXX
Computer:      XXXX
Description:
LFS received an unrecognized or unexpected error from LFDS. Service Call=LookupNestedGroupMembership(database=XXXX,providerName=,sidOrName=XXXX,token=94h10bPi551o2d7i8M7Qymge/YOfDbLF/hDfAu8P4Uo=); LFDS error code=0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Laserfiche-ContentRepository-Service" Guid="{82FC23FE-4B0A-435C-82E6-01C7077098AF}" />
    <EventID>144</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2025-12-17T16:28:08.194066300Z" />
    <EventRecordID>5092625</EventRecordID>
    <Correlation />
    <Execution ProcessID="3264" ThreadID="5820" />
    <Channel>Laserfiche-ContentRepository-Service/Admin</Channel>
    <Computer>XXXX</Computer>
    <Security UserID="XXXX" />
  </System>
  <EventData>
    <Data Name="ServiceCalled">LookupNestedGroupMembership(database=XXXX,providerName=,sidOrName=XXXX,token=94h10bPi551o2d7i8M7Qymge/YOfDbLF/hDfAu8P4Uo=)</Data>
    <Data Name="LFDSErrorCode">0</Data>
  </EventData>
</Event>

Looking in the LFDS event viewer logs I found the below error at the same time.

Log Name:      Laserfiche-Directory Service-Server/Operational
Source:        Laserfiche-Directory Service-Server
Date:          12/17/2025 9:28:08 AM
Event ID:      28
Task Category: None
Level:         Error
Keywords:      
User:          XXXX
Computer:      XXXX
Description:
ExtendedErrorCode: 8335
ExtendedErrorMessage: 0000208F: LdapErr: DSID-0C090D4B, comment: Error processing name, data 0, v4f7c
Extra Information: System.DirectoryServices.DirectoryServicesCOMException (0x80072032): An invalid dn syntax has been specified.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.RefreshCache(String[] propertyNames)
   at Laserfiche.LicenseManager.Utils.QueryADGroupMembership(String dn, IdentityProviderSpecs specs, Dictionary`2 groups)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsForAD(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sid)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsFromDirectory(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sidOrName)
   at Laserfiche.LicenseManager.LicenseManagerService.LookupNestedGroupMembership(LicenseManagerServiceCallArgs _args)
   at Laserfiche.LicenseManager.LicenseManagerService.DispatchFunction(LicenseManagerServiceCall func, LicenseManagerServiceCallArgs args)

Type:
System.DirectoryServices.DirectoryServicesCOMException

Stack Trace:
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.RefreshCache(String[] propertyNames)
   at Laserfiche.LicenseManager.Utils.QueryADGroupMembership(String dn, IdentityProviderSpecs specs, Dictionary`2 groups)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsForAD(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sid)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsFromDirectory(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sidOrName)
   at Laserfiche.LicenseManager.LicenseManagerService.LookupNestedGroupMembership(LicenseManagerServiceCallArgs _args)
   at Laserfiche.LicenseManager.LicenseManagerService.DispatchFunction(LicenseManagerServiceCall func, LicenseManagerServiceCallArgs args)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Laserfiche-Directory Service-Server" Guid="{8f289ef0-f5cb-445b-87ab-2d62c3d1aa63}" />
    <EventID>28</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000000</Keywords>
    <TimeCreated SystemTime="2025-12-17T16:28:08.1889454Z" />
    <EventRecordID>842520</EventRecordID>
    <Correlation />
    <Execution ProcessID="3520" ThreadID="6872" />
    <Channel>Laserfiche-Directory Service-Server/Operational</Channel>
    <Computer>XXXX</Computer>
    <Security UserID="XXXX" />
  </System>
  <EventData>
    <Data Name="ExtendedErrorCode">8335</Data>
    <Data Name="ExtendedErrorMessage">0000208F: LdapErr: DSID-0C090D4B, comment: Error processing name, data 0, v4f7c</Data>
    <Data Name="Stack Trace">System.DirectoryServices.DirectoryServicesCOMException (0x80072032): An invalid dn syntax has been specified.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.RefreshCache(String[] propertyNames)
   at Laserfiche.LicenseManager.Utils.QueryADGroupMembership(String dn, IdentityProviderSpecs specs, Dictionary`2 groups)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsForAD(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sid)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsFromDirectory(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sidOrName)
   at Laserfiche.LicenseManager.LicenseManagerService.LookupNestedGroupMembership(LicenseManagerServiceCallArgs _args)
   at Laserfiche.LicenseManager.LicenseManagerService.DispatchFunction(LicenseManagerServiceCall func, LicenseManagerServiceCallArgs args)

Type:
System.DirectoryServices.DirectoryServicesCOMException

Stack Trace:
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.RefreshCache(String[] propertyNames)
   at Laserfiche.LicenseManager.Utils.QueryADGroupMembership(String dn, IdentityProviderSpecs specs, Dictionary`2 groups)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsForAD(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sid)
   at Laserfiche.LicenseManager.LicenseManagerService.GetGroupsFromDirectory(LicenseCacheEntry lce, IdentityProviderSpecs specs, String sidOrName)
   at Laserfiche.LicenseManager.LicenseManagerService.LookupNestedGroupMembership(LicenseManagerServiceCallArgs _args)
   at Laserfiche.LicenseManager.LicenseManagerService.DispatchFunction(LicenseManagerServiceCall func, LicenseManagerServiceCallArgs args)</Data>
  </EventData>
</Event>

Any idea how to fix this error?

Running LFDS 12.0.2510.261 and Server 12.0.2.343.

0 0

Replies

replied on December 21, 2025

The Callstack indicates there are LDAP issues in LFDS when query AD user info.

 

Possible cause: The specified service account for the AD IdP doesn't have the permission to access the user.

 

You can reproduce this error by "view the effective rights of the AD user in Laserfiche Admin console or Windows Client."

Things you can try to troubleshoot this error:

1. Stop "LicenseManagerWCF" service, and Run LFDS.exe in console (run as administrator, make sure the user has permission to execute LDAP queries)

2. Set service account for the ActiveDirectory IdP in LFDS.

3. Set Host for the ActiveDirectory IdP in LFDS, specify a Domain Controller. If the IdP is the default IdP you will unable to change the Host in UI, you need to set that in SQL. "UPDATE identity_providers SET host = 'domaincontrollerURL' WHERE id = 1", (normally you can get the domaincontrollerURL by "nslookup -q=SRV _gc._tcp.domain.name", (replace domain.name with your real domain name))

 

Trying the steps, and check which one will have the error gone.

If #1 works, try to update the account running the "LicenseManagerWCF".

If #2 or #3 works, just keep the changes.

1 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...