Try our conversational search powered by Generative AI!

authentication fails with windows 2012 domain controller

Vote:
 

Hi, 

We are two domain controllers, one on windows 2008 (DC1) and other is on widows 2012 (DC3). When user authenticates using windows authetication, if he gets kerberos ticket from DC1 then he can access our intranet (episever cms 6 R2 ) site. But he gets from DC3, he can't get access intranet site, it is crashing with following stack trace.

[IdentityNotMappedException: Some or all identity references could not be translated.] System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess) +309 System.Security.Principal.SecurityIdentifier.Translate(Type targetType) +125 EPiServer.Security.WindowsMembershipProvider.GroupNamesFromIdentity(WindowsIdentity identity, String[] deletePrefix) +310 EPiServer.Security.WindowsRoleProvider.GetRolesForUser(String username) +137 EPiServer.Security.MultiplexingRoleProvider.GetRolesForUser(String username) +64 System.Web.Security.RolePrincipal.IsInRole(String role) +242 EPiServer.Security.WindowsAdministratorsRole.IsInVirtualRole(IPrincipal principal, Object context) +42 EPiServer.Security.VirtualRolePrincipal.IsInVirtualRole(String role, SecurityEntityType type) +170 EPiServer.Security.VirtualRolePrincipal.IsInRole(String role, SecurityEntityType type) +343 EPiServer.Security.WindowsAdministratorsRole.IsInVirtualRole(IPrincipal principal, Object context) +42 EPiServer.Security.VirtualRolePrincipal.IsInVirtualRole(String role, SecurityEntityType type) +170 EPiServer.Security.VirtualRolePrincipal.IsInRole(String role, SecurityEntityType type) +343

 

Any help is appreciated !

 

Thanks.

#80046
Jan 14, 2014 11:06
Vote:
 

Same kind of problem here. After upgrading domain controllers, my development machine can no longer run the intranet solution (CMS 6 R2 @ Win XP). 

Any solutions yet ?

#82971
Mar 24, 2014 10:01
Vote:
 

Sounds like the bug below, contact EPiServer Developer Support, I believe there is a hotfix for this.

Bug #98886: Authentication against a Windows 2012 domain controller using Kerberos does not work

#83958
Mar 31, 2014 9:44
Vote:
 

We have the same issue on some of our sites that are running on Windows 2008 (EPi 6 R2) after the dc:s has been uppdated to run on 2012.

Can't find the bugg i the buglist, any solutions?

#139256
Edited, Sep 28, 2015 15:38
This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.