You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 18 Next »

Below you will find the causes, type of exceptions, and solutions that correspond to the following warning on UI / Exception in Logs:

  • We could not load/read data while processing OS objects. Please check the Activity logs of the server for the possible solutions to avoid this.

SID account

Cause

The SID account is not part of global group accounts or well-known group accounts

Solution

To change the account type, follow these steps:

  1. Programs
  2. Administrative Tools
  3. Active Directory Users and Computers

Active Directory account table

Cause

System error encountered when _LookupAccountSid() for given group SID is called.

Solution

The user is not present in that Active Directory or that Account table

SID Group

Type of exception

ERROR - unable to determine the location of the SID

Cause

Location of given groupSID is not found as this groupSID is not part of either Well-Known account group, Domain server group role or a Local server group.

Solution

GroupSID is missing from Active Directory

Group accounts

Type of exceptions

  • ERROR - group account object creation failed for
  • ERROR - enumeration of group failed for

Cause

Local account creation for group account object failed.

Solution

Check if the directory entry obtained from WInNT path is valid and has required permissions

Directory Entry

Type of exception

ERROR - group directory entry not found for

Cause

Directory Entry for the given WinNT path not available.

Solution

Please check if the directory exists at the given path. If the directory exists, please check if permissions allow the directory to be accessed.

Domain Controller

Type of exception

ERROR - failed to get domain object for

Cause

Failed to get name of the domain controller for the specified domain. If Domain is AD, failed to get DNS name for the domain. Domain name was to be returned as either flat name or a DNS name.

Solution

Possible error values: ERROR_INVALID_DOMAINNAME The format of the specified DomainName is invalid. ERROR_INVALID_FLAGS The Flags parameter contains conflicting or superfluous flags. ERROR_NOT_ENOUGH_MEMORY A memory allocation failure occurred. ERROR_NO_SUCH_DOMAIN No domain controller is available for the specified domain or the domain does not exist.

SID Group Directory

Type of exceptions

  • ERROR - failed to get domain object for
  • ERROR - group directory entry not found for

Causes

  • This can mean directory entry for the given group SID is not present or valid
  • Directory entry for the given groupSID WinNT path is not valid.

Solution

Check if the specified path is valid or has required permissions

Group Members

Type of exception

ERROR - domain group enumeration failed for

Cause

Retrieving of the directory members and their paths, of the group directory corresponding to the groupSID has failed.

Solution

Check if the retrieved group members and their paths are valid entries in the server.


LDAP Path

Type of exception

ERROR - no elements in the LDAP path

Cause

No elements present in the given path.

Solution

Check if the specified path is valid or has required permissions

Path Elements

Type of exception

ERROR - not valid number of elements in the path

Cause

This is logged when there are not enough elements in the path to extract domain from the path.

Solution

Check if the specified path is valid or has required permissions

Local Directory

Type of exception

ERROR - failed to get local directory entry

Cause

Local directory entry is not found.

Solution

Check if the specified path from which localDirectoryEntry is to be instantiated, is valid and has required permissions

Group Object Account

Type of exception

ERROR - account object creation failed

Cause

This error is logged when the group object account is tried to be created locally.

Solution

Check if the localDirectoryentry supplied to this method is valid or has required permissions

Domain

Type of exception

ERROR - failed to get domain, DN:

Cause

Failed to get Domain for specified object path

Solution

Check if the specified path is valid or has required permissions IS THIS A DOMAIN PROBLEM OR A PATH PROBLEM?

Directory

Type of exception

ERROR - FSP group directory entry not found for

Cause

Directory entry not found for provided Foreign Security Principal SID or FSPSID

Solution

Check if the specified path for Directory entry associated to this FSPSID is valid or has the required permissions.

SAM account

Type of exception

ERROR - failed to get SAM account name for the SID:

Cause

Failed to get SAM account name for the SID

Solution

Check if the DirectoryEntry from which the sid was obtained is valid or has required permissions

SID Objective Category

Type of exception

ERROR - failed to get object category for the SID

Cause

Failed to get object category for the SID.

Solution

Check if the DirectoryEntry from which the sid was obtained is valid or has required permissions

Directory Group Type

Type of exception

ERROR - failed to get group type

Cause

Failed to group type of the Directory Entry with Object class as group

Solution

Check if the DirectoryEntry obtained is valid or has required permissions

ADSI path

Type of exception

ERROR - failed to get adsi path

Cause

Failed to get adsi path from the given directory entry object

Solution

Check if the DirectoryEntry obtained is valid or has required permissions

Directory Entry

Type of exception

ERROR - exception raised when querying dir entry object

Cause

Exception to handle any other exception occurred while creating an account

Solution

Check if the DirectoryEntry obtained is valid or has required permissions

WinNT path

Type of exceptions

  • ERROR - failed to get dom dir entry
  • ERROR - failed to parse the member DN

Causes

  • Failed to get domain directory entry for given WinNT path
  • Error in parsing given WinNT Path

Solution

Check if the WinNT path obtained is valid or has required permissions


Group members

Type of exceptions

  • ERROR : failed to load <path> group members
  • ERROR : failed to read <path> AD group object

Causes

  • No Group members retrieved for the given groupSID
  • Group members cannot be retrieved for the given groupSID

Solution

Check if the given SID is a valid group SID. If not, one try changing the scope of the account through Programs -> Administrative Tools -> Active Directory Users and Computers


SID and SAM path

Type of exceptions

  • Failed to create account for File Access Rights.
  • Failed to create account for File Audit Rights.
  • Failed to create account for File Audit Settings.

Cause

  • Failed to create group account access rights for the given sid and sam path
  • Failed to create group account audit rights for the given sid and sam path
  • Failed to create group account audit settings for the given sid and sam path

Solution

Check if the given SID is a valid group SID. If not, one try changing the scope of the account through Programs -> Administrative Tools -> Active Directory Users and Computers. Check if the given path is valid and has required permissions




SQL Secure sees who has access to what and how permissions are granted in SQL Server.
IDERA | Products | Purchase | Support | Community | Resources | About Us | Legal
  • No labels