AD problems

[grahams]

Hi,

 

I have been using Hap version 8 with no problems for a couple of years but the other day it stopped working properly.

So I have now installed version 10.5 and have a problem with it using AD groups.

Firstly on the homepage domain admins should see the Hap config tile, I don't, I don’t also see the booking, helpdesk etc either.

When adding drives in the my files page, if I add say a pupil group to a share it doesn’t show when the pupil logs in.

If I add all users to a share it works.

I have it installed on a Windows 2012 server using IIS 8. It could have been an windows update that has messed things up.

 

Has anyone had similar?

 

Regards,

 

Graham

[nickbro]

Check the hapConfig.xml file, it may be that some of the details in that file are in correct.

 

You can also use the api call /hap/api/ad/roles/%username% to get a list of roles/groups which HAP can see for that user.

[grahams]

It looks like I have the same problems as in this thread http://www.edugeek.net/forums/home-access-plus/141532-hap-my-files-2.html

 

My settings are correct

 

Here is my api call

 

{"FirstName":null,"SiteName":null,"Token1":null,"Token2":"System.DirectoryServices.DirectoryServicesCOMException (0x8007052E): The user name or password is incorrect.\u000d\u000a\u000d\u000a at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)\u000d\u000a at System.DirectoryServices.DirectoryEntry.Bind()\u000d\u000a at System.DirectoryServices.DirectoryEntry.get_AdsObject()\u000d\u000a at System.DirectoryServices.PropertyValueCollection.PopulateList()\u000d\u000a at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)\u000d\u000a at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)\u000d\u000a at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer()\u000d\u000a at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit()\u000d\u000a at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize()\u000d\u000a at System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx()\u000d\u000a at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate)\u000d\u000a at System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(PrincipalContext context, String identityValue)\u000d\u000a at HAP.AD.User.get_UserP()\u000d\u000a at HAP.AD.User.Authenticate(String username, String password)\u000d\u000a at HAP.AD.API.UserGET(String username, String password)","Token2Name":null,"Username":null,"isValid":false}

[grahams]

Getting some errors on Windows event viewer also

 

Event code: 4005

Event message: Forms authentication failed for the request. Reason: The ticket supplied was invalid.

Event time: 23/06/2015 12:30:54

Event time (UTC): 23/06/2015 11:30:54

Event ID: bde9e7e5ee4640c69ab6fc763b298a61

Event sequence: 4474

Event occurrence: 183

Event detail code: 50201

 

Application information:

Application domain: /LM/W3SVC/1/ROOT/HAP-2-130794549926950049

Trust level: Full

Application Virtual Path: /HAP

Application Path: C:\inetpub\wwwroot\HAP\

Machine name: CWCOM-DS-003

 

Process information:

Process ID: 8772

Process name: w3wp.exe

Account name: IIS APPPOOL\HAP

 

Request information:

Request URL: https://10.25.209.36:443/HAP/api/test/?1435059054588

Request path: /HAP/api/test/

User host address: 10.25.209.36

User:

Is authenticated: False

Authentication Type:

Thread account name: IIS APPPOOL\HAP

 

Name to authenticate:

 

Custom event details:

[nickbro]

Ok, you need to use the administrator user, looks like the password isn't correct in the hapConfig.

 

Follow the steps on this page to set HAP+ into firstrun mode and adjust the admin password and save: Home Access Plus+ - Documentation

[grahams]

Thanks for your help, my password was correct.

 

I have managed to get it working by enabling ASP.NET Impersonation in authentication on IIS.

 

I looked on one of the older installation version videos on youtube and it was on so I tried it and it seemed to fix it.

 

Regards,

 

Graham

[nickbro]

You shouldn't need that enabled unless you are using Windows Authentication instead of Forms authentication.

[grahams]

Forms authentication is enabled.

 

Regards,

 

Graham

[nickbro]

You shouldn't need impersonation, that was phased out for everything but the Windows Authentication version back in v4.