google Cloud Directory Sync Error

[wellscs]

I have just been left with GCDS, all new to me. I am getting the error below and and the sync stopped working yesterday.

Any help gratefully received

 

User retrieval summary:

Unexpected and non-recoverable exception caught while attempting to synchronize:

java.util.concurrent.ExecutionException: com.google.usersyncapp.sync.FullFillWorker$FillFailureException: java.lang.RuntimeException: java.lang.RuntimeException: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

 

{

 

"code" : 400,

 

"errors" : [ {

 

"domain" : "global",

 

"location" : "maxResults",

 

"locationType" : "parameter",

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]",

 

"reason" : "invalidParameter"

 

} ],

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

}

at java.util.concurrent.FutureTask.report(Unknown Source)

 

at java.util.concurrent.FutureTask.get(Unknown Source)

 

at com.google.usersyncapp.sync.SynchronizationPluginGroup.executeFullFill(SynchronizationPluginGroup.java:99)

 

at com.google.usersyncapp.sync.agent.FullSyncAgent.fullFill(FullSyncAgent.java:529)

 

at com.google.usersyncapp.sync.agent.FullSyncAgent.call(FullSyncAgent.java:144)

 

at com.google.usersyncapp.ui.page.general.AbstractSyncWorker.doInBackground(AbstractSyncWorker.java:72)

 

at com.google.usersyncapp.ui.page.general.AbstractSyncWorker.doInBackground(AbstractSyncWorker.java:33)

 

at javax.swing.SwingWorker$1.call(Unknown Source)

 

at java.util.concurrent.FutureTask.run(Unknown Source)

 

at javax.swing.SwingWorker.run(Unknown Source)

 

at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)

 

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

 

at java.lang.Thread.run(Unknown Source)

 

Caused by: com.google.usersyncapp.sync.FullFillWorker$FillFailureException: java.lang.RuntimeException: java.lang.RuntimeException: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

 

{

 

"code" : 400,

 

"errors" : [ {

 

"domain" : "global",

 

"location" : "maxResults",

 

"locationType" : "parameter",

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]",

 

"reason" : "invalidParameter"

 

} ],

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

}

 

at com.google.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:69)

 

at com.google.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:23)

 

at java.util.concurrent.FutureTask.run(Unknown Source)

 

... 3 more

 

Caused by: java.lang.RuntimeException: java.lang.RuntimeException: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

 

{

 

"code" : 400,

 

"errors" : [ {

 

"domain" : "global",

 

"location" : "maxResults",

 

"locationType" : "parameter",

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]",

 

"reason" : "invalidParameter"

 

} ],

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

}

 

at com.google.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:288)

 

at com.google.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:55)

 

... 5 more

 

Caused by: java.lang.RuntimeException: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

 

{

 

"code" : 400,

 

"errors" : [ {

 

"domain" : "global",

 

"location" : "maxResults",

 

"locationType" : "parameter",

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]",

 

"reason" : "invalidParameter"

 

} ],

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

}

 

at com.google.usersyncapp.plugin.google.GooglePlugin.doFulfill(GooglePlugin.java:339)

 

at com.google.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:280)

 

... 6 more

 

Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request

 

{

 

"code" : 400,

 

"errors" : [ {

 

"domain" : "global",

 

"location" : "maxResults",

 

"locationType" : "parameter",

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]",

 

"reason" : "invalidParameter"

 

} ],

 

"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

}

 

at com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:146)

 

at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:113)

 

at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:40)

 

at com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:321)

 

at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1065)

 

at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:419)

 

at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:352)

 

at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:469)

 

at com.google.usersyncapp.plugin.google.ServiceProxy$1.call(ServiceProxy.java:2604)

 

at com.google.usersyncapp.util.RetryImpl.execute(RetryImpl.java:92)

 

at com.google.usersyncapp.plugin.google.ServiceProxy.executeCall(ServiceProxy.java:2533)

 

at com.google.usersyncapp.plugin.google.ServiceProxy.retrieveGroups(ServiceProxy.java:1574)

 

at com.google.usersyncapp.plugin.google.ServiceProxy.retrieveAndPreprocessAllGroupNames(ServiceProxy.java:1539)

 

at com.google.usersyncapp.plugin.google.GoogleFulfill.doFulfillGroups(GoogleFulfill.java:439)

 

at com.google.usersyncapp.plugin.google.GooglePlugin.doFulfill(GooglePlugin.java:317)

[flyinghaggis]

Oddly, we're having similar issues today with the sync failing? We've upgraded several servers and has the sync disabled until today so I'd assumed it was an issue at our end?

 

If you're also experiencing the problem I'm wondering if the fault might be at Google's side though and it's just bad timing that we've re-enabled it today and found it's failing?

[Guest Guest]

What are you syncing? Have you made any changes recently?

[wellscs]

Oddly, we're having similar issues today with the sync failing? We've upgraded several servers and has the sync disabled until today so I'd assumed it was an issue at our end?

 

If you're also experiencing the problem I'm wondering if the fault might be at Google's side though and it's just bad timing that we've re-enabled it today and found it's failing?

 

It is a problem at Google, I contacted Google support

 

I sent them my xml file, they amended it and it is now working

[flyinghaggis]

It is a problem at Google, I contacted Google support

 

I sent them my xml file, they amended it and it is now working

 

That's handy to know! We'll maybe give them a call.

 

Do you know what they modified in the XML file that fixed it?

[wellscs]

G Suite Support, Nikolay:I edited your .xml file so it can work now. Can you please send me your email address so I can send you the .xml file?

 

what was wrong?

 

G Suite Support, Nikolay: your .xml file is correct. I just added 200 so it can work. We are experiencing a small issue with GCDS and adding this line helps.

Edited August 6, 2019 by wellscs

[Arthur]

Do you know what they modified in the XML file that fixed it?

I had the same issue. They had me add the line highlighted in red below to my XML file.

 

  
   
     
       YourDomain
       apps
       OAUTH2
       [color="#FF0000"]200[/color]

[bcoskun]

Hello Sir! Thanks a lot for your time to add this comment in here. Worked on me!

[RandomTech]

I had the same issue. They had me add the line highlighted in red below to my XML file.

 

  
   
     
       YourDomain
       apps
       OAUTH2
       [color=#FF0000]200[/color]

 

 

Exactly what helped me! Thanks!

[Voodoo]

Yup, while waiting for Google support for the same problem, we tried that "maxResults" setting. This worked for us too.

[dmj]

oddly, I've done two syncs today and both have been fine. Wonder if I'm hitting a different datacenter or something?

I don't have the 200

[Arthur]

I don't have the 200

It's not there by default.

 

Do you have GCDS syncing any AD groups (or a small number of groups)? Perhaps that's why you're not getting the error?

 

Edit. After speaking to Google earlier, I received the following email which implies the error mentioned in the first post is specifically to do with syncing groups.

 

After reviewing the information you provided, we believe that you may be affected by a known issue. Here are some details about the issue:

 

Description:

We are investigating a potential issue with GCDS failing to retrieve and sync groups from G Suite.

 

We will provide more information by Monday, 2019-08-05 16:00 US/Pacific.

 

How to diagnose:

GCDS Sync logs will show:

java.lang.RuntimeException: java.lang.RuntimeException:
com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request ...
"message" : "Invalid value '500'. Values must be within the range: [1, 200]"

 

--

GCDS will fail to retrieve and sync groups.

Edited August 6, 2019 by Arthur

[dmj]

It's not there by default.

 

Do you have GCDS syncing any AD groups? Perhaps that's why you're not getting the error?

 

That's it. I'm not syncing any groups, just OU's

[Matzen]

Hi man, where you find that .xml file? This the xml of the settings? If yes I can't found that lines

 

Thanks!

[Matzen]

I found it, thank you guys! I spended all my morning to try to fix it! It works!

[Arthur]

where you find that .xml file?

It will be the config XML file that's loaded by GCDS.

 

If yes I can't found that lines

Do you get anything if you search for com.google.usersyncapp.plugin.google.GooglePlugin in your XML file?

 

Edit. Just refreshed the page and saw your other post.

Edited August 6, 2019 by Arthur

[Voidheim]

I literally registered here just to thank you for this post. I ran into this issue mid yesterday (almost exactly after a colleague added a group to GADS). I spent most of yesterday looking at it the wrong way. My coworker wanted to surprise me this morning by solving it, and when he first found this thread, his exact words (he says) were "I went mining for silver, and found gold."

 

Normally in our field, when you can't find something with your Googlefu, it means you have f'd up somewhere. Not very often is the issue just so new, you have to wait for the next morning to find a solution.

 

Thank you Wellscs and Arthur!

[ogghi]

Hi, I just started to encounter the same issue!

In my xml file there is no such entry...any hint?

Thanks

David

[ctarbet]

This was the solution offered to me by Google Support:

 

Can you please manually add the tag into the XML configuration file as in the following example:

 

..... other options ....

200 <-- Add this tag

Edited August 6, 2019 by ctarbet

[ogghi]

Thanks, at least sync works now. Just need to finish re-doing all settings, it's a good moment to do so

Many many thanks Sir!

[MooseHeaddy]

This had been ruining my morning and I was DREADING calling them.

You're a rock-star for posting this.

[MooseHeaddy]

I literally registered here just to thank you for this post. I ran into this issue mid yesterday (almost exactly after a colleague added a group to GADS). I spent most of yesterday looking at it the wrong way. My coworker wanted to surprise me this morning by solving it, and when he first found this thread, his exact words (he says) were "I went mining for silver, and found gold."

 

Normally in our field, when you can't find something with your Googlefu, it means you have f'd up somewhere. Not very often is the issue just so new, you have to wait for the next morning to find a solution.

 

Thank you Wellscs and Arthur!

 

 

HAHA Same here.

[callworth]

Seriously thank you! That saved my bacon.

[LassePasse]

This saved me as well, syncing one AD to 2 different GSuite domain, both stopped working yesterday, added 200 to both xml files and now everything is good!

[Arthur]

Update from Google on the GCDS issue.

 

This issue is actually caused by an Google API change. GCDS is impacted by that change.

 

The fix has been made and is waiting testing and production rollout. The engineering team estimate the fix will be live by the end of this week.