Invalid DN syntax in ActiveDirectoryRoleProvider

morten.sorby@capgemini.com

Vote:

Hi all,
I'm struggeling with getting the ActiveDirectoryRoleProvider to work at a particular site.
The webserver is using windows authentication and the ActiveDirectoryMembershipProvider too.

I can seach up users and but as soon as I try to do anything that involved groups, like click on the "Administer groups" in admin mode. I get the error as specified below. Anyone got any ideas to what could be wrong?

Regards,
Morten

An invalid dn syntax has been specified.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.DirectoryServices.DirectoryServicesCOMException: An invalid dn syntax has been specified.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:


[DirectoryServicesCOMException (0x80072032): An invalid dn syntax has been specified.
]
   System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +377678
   System.DirectoryServices.DirectoryEntry.Bind() +36
   System.DirectoryServices.DirectoryEntry.get_AdsObject() +31
   System.DirectoryServices.PropertyCollection.Contains(String propertyName) +24
   EPiServer.Security.AdsiDataFactory.CreateDirectoryDataFromDirectoryEntry(DirectoryEntry entry) +171
   EPiServer.Security.AdsiDataFactory.GetEntry(String distinguishedName) +141
   EPiServer.Security.ActiveDirectoryRoleProvider.GetAllRoles() +144
   System.Web.Security.Roles.GetAllRoles() +39
   EPiServer.Security.RoleProviderUtility.GetAllRolesWithProviders() +461
   EPiServer.UI.Admin.AdminGroup.GetAllRolesAndBind() +38
   EPiServer.UI.Admin.AdminGroup.OnLoad(EventArgs e) +263
   System.Web.UI.Control.LoadRecursive() +50
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +627

#34577

Nov 10, 2009 10:27

morten.sorby@capgemini.com

Vote:

This blog posting from Johan just totally made my day :-)
http://labs.episerver.com/en/Blogs/Johano/Dates/2008/9/Some-ActiveDirectoryRoleProvider-issues/

I'm thinking that this should be part of the released provider.

Cheers,
Morten

#34622

Nov 10, 2009 19:42

Vote:

HI Morten!

Sorry for the late reply, been home with sick kids for a few days...
Glad it worked out ok for you!

/johan

#34632

Nov 11, 2009 10:10

morten.sorby@capgemini.com

Vote:

Hope they are feeling better!

The error took me offguard a little bit as I had it all tested out in our test environment...
Then in production..boooom...
I suspect Exchange is the culprit with the schema changes it does to the AD.

//Morten

#34634

Nov 11, 2009 10:15

Aziz Khakulov

Vote:

Since Johan's article isn't available, what was the solution to this problem? I'm currently having the same problem, the same error message and call stack.

#181225

Aug 14, 2017 13:58