Voltar
-
Título
Attempting to edit a domain connection in the PMAdmin site fails with the error: "Access denied. Make sure the specified account has the required permissions to connect to the domain." -
Descrição
Attempting to edit one or more domain connections in the PMAdmin site fails with the error message:
Access denied. Make sure the specified account has the required permissions to connect to the domain.
The Password Manager Event Viewer logs shows the following exception:
Exception: QPM.Common.Exceptions.SystemAuthorizationException: Exception of type 'QPM.Common.Exceptions.SystemAuthorizationException' was thrown.at QPM.Service.Modules.ADHelpers.ADHelper.FillDomainInfo(DirectoryInfo info, Boolean withExtendedInfo, DomainControllerInfo clientDC)at DynamicModule.ns.Wrapped_IADHelper_2f06567abc844341bb0d647195b236be.<FillDomainInfo_DelegateImplementation>__30(IMethodInvocation inputs, GetNextInterceptionBehaviorDelegate getNext) -
Causa
The domain NETBIOS name stored on the credential used to manage this domain is incorrect.
This issue is being tracked as Defect ID#: 303985.
-
Resolução
WORKAROUND
- As a local administrator, navigate to the C:\ProgramData\One Identity\Password Manager container on the Password Manager host
- Back up the existing shared.storage file to a safe location
- Edit the shared.storage file and add the correct NETBIOS name in the domain connection section for the problem domain.
For example:
<connection id="6be91550-13b6-4a5a-82c7-f0c04f80b913" type="Domain"><domain id="domain.local"><settings group="general"><setting name="aliasName" value="domain" /><setting name="accessAccountId" value="domain\svc-pm" /><setting name="forcedDCs"><forcedDCs><forcedDC type="Request" /><forcedDC type="Default" /></forcedDCs></setting><setting name="replication"><sites /></setting><setting name="replicationType" value="Other" /><setting name="upnSuffixes"><suffixes><suffix><![CDATA[domain.local]]></suffix></suffixes></setting></settings></domain></connection>If the correct NETBIOS name is unknown, check the Account tab on a user account in Active Directory Users and Computers.
- Save the modified shared.storage file in the same location
- Restart the Password Manager service
- Try to edit the domain connection again in the PMAdmin site.
STATUS
Waiting for a fix in a future release of Password Manager.