Not Able to start manageengine adselfservice windows service

April 1, 2017, 12:45 am

≫ Next: Permission denied

≪ Previous: Re : Comodo Positive SSL Wildcard Cert

Hi,

I am not able to start adselfservice windows service after upgrading to build 5327.

↧

Permission denied

March 31, 2017, 1:23 pm

≫ Next: How-To-Enroll.html - URL not working.

≪ Previous: Not Able to start manageengine adselfservice windows service

while user registration, self update, password change permission denied message is coming.

↧

How-To-Enroll.html - URL not working.

April 3, 2017, 9:47 am

≫ Next: Very slow to return response on password resets

≪ Previous: Permission denied

Working through our test group with ADSelfService Plus, we've found that the link to the 'how-to-enroll.html' file isn't functioning. I'm trying to figure out why that is. All the services are up and running and functional. Someone who goes and enrolls can work all the functions we expect them to, but when someone tries to access the link for the user-guides information, we get an error in the browser:

Is this possibly a permissions issue for the directories that the user-guide and perhaps admin-guides are in?

--Michael Hackett

↧

Very slow to return response on password resets

April 3, 2017, 9:35 am

≫ Next: Re : Not Able to start manageengine adselfservice windows service

≪ Previous: How-To-Enroll.html - URL not working.

Hi all,

I am currently in the middle of setting up a POC of this product, we are hoping it will solve our issues with syncing up Azure AD and on prem domain passwords without paying the stupid Azure AD premium costs.

So... i've got it set up. O365 linked and full AD domain linked. It works...

BUT...

It is incredibly slow to return a response when resetting passwords. Performance is totally fine with every other screen, but when attempting to reset a PW, it takes several minutes to eventually respond. This occurs for errors (eg. password incorrect) as well as successful changes.

It happens on both mobile and desktop.

Very confused as to what could be the issue. I've got it set up in AWS, so i increased the instance size (granted it was a little tight before), but it's made no difference at all. Looking at the box itself it doesn't seem to be struggling.

Any ideas, has anyone seen this before?

Thanks

↧

Re : Not Able to start manageengine adselfservice windows service

April 3, 2017, 7:05 pm

≫ Next: Re : Permission denied

≪ Previous: Very slow to return response on password resets

Hi Rakesh,

Are you able to start it as a console through desktop icon? If you able to start it as a console but not as service, please try installing the service or try updating the service account credentials to start the service.

Regards,

ADSelfService Plus Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

Email: support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : Permission denied

April 3, 2017, 7:14 pm

≫ Next: Re : How-To-Enroll.html - URL not working.

≪ Previous: Re : Not Able to start manageengine adselfservice windows service

Hi Praveen,

Are you referring to the login page where it throws 'permission denied' message? If so, please login as 'admin' to ADSelfService Plus, navigate to 'Configuration' tab --> Policy Configuration --> Edit the policy --> Select OUs/Groups button to select the OU/Group to which the user belongs to then save policy to test it.

Regards,

ADSelfService Plus Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

Email: support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : How-To-Enroll.html - URL not working.

April 3, 2017, 7:20 pm

≫ Next: Re : Not Able to start manageengine adselfservice windows service

≪ Previous: Re : Permission denied

Hi Michael,

Yes, it should be a permission issue to access the folder or the URL used to access the help guide is not valid.

Regards,

ADSelfService Plus Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

Email: support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : Not Able to start manageengine adselfservice windows service

April 3, 2017, 8:56 pm

≫ Next: How can you tell which Self Service template was used?

≪ Previous: Re : How-To-Enroll.html - URL not working.

Thanks for replying . It is resolved by adselfservice support team.

↧

How can you tell which Self Service template was used?

April 4, 2017, 6:57 am

≫ Next: Remove registration request .

≪ Previous: Re : Not Able to start manageengine adselfservice windows service

Hi,

We have some tickets which are logged and seem to go to the wrong department. Upon inspection we can see these tickets are templates (they have the picture of the hand holding the file in the top left corner)

Is there a way to tell which template was used so we can check the settings and amend?

Thanks,

Charlotte

↧

Remove registration request .

April 4, 2017, 7:26 am

≫ Next: Re : Remove registration request .

≪ Previous: How can you tell which Self Service template was used?

Hi,

We want to remove the option that request the user to register , when an user tries to reset his password a message is displayed with this message :

"You are required to subscribe for Verification Code. Please login (if you remember your password) and subscribe. Contact your admin in case you don't remember your password."

How can we remove that the users don't need to register to reset or change the password ?

Thanks

↧

Re : Remove registration request .

April 4, 2017, 8:51 pm

≫ Next: Re : Very slow to return response on password resets

≪ Previous: Remove registration request .

Hi Dennis,

User registration/enrollment is must to reset a password and unlock an account as we need to authenticate the users. However, to change a password registration is not required as the users can log in and authenticate themselves to the portal with their current password and change it.

Regards,

ADSelfService Plus Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

Email: support@adselfserviceplus.com

Self Service Password Management Solution

↧

Re : Very slow to return response on password resets

April 4, 2017, 9:02 pm

≫ Next: GINA screen customization

≪ Previous: Re : Remove registration request .

Hi Harrtron,

Would you please uncheck the password sync for Office 365/Azure AD in ADSelfService Plus and test it only for on-prem AD to check the performance and also the vice versa.

Regards,

ADSelfService Plus Team

Toll Free: +1-888-720-9500

Direct: +1-408-916-9890

Email: support@adselfserviceplus.com

Self Service Password Management Solution

↧

GINA screen customization

April 5, 2017, 3:14 am

≫ Next: populate drop- down lists from AD

≪ Previous: Re : Very slow to return response on password resets

Hi.

I'd like to modify GINA screen, as it is in my opinion the worst looking part of the interface, and to match better with organization colors and give users better experience of course.

While I have basic html skills I thought it would be faster to ask for location of the files and what's possible & safe to change, having in mind different Windows versions.

I'll go through all edits:

- change background of the window and the header;

- change header border color and thickness;

- change header logo and its margins;

- change size of two main buttons, font, icons and pictures behind; change layout perhaps?;

- control window size;

- hide window scrollbar and navbar if possible.

Could you prepare in-detail instructions for each step?

Also, are visual changes possible for mobile version of the website?

Regards

↧

populate drop- down lists from AD

April 6, 2017, 5:32 am

≫ Next: Re : Change language select menu position

≪ Previous: GINA screen customization

Is it possible to populate drop-down lists from AD?

↧

Re : Change language select menu position

April 6, 2017, 9:27 am

≫ Next: Tomcat 6 and Java

≪ Previous: populate drop- down lists from AD

any ideas?

↧

Tomcat 6 and Java

April 6, 2017, 1:54 pm

≫ Next: Re : ADSelfService Plus Console shortcut doesn't work after 5327 update

≪ Previous: Re : Change language select menu position

Our Information Security team has brought forward a few concerns and would like to know what are Manage Engines plans to address the following:

Tomcat 6

End Of Life 12/31/2016 (http://tomcat.apache.org/tomcat-60-eol.html)
Numerous high-severity vulnerabilities publicly documented.

High — Java 1.7.0_55

Limited Encryption Algorithm Selection in Java 7 especially when considering forward compatibility
End of Life September 2017 (http://www.oracle.com/technetwork/java/eol-135779.html#Java6-end-public-updates).
All versions of Java 1.7, including the final update (7u80), have high and critical vulnerabilities. If possible, the latest version of Java 8 must be used.

Thank you,

↧

Re : ADSelfService Plus Console shortcut doesn't work after 5327 update

April 7, 2017, 2:27 am

≫ Next: Re : Getting notification about update in progress, but not updating

≪ Previous: Tomcat 6 and Java

This didn't help. It gave this error:

C:\ManageEngine\ADSelfService Plus\bin>"Fix+StartMenu+Icons.bat"
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

C:\Users\ADMINI~1.ESF\AppData\Local\Temp\1\31408.vbs(11, 1) WshShortcut.Save: Un
able to save shortcut "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ADSe
lfService Plus\Start ADSelfService Plus.lnk".

Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

C:\Users\ADMINI~1.ESF\AppData\Local\Temp\1\19244.vbs(11, 1) WshShortcut.Save: Un
able to save shortcut "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ADSe
lfService Plus\Stop ADSelfService Plus.lnk".

Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

↧

Re : Getting notification about update in progress, but not updating

April 7, 2017, 2:30 am

≫ Next: Did you know - How to configure Single Sign-On in ADSelfService Plus? (Part 4 - Salesforce)

≪ Previous: Re : ADSelfService Plus Console shortcut doesn't work after 5327 update

I have already applied the latest SP patch. So i'm not sure if you need something still.

↧

Did you know - How to configure Single Sign-On in ADSelfService Plus? (Part 4 - Salesforce)

April 7, 2017, 9:17 am

≫ Next: ADSS will not start. Event log says it has no exception data. Help!

≪ Previous: Re : Getting notification about update in progress, but not updating

Salesforce is considered to be a behemoth when it comes to cloud apps which help you boost your sales. Most companies, worldwide, depend on their marquee product Salesforce CRM to manage all their customers, partners, and prospects information from a single console. Wouldn't it be great if your sales team could have a hassle-free login experience to all the business critical apps in Salesforce software suite? The ADSelfService Plus' single sign-on(SSO) feature does exactly that.

Upon configuring SSO in ADSelfService Plus for Salesforce, end users could easily access all their salesforce apps with just their Active Directory or Windows credentials. This week let me take you through the steps to configure SSO for Salesforce.

Single Sign-On for Salesforce:

Step 1: Configuring ADSelfService Plus

Login to ADSelfService Plus web console with the administrator credentials.
Go to Configuration --> Self-Service --> Password Synchronizer/ Single Sign-On link.
Click on the Salesforce link and this will redirect to the configuration page.
In the Modules drop-down list, select Single Sign-On.
Input the SAML Redirect URL. (https://<sub-domain>.salesforce.com)
Enter the Salesforce domain name.
Select the Self-Service Policies from the drop-down list.
Click Download SSO certificate button in the top right-hand side of the page.
In the SSO/SAML details pop-up box that appears, copy the first three fields (Login URL, Logout URL, and Error/Help URL) and click on the Download SSO Certificate link to download the identity verification certificate.
Click Save.

Step 2: Configuring Salesforce

Login to Salesforce with the administrator credentials.
Click on the Administer tab.
Navigate to Security Controls option and select Setup Single Sign-On.
In the SAML Single Sign-On Settings page that opens up, input your name and API name.
Enter the issuer URL. (http://<ADSSP-server-url >/iamapps/ssologin)
Upload the verification certificate downloaded in step 1.
Set the SAML identity location to the NameIdentifier element.
Paste the values of the three fields that was copied from ADSelfService Plus web-console in step 1 to the Identity Provider Login URL, Identity Provider Logout URL, and Custom Error URL fields. (Refer Image)
Click Save.

ADSelfService Plus also allows users to access their Salesforce accounts from its web console, with just a click.

↧

ADSS will not start. Event log says it has no exception data. Help!

April 7, 2017, 3:20 pm

≫ Next: Re : populate drop- down lists from AD

≪ Previous: Did you know - How to configure Single Sign-On in ADSelfService Plus? (Part 4 - Salesforce)

Thanks in advance for any and all advice.

---------------

Here is the system log:

The description for Event ID 7024 from source Service Control Manager cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

ManageEngine ADSelfService Plus

%%4294967295

The locale specific resource for the desired message is not present

(that weird error code happens to be 2^32. Hmm.)

---------------

When I attempt to manually start the service, a Services error dialog says "contact the service vendor and refer to service-specific error code -1.

----------------

I found this java exception in the log file named "serverOut_today's-date.txt".

I REDACTED stuff. If you need it follow up and I'll send directly.

[17:09:54:082]|[04-07-2017]|[StartLog]|[INFO]|[21]: trayIconProps {DefaultMenuItem=Status, ApplicationName=ADSSP, Menu=[{Id=Status, DisplayName=ADSelfService Plus Status, RunProcess=ShowADSSPStatus}, {Id=StartClient, DisplayName=Start Client, RunProcess=StartADSSPClient}, {Id=ShutDownServer, DisplayName=Shut Down Server, RunProcess=ShutdownADSSP}], EnableIcon=../images/systray_enabled.png, DisableIcon=../images/systray_disabled.png, ToolTipText=ManageEngine ADSelfService Plus, MainProcess=StartADSSP, DefaultRunProcess=ShowADSSPStatus}|

[17:09:54:301]|[04-07-2017]|[StartLog]|[INFO]|[21]: ===================================================|

[17:09:54:301]|[04-07-2017]|[StartLog]|[INFO]|[21]: ===================================================|

[17:09:54:442]|[04-07-2017]|[com.adventnet.mfw.Starter]|[INFO]|[24]: **********************************************|

[17:09:55:043]|[04-07-2017]|[com.adventnet.persistence.PersistenceInitializer]|[INFO]|[24]: Template replaced url :: jdbc:jtds:sqlserver://REDACTED:12345;DatabaseName=REDACTED;Domain=REDACTED;useNTLMv2=REDACTED|

[17:09:55:230]|[04-07-2017]|[SYSERR]|[INFO]|[24]: Caused by: org.jboss.util.NestedSQLException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.); - nested throwable: (org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.))|

[17:09:55:230]|[04-07-2017]|[SYSERR]|[INFO]|[24]: Caused by: org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.)|

java.lang.Exception: Exception while initializing DB.

at com.adventnet.persistence.PersistenceInitializer.initialize(PersistenceInitializer.java:328)

at com.adventnet.mfw.Server.startServer(Server.java:139)

at com.adventnet.mfw.Starter.start(Starter.java:340)

at com.adventnet.mfw.Starter.main(Starter.java:415)

at com.adventnet.sym.adsm.start.StartADSM$2.run(StartADSM.java:265)

Caused by: org.jboss.util.NestedSQLException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.); - nested throwable: (org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.))

at org.jboss.resource.adapter.jdbc.WrapperDataSource.getConnection(WrapperDataSource.java:106)

at com.adventnet.persistence.PersistenceInitializer.startDB(PersistenceInitializer.java:853)

at com.adventnet.persistence.PersistenceInitializer.startDB(PersistenceInitializer.java:736)

at com.adventnet.persistence.PersistenceInitializer.initializeDB(PersistenceInitializer.java:410)

at com.adventnet.persistence.PersistenceInitializer.initialize(PersistenceInitializer.java:324)

... 4 more

Caused by: org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.)

at org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory.createManagedConnection(LocalManagedConnectionFactory.java:168)

at org.jboss.resource.connectionmanager.InternalManagedConnectionPool.createConnectionEventListener(InternalManagedConnectionPool.java:508)

at org.jboss.resource.connectionmanager.InternalManagedConnectionPool.getConnection(InternalManagedConnectionPool.java:207)

at org.jboss.resource.connectionmanager.JBossManagedConnectionPool$BasePool.getConnection(JBossManagedConnectionPool.java:534)

at org.jboss.resource.connectionmanager.BaseConnectionManager2.getManagedConnection(BaseConnectionManager2.java:444)

at org.jboss.resource.connectionmanager.TxConnectionManager.getManagedConnection(TxConnectionManager.java:298)

at org.jboss.resource.connectionmanager.BaseConnectionManager2.allocateConnection(BaseConnectionManager2.java:496)

at com.adventnet.ds.DefaultDataSourcePlugIn$ConnectionManagerProxy.allocateConnection(DefaultDataSourcePlugIn.java:170)

at org.jboss.resource.adapter.jdbc.WrapperDataSource.getConnection(WrapperDataSource.java:102)

... 8 more

Caused by: java.sql.SQLException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.

at net.sourceforge.jtds.jdbc.SQLDiagnostic.addDiagnostic(SQLDiagnostic.java:372)

at net.sourceforge.jtds.jdbc.TdsCore.tdsErrorToken(TdsCore.java:2988)

at net.sourceforge.jtds.jdbc.TdsCore.nextToken(TdsCore.java:2421)

at net.sourceforge.jtds.jdbc.TdsCore.login(TdsCore.java:649)

at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:371)

at net.sourceforge.jtds.jdbc.Driver.connect(Driver.java:184)

at org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory.createManagedConnection(LocalManagedConnectionFactory.java:158)

... 16 more

↧