We use Windows Authentication on our server.
I have a few users who left the company then came back and were given back their original user names.
When they access our company gallery they can't authenticate. When I look at the user in the admin utility I get the following error:
Unknown error. IdentityNotMappedException RequestID: ********************
It seems their SID is not being translated back to an NT user. I am wondering if this is due to some caching inside of the Mongo database.
I was hoping to delete the user and have them go to the gallery like it was their first time. This way it would clear out any issues in the Mongo. Unfortunately that doesn't seem to be an option in the Alteryx Server Admin utility.
If I were to query the users collection, remove the record for the affected user and overwrite the collection would this solve effectively delete the user?
Anyone else experienced this error and know how to get access for users in this scenario?
Solved! Go to Solution.
I've experienced a similar problem with returning employees. Basically, their usernames (samAccountNames) don't change within AD, but their SIDs do. The solution has always been to edit their existing record within the MongoDB to replace the existing SID with their new value. If you're not comfortable with the MongoDB, you'll want to engage Alteryx Support so they can walk you through this.
We are facing a similar issue only when users no longer exist in AD. I dont think updating MongoDB directly is safe solution. Any luck with Alteryx Support ?
Error Message : Unknown error. IdentityNotMappedException RequestID: **
This is our solution for this. If you are using Robo3T or compass, it's much easier when you can find and edit user sid using GUI. This solution is for command line interface:
User can get the SID value by run this command in cmd: whoami /user -> send to Admin before the change
Admin Login controller node VM
Open Alteryx System Settings and click next four times. Copy the Password and paste in notepad (Not Admin Password, just Password)
To connect to the database you needed to move to D:\Program Files\Alteryx\bin and then ran the following:
mongo -u user -p PASTE_PASSWORD -host localhost:27018 AlteryxGallery
Run below command:
db.getCollection('users').find({"Email" : "First.Last@cibc.com"}).pretty()
If found the user, go to next command. If not, check the email: Use exact user email display in outlook with capital letters
db.users.update({"Email": "First.Last@company.com"}, {$set:{"WindowsIdentity.Sid": "$NEW_SID_VALUE"}})
You should see this result
You can get user again using the first command to verify the new SID.
Then run exit
User | Count |
---|---|
5 | |
1 | |
1 | |
1 | |
1 |