Get Inspire insights from former attendees in our AMA discussion thread on Inspire Buzz. ACEs and other community members are on call all week to answer!
community Alteryx IO Alteryx.com
alteryx Community
Search
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Close
Free Trial

Alteryx Server Knowledge Base

Definitive answers from Server experts.

Gallery Errors when using Windows Authentication

SophiaF
Alteryx
Alteryx
Created

on ‎04-22-2021 06:25 AM - edited on ‎05-16-2023 07:15 AM by Alteryx

Issue

On Alteryx Server environments prior to version 2021.2, users may see one or more of the following errors or behaviors in Alteryx gallery if they are using Windows Authentication: 

  •  Admin gets an error trying to access the Jobs page / Scheduled workflows

Error loading schedules.
An error was encountered when attempting to load your scheduled workflows.
image.pngimage.png
  • Error found in gallery logs: 
...GET,/gallery/api/scheduler/,500,xx,Exception caught by ErrorHandler and marshaled to client,"System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.->
  • Example of full error: 
2021-02-11 18:25:33.612689,ERROR,54,ErrorHandler,HandleError,4da109385ad74aaf8f16022ba6285fb1,6022f8a6c3de8e0c9c791e09,10.10.9.157,PSD-SRV-01,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36",GET,/gallery/api/scheduler/,500,22,Exception caught by ErrorHandler and marshaled to client,"System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.->   at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)->   at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)->   at Alteryx.Server.Common.Utility.ActiveDirectory.GetForestGroupsSids(Int32 adCacheTimeout, String sid)->   at Alteryx.Server.Models.WinAuthPermissionsSource.GetGroupServerRole()->   at Alteryx.Server.Models.WinAuthPermissionsSource.get_Role()->   at Alteryx.Server.Models.PermissionSource.CanExecute(IPermissionedApp app, String version, Boolean doAuthCheck)->   at Alteryx.Server.Models.Presenters.SchedulerPresenter.MapScheduleToScheduleView(Schedule schedule)->   at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext()->   at System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)->   at System.Linq.Enumerable.ToList[TSource](IEnumerable`1 source)->   at Alteryx.Server.Models.Presenters.SchedulerPresenter.GetPagedSchedules(Int32 page, Int32 pageSize, String sortField, Boolean sortDesc, Boolean all, Boolean ignorePermissions)->   at Alteryx.Server.Api.Services.SchedulerService.GetPagedSchedules(Int32 page, Int32 pageSize, String sortField, Boolean sortDesc, Boolean all)->   at SyncInvokeGetPagedSchedules(Object , Object[] , Object[] )->   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)->   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)"
  • Errors when users try to view Schedules
Error loading schedules.
An error was encountered when attempting to load your scheduled workflows.
image.pngimage.png​ ​​​​​​
  • Error found in gallery logs: 
...GET,/gallery/api/scheduler/,500,xxx,Exception caught by ErrorHandler and marshaled to client,"System.InvalidOperationException: Sequence contains no matching element->
  • Example of full error: 
2021-02-04 20:14:24.287316,INFO,53,AuthorizationMessageInspector,BeforeSendReply,c732178a921d461bac7c0ecaeb66254e,5a180a3ac537030e64e09429,172.28.74.126,AVZAPPNLAM0062N,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.56",GET,/gallery/api/scheduler/,500,231,CloudResponse,
2021-02-04 20:14:24.287316,ERROR,54,ErrorHandler,HandleError,c732178a921d461bac7c0ecaeb66254e,5a180a3ac537030e64e09429,172.28.74.126,AVZAPPNLAM0062N,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.56",GET,/gallery/api/scheduler/,500,231,Exception caught by ErrorHandler and marshaled to client,"System.InvalidOperationException: Sequence contains no matching element->   at System.Linq.Enumerable.Single[TSource](IEnumerable`1 source, Func`2 predicate)->   at Alteryx.Server.Models.Presenters.SchedulerPresenter.MapScheduleToScheduleView(Schedule schedule)->   at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext()->   at System.Collections.Generic.List`1..ctor(IEnumerable`1 collection)->   at System.Linq.Enumerable.ToList[TSource](IEnumerable`1 source)->   at Alteryx.Server.Models.Presenters.SchedulerPresenter.GetPagedSchedules(Int32 page, Int32 pageSize, String sortField, Boolean sortDesc, Boolean all, Boolean ignorePermissions)->   at Alteryx.Server.Api.Services.SchedulerService.GetPagedSchedules(Int32 page, Int32 pageSize, String sortField, Boolean sortDesc, Boolean all)->   at SyncInvokeGetPagedSchedules(Object , Object[] , Object[] )->   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)->   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)"
  • Admin gets an error trying to access a user account page (of a deleted user)
Unknown error: IdentityNotMappedException
image.pngimage.png
  • Error found in gallery logs: 
...GET,/gallery/api/usergroups/6022fbdcc3de8e0c9c791f52/user/,500,x,Exception caught by ErrorHandler and marshaled to client,"System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.->
  • Example of full error: 
2021-02-11 18:29:11.815221,ERROR,55,ErrorHandler,HandleError,10c2fd39e0b14ca0acf676792744ac06,6022f8a6c3de8e0c9c791e09,10.10.9.157,PSD-SRV-01,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36",GET,/gallery/api/usergroups/6022fbdcc3de8e0c9c791f52/user/,500,4,Exception caught by ErrorHandler and marshaled to client,"System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.->   at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)->   at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)->   at Alteryx.Server.Common.Utility.ActiveDirectory.GetForestGroupsSids(Int32 adCacheTimeout, String sid)->   at Alteryx.Server.Models.Presenters.WinAuthUserGroupPresenter.GetUserGroupsOfUser(String userId)->   at SyncInvokeGetUserGroupsOfUser(Object , Object[] , Object[] )->   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)->   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)"
  • ​​Error when Users Authenticate with Windows Group Roles
Access Denied
You do not have permission to use the Gallery based on your Windows credentials. If you think this may be in error, try
restarting your browser and, if prompted, provide the correct credentials.
image.pngimage.png
  • Error found in gallery logs: 
GET,/gallery/api/event/alerts/,,-1,Error getting group for user,"System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException: The server is not operational.->->Name: ""DOMAINCONTROLLERNAME""-> ---> System.Runtime.InteropServices.COMException: The server is not operational.
  • Example of full error: 
2022-06-14 19:16:48.188256,WARN,16,AlteryxServerHost,NLogLogger,AddDirectGroupsToList,4ce1fd1c4c7c46828978e737609e4afe,6291010bd312d01e0d5f5e66,10.226.98.149,TD02AS98X3-A00,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 Edg/102.0.1245.33",GET,/gallery/api/event/alerts/,,-1,Error getting group for user,"System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException: The server is not operational.->->Name: ""[DOMAINCONTROLLERNAME]""-> ---> System.Runtime.InteropServices.COMException: The server is not operational.->->   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)->   at System.DirectoryServices.DirectoryEntry.Bind()->   at System.DirectoryServices.DirectoryEntry.get_AdsObject()->   at System.DirectoryServices.PropertyValueCollection.PopulateList()->   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)->   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)->   at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)->   --- End of inner exception stack trace ---->   at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)->   at System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.ExpandWellKnownDN(WellKnownDN dn)->   at System.DirectoryServices.ActiveDirectory.DomainController.get_Domain()->   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOf(Principal p)->   at System.DirectoryServices.AccountManagement.Principal.GetGroupsHelper()->   at Alteryx.Server.Common.Utility.ActiveDirectory.AddDirectGroupsToList(Principal user, List`1 groups)"
  • Collections load indefinitely
image.pngimage.png
  • Error found in gallery logs: 
GET,/gallery/api/event/alerts/,,-1,Error getting group for user,"System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException: The server is not operational.->->Name: ""DOMAINCONTROLLERNAME""-> ---> System.Runtime.InteropServices.COMException: The server is not operational.
  • Example of full error: 
2022-06-14 19:16:48.188256,WARN,16,AlteryxServerHost,NLogLogger,AddDirectGroupsToList,4ce1fd1c4c7c46828978e737609e4afe,6291010bd312d01e0d5f5e66,10.226.98.149,TD02AS98X3-A00,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 Edg/102.0.1245.33",GET,/gallery/api/event/alerts/,,-1,Error getting group for user,"System.DirectoryServices.ActiveDirectory.ActiveDirectoryServerDownException: The server is not operational.->->Name: ""[DOMAINCONTROLLERNAME]""-> ---> System.Runtime.InteropServices.COMException: The server is not operational.->->   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)->   at System.DirectoryServices.DirectoryEntry.Bind()->   at System.DirectoryServices.DirectoryEntry.get_AdsObject()->   at System.DirectoryServices.PropertyValueCollection.PopulateList()->   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)->   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)->   at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)->   --- End of inner exception stack trace ---->   at System.DirectoryServices.ActiveDirectory.PropertyManager.GetPropertyValue(DirectoryContext context, DirectoryEntry directoryEntry, String propertyName)->   at System.DirectoryServices.ActiveDirectory.DirectoryEntryManager.ExpandWellKnownDN(WellKnownDN dn)->   at System.DirectoryServices.ActiveDirectory.DomainController.get_Domain()->   at System.DirectoryServices.AccountManagement.ADStoreCtx.GetGroupsMemberOf(Principal p)->   at System.DirectoryServices.AccountManagement.Principal.GetGroupsHelper()->   at Alteryx.Server.Common.Utility.ActiveDirectory.AddDirectGroupsToList(Principal user, List`1 groups)"
  • Errors searching on the Gallery (using the main search bar - possibly results that may include workflows owned by users that have been deleted)
    • Error found in gallery logs: 
...GET,/gallery/api/search/,500,1,Exception caught by ErrorHandler and marshaled to client,"System.NullReferenceException: Object reference not set to an instance of an object.->
  • Example of full error: 
2021-02-02 09:52:48.585283,INFO,9,AuthorizationMessageInspector,AfterReceiveRequest,b7ed8b1d56d34541b26915e72d281f12,unauthenticated,172.27.88.73,AVZAPPNLAM0062N,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.56",GET,/gallery/api/search/,,-1,ServerRequest,
2021-02-02 09:52:48.585283,INFO,9,AuthorizationMessageInspector,BeforeSendReply,b7ed8b1d56d34541b26915e72d281f12,unauthenticated,172.27.88.73,AVZAPPNLAM0062N,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.56",GET,/gallery/api/search/,500,1,CloudResponse,
2021-02-02 09:52:48.585283,ERROR,86,ErrorHandler,HandleError,b7ed8b1d56d34541b26915e72d281f12,unauthenticated,172.27.88.73,AVZAPPNLAM0062N,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36 Edg/88.0.705.56",GET,/gallery/api/search/,500,1,Exception caught by ErrorHandler and marshaled to client,"System.NullReferenceException: Object reference not set to an instance of an object.->   at Alteryx.Server.Models.Presenters.SearchPresenter.GetGlobalInsightFilter(User loggedInUser)->   at Alteryx.Server.Models.Presenters.SearchPresenter.GetFilters(User loggedInUser, IPermissionSource permissions)->   at Alteryx.Server.Models.Presenters.SearchPresenter.GetAllSearchResults(User loggedInUser, IPermissionSource permissions, String search, String filter, Int32 offset, Int32 limit)->   at Alteryx.Server.Api.Services.SearchService.GetAllSearchResults(String search, String filter, Int32 offset, Int32 limit)->   at SyncInvokeGetAllSearchResults(Object , Object[] , Object[] )->   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)->   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)->   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)"
  • Schedule validator fails - this would show as schedules being disabled
    • Error found in logs
ScheduleOperations,ValidateAndDisableAllSchedules,,,,SERVER1,,,,,,Unknown exception occurred.,"System.NullReferenceException: Object reference not set to an instance of an object.->
  • Example of full error: 
2021-02-09 18:00:53.603534,ERROR,28,ScheduleOperations,ValidateAndDisableAllSchedules,,,,SERVER1,,,,,,Unknown exception occurred.,"System.NullReferenceException: Object reference not set to an instance of an object.->   at Alteryx.Server.Models.Operations.ScheduleOperations.<>c.<ValidateSchedules>b__17_7(<>f__AnonymousType1`2 r)->   at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext()->   at System.Linq.Enumerable.<DistinctIterator>d__64`1.MoveNext()->   at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()->   at MongoDB.Driver.SingleItemAsArrayOperatorFilterDefinition`2.Render(IBsonSerializer`1 documentSerializer, IBsonSerializerRegistry serializerRegistry)->   at MongoDB.Driver.MongoCollectionImpl`1.CreateFindOperation[TProjection](FilterDefinition`1 filter, FindOptions`2 options)->   at MongoDB.Driver.MongoCollectionImpl`1.FindSync[TProjection](IClientSessionHandle session, FilterDefinition`1 filter, FindOptions`2 options, CancellationToken cancellationToken)->   at MongoDB.Driver.MongoCollectionImpl`1.<>c__DisplayClass41_0`1.<FindSync>b__0(IClientSessionHandle session)->   at MongoDB.Driver.MongoCollectionImpl`1.UsingImplicitSession[TResult](Func`2 func, CancellationToken cancellationToken)->   at MongoDB.Driver.MongoCollectionImpl`1.FindSync[TProjection](FilterDefinition`1 filter, FindOptions`2 options, CancellationToken cancellationToken)->   at MongoDB.Driver.FindFluent`2.ToCursor(CancellationToken cancellationToken)->   at MongoDB.Driver.IAsyncCursorSourceExtensions.ToList[TDocument](IAsyncCursorSource`1 source, CancellationToken cancellationToken)->   at Alteryx.Server.Persistence.Adapters.MongoDbAdapter`1.GetByIds(IEnumerable`1 ids)->   at Alteryx.Server.Models.Operations.ScheduleOperations.ValidateSchedules(List`1 schedules, Dictionary`2 scheduledAppsOverride)->   at Alteryx.Server.Models.Operations.ScheduleOperations.ValidateAndDisableAllSchedules()"

Environment

  • Alteryx Server
    • Version 2021.2 and earlier
  • Windows Authentication


Cause

This is due to a known defect (DE28641) where if a user is completely removed from Active Directory, the schedule view won't load for anyone in the subscription/studio (even for administrators) and the schedule check will not complete if it errors on any deleted user.

It appears that the root cause of the problem is our inability to query the Active Directory user(s) once it/they have been deleted from the system. This results in a situation where we cannot determine which roles to provide the user with and what access they have in a Windows Authentication environment. This then causes some of the validation processes to fail within the Schedules API as we attempt to determine if the user that owns the schedule has the proper access to allow them to schedule or otherwise run workflows in the environment at the time the page is loaded.

Resolution

DE28641 has been fixed as of the following releases. 
  • 2020.3.9 Stable Update
  • 2021.1.4 Stable Update
  • 2021.2+ (GA) 

Additional things to check:

  • SAM Throttling Issue
  • Corrupt Schedules (can't view schedules)
    • Even if the SAM throttling issue is addressed (which may prevent schedules from continuing to be disabled) and upgrade to fix the defect (which will also help prevent schedules from being disabled due to failed auth checks), corrupt schedules may still be causing the "Error failed to load schedules" issue, please contact Alteryx Support with assistance in removing the corrupted schedules.
  • Domain Controller Connectivity Issues
    • This is another cause for collections loading indefinitely or users unable to authenticate into the Gallery that are utilizing AD groups. This is accompanied by a NetLogon Event ID 5719 in the Windows Event Logs.
Important: You may need to address all four issues - the defect, the SAM throttling issue, corrupt schedules and domain connectivity - to get the server in a stable state.

Additional Information

Comments
TomDiroff
Alteryx
Alteryx
‎06-08-2022 08:22 AM

Hi @SophiaF .. do you have a similar solution for these errors when SAML authentication is being used? 

 

Thank you

 

Tom

0 Likes
londonhanson
Alteryx
Alteryx
‎08-10-2022 10:35 AM

Hi @TomDiroff, Sophia helped me write this article:

Error: "Page Not Found" when logging into Gallery- SAML Authentication

 

Is this what you're looking for?

 

Best,

 

London

0 Likes