Manually Synching Security Groups does not work, when Passwordstate Web Server is not joined to domain.

[support]

Issue:

If you try to manually sync a Security Group in Passwordstate, and you see the following error:

 

 

The error above is telling you to look in  the Administration -> Error Console and you will find the message below:

 

Build No '9535' - Error Code = The user name or password is incorrect. , StackTrace = at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_AdsObject() at System.DirectoryServices.PropertyValueCollection.PopulateList() at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) at System.DirectoryServices.PropertyCollection.get_Item(String propertyName) at System.DirectoryServices.AccountManagement.PrincipalContext.DoLDAPDirectoryInitNoContainer() at System.DirectoryServices.AccountManagement.PrincipalContext.DoDomainInit() at System.DirectoryServices.AccountManagement.PrincipalContext.Initialize() at System.DirectoryServices.AccountManagement.PrincipalContext.get_QueryCtx() at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(PrincipalContext context, Type principalType, Nullable`1 identityType, String identityValue, DateTime refDate) at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithType(PrincipalContext context, Type principalType, String identityValue) at System.DirectoryServices.AccountManagement.GroupPrincipal.FindByIdentity(PrincipalContext context, String identityValue) at uRM=.9x4=.pBk=(Int32 Eh8=, String Ex8=, String FB8=, String FR8=, Boolean Fh8=, String Fx8=)

 

Specifically it says that the Username and Password is incorrect, and this is referring to the Privilege Account you has assigned to your domain.  But if you check the password for the Privileged Account, it is correct.  We've had a customer advise that either setting a domain controller on their domain as per the screenshot below fixes this issue, or you can change your Privileged Account to be in the format of user@domain.com instead of domain\user

 

 

Your Security Groups should now start sync'ing correctly.  If they still don't please log a support call to Click Studios.

 

Regards,

Support.