Random 'No LDAP Administrators were found"; requires starting service

[karmasponge (Simon Kennedy)]

Hi,

We have been seeing at random, maybe once a fortnight, an error page which prevents us from accessing Continua CI functionality until the ‘Continua CI Server’ service is restarted (See attached screenshot). Were currently running v1.8.1.451 but also occurred on previous versions.

In the event log we see these two events repeated over time until restart:

Event 1:

Error iterating through members of group ‘CN=ContinuaUsersGroup,CN=Users,DC=looknet,DC=looksoftware,DC=com’. Retrying. Message: Exception: COMException

Message: The server does not support the requested critical extension.

Stack Trace:    at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
   at System.DirectoryServices.AccountManagement.ADDNLinkedAttrSet.GetNextSearchResult()
   at System.DirectoryServices.AccountManagement.ADDNLinkedAttrSet.MoveNextMemberSearcher()
   at System.DirectoryServices.AccountManagement.ADDNLinkedAttrSet.MoveNext()
   at System.DirectoryServices.AccountManagement.FindResultEnumerator1.MoveNext()<br>&nbsp; &nbsp;at Continua.Membership.Ldap.LdapGroup.GetMembersWithInheritanceGroups(GroupPrincipal group, Boolean includeInheritedGroupName, Stack1 nestedGroups)

Event 2:

PrincipalOperationException  when checking membership for group ContinuaUsersGroup. This usually means that you have an unresolvable SID as a group member. It is recommended that you fix this problem as soon as possible by removing the SID from the group. The groups ‘’ and users ‘’ have been retrieved successfully from the list of group members

I’m assuming that this is an issue with Continua CI as we have not seen issues with other services that depend on our local ActiveDirectory installation.

This issue has not always occurred however and I believe that the issue may have started when the ActiveDirectory was migrated to Windows Server 2012 from an old Windows machine.

Would appreciate any info on how we could resolve this issue as its really annoying.

Thanks,

Simon. K

[Sparky (Dave Sparks)]

Hi Simon,

This error is occurring when enumerating the System.DirectoryServices function GroupPrincipal.GetMembers() using MoveNext(). Unfortunately it’s one of those generic Windows errors that means nothing to no-one. 

This old post GroupPrincipal.GetMembers() error: "The server does not support the requested critical extension is the only information I could find specific to this error. We are already using MoveNext instead of foreach. 

If you Continua CI service running on Windows Server 2008 R2 is may be worth installing this hotfix - although we are not actually searching for deleted objects so this may not be relevant.

As this is only happening intermittently, we’ll look into handling this error more gracefully - skipping updating an existing list of group members when this occurs. Expect an updated version the beginning of next week.

[karmasponge (Simon Kennedy)]

Thanks Dave,

I forgot to mention that were running on Windows Server 2012 DataCenter.

Look forward to the update,

Simon. K