Category Archives: Troubleshooting

FIM, System.DirectoryServices and a memory leak

It all started with a slow synchronisation.  Further inspection yielded several elements to the solution that strayed from recommended practice.  One aspect that was definitely playing a part in the slow synchronisation was several uniqueness checks against Active Directory Domain … Continue reading

Posted in FIM, Programming, Troubleshooting | Tagged , , , , , , , , | 6 Comments

MSIS7613: The signing certificate of the relying party trust is not unique across all relying party trusts in AD FS 2.0 configuration

Scenario You are attempting to add a relying party (RP) trust to your Active Directory Federation Services (AD FS) 2.0 federation service (FS) and you get the following error: Textually: An error occurred during an attempt to access the AD … Continue reading

Posted in AD FS, Troubleshooting | Tagged , , , , , , | 2 Comments

To install FIM portal, the setup needs to run under SharePoint Farm administrator account with at least Open permission that allows users to open a Web site, list, or folder in order to access items inside that container

Scenario When attempting to install or uninstall Forefront Identity Manager 2010 R2 (FIM) you receive the following error: Textually: To install FIM portal, the setup needs to run under SharePoint Farm administrator account with at least Open permission that allows … Continue reading

Posted in FIM, FIM 2010 R2, SharePoint, Troubleshooting | Tagged , , , , , , | 3 Comments

FIM SSPR password reset fails with error PWReset Activity could not connect to the directory

Two primary reasons for the Forefront Identity Manager 2010 (FIM) or Forefront Identity Manager 2010 R2 Self Service Password Reset (SSPR) password reset action workflow (WF) failing to successfully reset a password after a user has successfully authenticated via the … Continue reading

Posted in FIM, Self Service Password Reset, Troubleshooting | Tagged , , , , , , , , , | 1 Comment

PWReset Activity could not connect to the directory #2

This post covers one of two reasons that the FIM Service fails to reset a password and throws the error PWReset Activity could not connect to the directory.  The other issue is described here. A user of Forefront Identity Manager … Continue reading

Posted in FIM, Self Service Password Reset, Troubleshooting | Tagged , , , , , , , , , | 2 Comments

AD FS 329: The certificate that is identified by thumbprint ‘<thumbprint>’ could not be decrypted using the keys for X.509 certificate private key sharing

Scenario The Active Directory Federation Services (AD FS) 2.x service ADFSSRV will not start.  Event ID 329 is logged in the AD FS 2.0/Admin event log.  The pertinent text from event 329 is as follows: Description:The certificate that is identified … Continue reading

Posted in AD FS, Troubleshooting | Tagged , , , , , | 7 Comments

FIM R2 Portal and SharePoint 2010

As I’m sure many of you know the Forefront Identity Manager 2010 R2 (FIM R2) portal can be deployed on either Windows SharePoint Services (WSS) 3.0 or SharePoint 2010 Foundation.  What I didn’t immediately realise –and I’m yet to actually … Continue reading

Posted in FIM 2010 R2, SharePoint, Troubleshooting | Tagged , , , , | 1 Comment

Stay Disconnector validation error: msExchRecipientTypeDetails of user is no longer available

Scenario You are configuring the GAL MA and you receive the following error when you click Next on the Configure Connector Filter wizard page. Textually, the error is: Stay Disconnector validation error: ‘msExchRecipientTypeDetails’ of ‘user’ is no longer available. Issue … Continue reading

Posted in FIM, FIM 2010, FIM 2010 R2, Troubleshooting | Tagged , , , , , , , , , , | Leave a comment

Troubleshooting the FIM 2010 R2 Password Registration and Reset Portals

While developing multi-language SSPR, i.e. different sets of users configured to invoke a different AuthN WF with a different QA Gate configuration based on a “primary language” or “preferred language”, I managed to revoke the ability for my non-administrative lab … Continue reading

Posted in FIM, FIM 2010 R2, Self Service Password Reset, Troubleshooting | Tagged , , , , , , , , , , | 1 Comment

Failure when making a web service call when running Start-FIMReportingInitialSync.ps1

You invoke the script Start-FIMReportingInitialSync.ps1 and get the generic Failure when making web service call error from Import-FIMConfig.  The error itself is “The web service client has encountered the following class of error: SystemConstraint”.  The additional text details state: “The … Continue reading

Posted in FIM, FIM 2010 R2, Troubleshooting | Tagged , , , , , , , , | 1 Comment