DPS error report by mail: SecurityTokenExpiredException
Hi,
I get a lot of emails daily from DPS containing:
The following error was received by user@domain.com
at 1-7-2020 12:59:27
Error:
SecurityTokenExpiredException - IDX10223: Lifetime validation failed. The token
is expired. ValidTo: '07/01/2020 10:31:41', Current time: '07/01/2020
10:59:27'. at Microsoft.IdentityModel.Tokens.Validators.ValidateLifetime(Nullable`1
notBefore, Nullable`1 expires, SecurityToken securityToken,
TokenValidationParameters validationParameters) at
System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateLifetime(Nullable`1
notBefore, Nullable`1 expires, JwtSecurityToken jwtToken,
TokenValidationParameters validationParameters) at
System.IdentityModel.Tokens.Jwt.JwtSecurityTokenHandler.ValidateTokenPayload(JwtSecurityToken
jwtToken, TokenValidationParameters validationParameters) at Devolutions.Server.TokenValidationHandler.c731d80e41144a8af371a23b0d39eaa11.MoveNext()
--- Login
Source:
Microsoft.IdentityModel.Tokens
Can I disable these email messages?
Kind regards,
Raymond
All Comments (5)
Hello,
What Devolutions Password Server version are you using?
You can disable the Email feature to not receive any email from DPS in Administration - Password Server Settings - Email on the DPS web interface.
https://helpserver.devolutions.net/webinterface_email.html
This error message is related to an expired token from the Office365 authentication.
Could you please verify the users who triggers these errors that their computer time is synchronized with the DPS machine time and ask them to clear their browser cache to see if this will help to get rid of these errors.
Best regards,
Érica Poirier
Hi Érica,
We use version 2020.2.7.0.
I sometimes get this message also for myself. I hink this morning I've got about 10-15 emails for different users. But in RDM itself, the situation recovers itself automatically.
The time is synced on my laptop. Clearing the cache did not change anything.
In RDM I did have no problems, only the email notifying of a 'problem' which autocorrected itself is a bit anoying.
For now I have disabled all emails in DPS.
Kind regards,
Raymond
Hello,
Thank you for the information.
Could you please compare the Token Valid Time parameter in Administration - Password Server Settings - Advanced if it's greater than the Azure token lifetime?
Having a shorter value than the Azure token could help as DPS will first check the Azure token and will trigger that error message as it's expired. Let me know if that will impact the number of SecurityTokenExpiredException - IDX10223: Lifetime validation failed errors in the DPS logs.
Best regards,
Érica Poirier
Hi Érika,
The token lifetime was set to 1 day. I'll increase it to 3 days, and check the logs.
Hello Raymond,
Thank you for the information. We will then wait for your feedback about that new configuration to know if that will help.
Best regards,
Érica Poirier