PAM Account Scans not running

PAM Account Scans not running - Log Errors

Published 5 years ago

Setting up a new instance of DPS for testing (latest version), PAM setup works fine and the provider checks out. The Account Scanning seems to be stuck at "Queued" the only error we seem to find is that every few seconds this is generated.

InvalidOperationException - Encryption config cannot be null. Installation folder: D:\Devolutions\DPS

at Devolutions.Server.SettingManager.cdccc2c1e92d2177363d924664b230e31(String c6312221cf47e4484eb0da752f7b20b45)

--
Eric Sakariasen
Connetic IT Support

All Comments (5)

David Savard

Published 5 years ago

Good morning,

Can you validate if the account running the Devolutions Scheduler Service has the read access on the file encryption.config, it should be in the folder App_Data from the installation folder?

Regards,
David

David Savard

ejs

Published 5 years ago

David,

That totally resolved the initial issue, the file was created with no-inherited permissions strangely.

We are still not working though, the scan says "Error" and in the log I have the following error:

ArgumentException - The supplied arguments cannot be null.

at System.DirectoryServices.AccountManagement.AuthenticablePrincipal..ctor(PrincipalContext context)
at System.DirectoryServices.AccountManagement.UserPrincipal..ctor(PrincipalContext context)
at Devolutions.RemoteDesktopManager.Managers.DirectoryServicesManager.GetUsersDomain(DirectoryServicesQueryParameter parameters)
at Devolutions.Server.NetworkDiscovery.Jobs.ActiveDirectoryDiscoveryJob.Run(List`1 inventoryObjects)
at Devolutions.Server.NetworkDiscovery.Jobs.SequentialScan.c03f9c3a76ad53a8685bc6b414c552a98.cc234693a1049e332dfc176809d35b518(List`1 c4d9327e4390bd18c6312eb2c2ee94c1e, Scan c3c52eaff7cf03934e02176c9f0e01f66)
at System.Linq.Enumerable.Aggregate[TSource,TAccumulate](IEnumerable`1 source, TAccumulate seed, Func`3 func)
at Devolutions.Server.NetworkDiscovery.Jobs.SequentialScan.Run(List`1 hosts)
at Devolutions.Server.NetworkDiscovery.NetworkScanner.c36872be3e057d6c4939867b69fffd723(InventoryScan cae199f955039116938c989ab1a7ebb18)
at Devolutions.Server.NetworkDiscovery.NetworkScanner.c0f166dc245fc46117d85999c511c0aae(InventoryScan c036912a5922129ec27b6de42273c7d53)

--
Eric Sakariasen
Connetic IT Support

David Savard

Published 5 years ago

Hi,

I was able to reproduce the error, when the scan could not connect to the domain,
Can you try to do a "Test Connection" on the provider to make sure it can connect to the domain?

Regards,

David,

David Savard

ejs

Published 5 years ago

David,

Provider test is successful. If I blank the "domain name" in the scan config there are no errors but also no results.

Thank you.

--
Eric Sakariasen
Connetic IT Support

Erica Poirier

Published 5 years ago

Hello,

That is a strange behaviour that the test works but you still get an error and no results in the scan config. Is this provider account as enough privileges on your domain to scan and update accounts?

Following a discussion with David, it would be easier for us to troubleshoot your issue in a remote session. Please send an email to ticket@devolutions.net with a link to this topic and we will send you the instruction to book the session.

Best regards,

Érica Poirier