Skip to Content
author's profile photo Former Member
Former Member

Windows AD Issues

Hi,

I'm having an issue setting up Windows AD.

I have Crystal Server 2011 installed on Microsoft 2008 R2 server.

I orignally had it set up using my own AD account and was able to successfully add groups etc. However I went into change the credentials to the service account I had created and now I get the below error when I click Update.

I have also tried to disable AD and it just comes up with the below errors and doesn't disable it.

The Active Directory Authentication plugin failed to verify the administration credentials for the user "******\******". Please enter the user name as DomainName\UserName or UserName@DNS_DomainName, then try again. Invalid group name, cannot find group (S-1-5-21-1919025527-1093607947-357205929-20539).

Has anyone seen this before and how do you fix it?

Thanks,

Pamela

Add a comment
10|10000 characters needed characters exceeded

Related questions

3 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Apr 09, 2012 at 01:58 PM

    I assume you created a service account with the right permissions on the domain, as per the set up Admin guide. Also, looks like the AD group you added to your configuration has some issues...can you delete the group and re-add it within the Windows AD authentication settings?

    The format for user ID looks ok: domain\user

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Yes I have created a service account with the correct permission. However when I orignally setup AD I used another account. This worked fine however when I changed the account to the new service account and try to add a group and click update that's when it shows the message;

      The Active Directory Authentication plugin failed to verify the administration credentials for the user "******\******". Please enter the user name as DomainName\UserName or UserName@DNS_DomainName, then try again.

      I then try the old account and it still doesn't work.

      I have also deleted the group and re-created it and this does not fix the problem.

      Also I have tried to disable Windows AD and it does not allow me to do this either.

      Where are the setting stored for AD? Is it a config file or the database?

      Thanks

  • Posted on Apr 09, 2012 at 06:34 PM

    Hi Pamela,

    If you change it back to the original account, do the groups authenticate properly or do you still get the same error?

    If you get the same error, it's possible the group on the AD side might have been removed/changed, however BOE did not know about it until you had to click the 'Update' button in the CMC.

    I would suggest using the "Active Directory Users and Groups" snap-in (Start -> Run -> mmc) to compare the Windows AD groups that have been mapped into the CMC against the Windows AD Groups showing in the MMC. See if there are any differences or if all the groups still exist.

    Regards,

    Wallie

    Message was edited by: Wallie Cheng Additionally, run this query in QueryBuilder to get the group names in the CMS database. Once the output is displayed, search for the SID you referred to in your original description: SELECT SI_NAME, SI_ALIASES FROM CI_INFOOBJECTS, CI_APPOBJECTS, CI_SYSTEMOBJECTS WHERE SI_KIND='UserGroup' Access Query Builder directly from the JAVA web application server using the following URL: HTTP://servername:8080/AdminTools Query builder was added to the Business Objects Program Group in XI 3.1 The Query Builder can now be accessed using Start > Programs > BusinessObjects Enterprise > BusinessObjects Enterprise > Query Builder.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on May 02, 2012 at 02:33 PM

    Hi Pamela,

    I agree with Tim, You can definitely rebuild your CMS DB and get it configured again if you are not in production, I was successfully able to update the service account credential and Windows AD on fresh install.Hopefully they will to resolve this in FP3.

    Thanks,

    Mayur

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.