locked
Lightweight gateway service will not start RRS feed

  • Question

  • The lightweight gateway ran for a month or so then it stopped last week.  After reinstalling and rebooting the DC, the lightweight gateway started again.  It ran for a few days but stopped again.  Reinstalling and rebooting didn't help this time.  I tried reinstalling a couple of times.  No luck.  I get this: "error 1067: the process terminated unexpectedly" when trying to restart the service.  The error log doesn't help me much.  Maybe someone else can decode it.

    2016-08-09 16:55:49.6348 172 5   00000000-0000-0000-0000-000000000000 Error [DirectoryServicesClient+<SearchInternalAsync>d__23] Microsoft.Tri.Infrastructure.ExtendedException: LDAP search failed [DomainControllerDnsName=WORK-DNS2.dcsms.org IsGlobalCatalog=True DistinguishedName=DC=hhh,DC=test,DC=org Scope=Base Filter= AttributeNames=canonicalName objectClass whenCreated displayName distinguishedName objectGUID isDeleted name objectSID whenChanged lockoutDuration lockoutThreshold maxPwdAge minPwdAge pwdHistoryLength pwdProperties fSMORoleOwner replUpToDateVector] ---> Microsoft.Tri.Infrastructure.ExtendedException: LDAP search failed [ResultCode=Referral]
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchInternalAsync>d__23.MoveNext()
       --- End of inner exception stack trace ---
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchInternalAsync>d__23.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchAsync>d__22.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsInternalSynchedAsync>d__21.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsInternalAsync>d__18.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsAsync>d__15.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectAsync>d__14.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesResolver.<GetDomainsAsync>d__45.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesResolver.<OnStartAsync>d__37.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<StartAsync>d__19.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.ModuleManager.<OnStartAsync>d__5.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<StartAsync>d__19.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.<OnStartAsync>d__5.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)
    2016-08-09 16:56:14.7911 4244 5   00000000-0000-0000-0000-000000000000 Error [DirectoryServicesClient+<SearchInternalAsync>d__23] Microsoft.Tri.Infrastructure.ExtendedException: LDAP search failed [DomainControllerDnsName=WORK-DNS2.dcsms.org IsGlobalCatalog=True DistinguishedName=DC=hhh,DC=test,DC=org Scope=Base Filter= AttributeNames=canonicalName objectClass whenCreated displayName distinguishedName objectGUID isDeleted name objectSID whenChanged lockoutDuration lockoutThreshold maxPwdAge minPwdAge pwdHistoryLength pwdProperties fSMORoleOwner replUpToDateVector] ---> Microsoft.Tri.Infrastructure.ExtendedException: LDAP search failed [ResultCode=Referral]
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchInternalAsync>d__23.MoveNext()
       --- End of inner exception stack trace ---
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchInternalAsync>d__23.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchAsync>d__22.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsInternalSynchedAsync>d__21.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsInternalAsync>d__18.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectsAsync>d__15.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<SearchObjectAsync>d__14.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesResolver.<GetDomainsAsync>d__45.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesResolver.<OnStartAsync>d__37.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<StartAsync>d__19.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.ModuleManager.<OnStartAsync>d__5.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<StartAsync>d__19.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.<OnStartAsync>d__5.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)

    Tuesday, August 9, 2016 5:02 PM

All replies

  • Hi,

    Microsoft.Tri.Infrastructure.ExtendedException: LDAP search failed

    did you checked your firewall and account permissions?

    Regards

    Wednesday, August 10, 2016 6:58 AM
  • I have checked the firewall.  The firewall is off on the lightweight gateways and on the ATA Center.  I am logging in as the enterprise admin.  I have tried 2 different enterprise admin logins and get the same result under both accounts.  I checked Event Viewer and it shows the following message:  "The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly".  It doesn't make sense that it worked then stopped suddenly.  Nothing else has changed.

    Wednesday, August 10, 2016 8:40 PM
  • DON'T BOTHER WITH THIS PRODUCT.  IT IS TRASH.  I never got the lightweight gateway started on our 3rd DC.  I can't reinstall it.  I waited for the major update and tried to install it.  It said the gateway is already installed and then "rolled back" the installation.  I can't uninstall it.  No errors. The uninstaller just says "error" and stops.  Don't bother with this product.  Tech support is minimal at best.  Error logs are useless.  We are stopping all services on our ATA console and lightweight gateways until this product is improved greatly.  MS obviously doesn't put much effort into the ATA.  We never got any useful information out of it.  The only thing it reported was trust issues when the PC lost its trust with the DC (which has to be manually fixed anyway--and the user who was at the PC with the trust issue let us know immediately) or when a user logs in on too many machines at one time.  That was useless because all of our techs login on multiple machines every day.  We don't need emails telling us things we already know.  We will wait for a major update or improvement of this product before we use it again, if ever.
    Tuesday, January 3, 2017 2:01 PM
  • Hi super jethro,

    I'm sorry to hear about your bad experience with ATA. We obviously didn't build the product to fail every other day and we haven't heard of this issue from other customers. Having said that i'd be more than happy to help you troubleshoot the Gateway startup issue (unless you've previously contacted Microsoft support or the ATAEval@microsoft.com which would reach us directly). 

    If you did contact us previously please let me know, if you haven't it would be great if you could email us at ataeval@microsoft.com so we can find the root cause of the issue and fix this (if we end-up discovering its indeed a product issue and not an environment issue).

    Only by skimming the logs it seems that there's somekind of misconfiguration - the Domain's DNS name seems to be dcsms.org however the DN from the logs doesn't match - DistinguishedName=DC=hhh,DC=test,DC=org. This looks very odd to me. 

    Did you edit the log files before posting?

    Looking forward to hearing from you!

    Tuesday, January 3, 2017 5:36 PM
  • Hi,

    please check if service called WMI Performance Adapter isn't in Stopped state on that DC. I had similar issue and that was an answer.

    regards

    Tomasz Gosciminski, Predica

    Tuesday, January 17, 2017 9:12 AM