locked
Service on lightweight gateway wont start - Domain controllers are not configured RRS feed

  • Question

  • I am attempting to lab up ATA 1.7.1, and am having a similar issue to the following ATA Forum thread: https://social.technet.microsoft.com/Forums/security/en-US/c817193a-9859-48fa-a208-eb644b17005b/service-on-lightweight-gateway-wont-start?forum=mata

    Event viewer is showing that the service is attempting to restart, and the ATA logs are full of this error (occurs every 20 seconds):

    2016-10-18 23:49:50.2983 856 5   00000000-0000-0000-0000-000000000000 Error [DirectoryServicesClient+<OnInitializeAsync>d__12] Microsoft.Tri.Infrastructure.ExtendedException: Domain controllers are not configured
       at Microsoft.Tri.Gateway.Resolution.DirectoryServices.DirectoryServicesClient.<OnInitializeAsync>d__12.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<InitializeAsync>d__18.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.ModuleManager.<OnInitializeAsync>d__4.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Module.<InitializeAsync>d__18.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.<OnStartAsync>d__10.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
       at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
       at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
       at Microsoft.Tri.Infrastructure.Framework.Service.OnStart(String[] args)
    

    The ATA gateway is successfully joined to the domain, the ATA Center has a successful connection to the Directory Services, 'KLIST query_bind' returns valid information, DNS resolves and all network connectivity seems to be fine.

    I have:

    - Rebuilt the performance counter database (including uninstall of ATA gateway and rebooting the host)

    - Regenerated the installation package from the ATA center and re-installed

    - Successfully added performance counters relating to .NET CLR Memory

    Any other avenues to explore would be greatly appreciated.

    Wednesday, October 19, 2016 1:06 AM

All replies

  • Hi Cameron,

    "Domain controllers are not configured" as the error suggest mean that there are missing configuration for this gateway. After installation the gateway, you need to go back to the ATA Console and provide the list of the DCs that this gateway is monitoring (assuming this is regular gateway and not lightweight gateway).

    After you'll provide the list of the DCs, the gateway should function normally.

    More information in "Step 5" in the installation guide here:

    https://docs.microsoft.com/en-us/advanced-threat-analytics/deploy-use/install-ata-step5

    Hope this helps,

     Microsoft ATA Team.

    Wednesday, October 19, 2016 6:22 PM