Some or all identity references could not be translated

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

EqDev - 16 Oct 2006 21:05 GMT

I get and error “Some or all identity references could not be translated”
when executes the code System.Security.Principal.SecurityIdentifier.Translate.

It appears this happens to users that have been logged in for a long time.
It appears our users are in the habit of not logging out for long periods of
time.

If the user logs out and then back in the error no longer occurs.

Does any one have any idea what is happening here?
Is the some AD setting that causes tokens to expire after some period of time?

Code snippet:

WindowsIdentity id = WindowsIdentity.GetCurrent();
IdentityReferenceCollection irc =
WindowsIdentity.GetCurrent().Groups;
string[] strArray = new string[irc.Count];
int t = 0;

foreach (IdentityReference ir in irc)
{
IdentityReference account = ir.Translate(typeof(NTAccount));
strArray[t] = account.Value;
t++;
}

Signature

EqDev

Reply to this Message

Jeffrey Tan[MSFT] - 17 Oct 2006 04:50 GMT

Hi EqDev,

Can you tell me what exception message do you get when
SecurityIdentifier.Translate failed? Is it possible for you to provide the
call stack regarding the exception? These information will be helpful for
us to analysis the failure. Thanks.

Normally, from Reflector, we can see that SecurityIdentifier.Translate()
method internally calls SecurityIdentifier.TranslateToNTAccounts() method
to do the internal work. TranslateToNTAccounts method will call
LsaLookupSids win32 API to does the work. It will throw different exception
if the LsaLookupSids API fails. So the exception message should report a
key information regarding the failure.

I will wait for your further feedback. Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Reply to this Message

EqDev - 17 Oct 2006 12:04 GMT

This is th estack
Some or all identity references could not be translated.

at
System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)

at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)
at EQNPS.AccuracyMeasurement.SPMasXML.GetUsersRoles(SqlConnection conn)
at EQNPS.AccuracyMeasurement.SPMasXML.GetQuestionsAndAnswers(String
Trigger, Boolean IsSimultaneousSecond)
at EQNPS.AccuracyMeasurement.SPMasXML.GetXml(MeasuresRequest mr)
at
EQNPS.AccuracyMeasurement.SPMeasurementsClientForm.BuildMeasuresForm(String
RequestXML)

Signature

EqDev

> Hi EqDev,
>
[quoted text clipped - 33 lines]
> ==================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.

Reply to this Message

Jeffrey Tan[MSFT] - 18 Oct 2006 08:44 GMT

Hi Arno,

I will perform some research on this issue and get back to you ASAP. Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Reply to this Message

Jeffrey Tan[MSFT] - 18 Oct 2006 08:56 GMT

Hi EqDev,

Please ignore my another reply, it is a wrong reply. Sorry about it.

The information you provided is not enough to identify the root cause. Can
you be specific what exception do you get in this stack? Also, I suggest
you setup the symbol server correct for your debugger so that you can get a
more detailed call stack for this exception.

This is because the stack you provided only points out the
SecurityIdentifier.Translate method on the top, however, this is not
useful, you have to setup the debugging symbols for VS.net debugger to
retrieve more meaningful stack.

Can you tell me which version of VS you are using, VS.net2003 or VS2005?
For VS.net2003 debugger, you can set the symbol server by adding an
environment variable _NT_SYMBOL_PATH with value
"srv*C:\symbols*http://msdl.microsoft.com/download/symbols". VS2005
debugger uses the symbol directories
specified in Tools | Options | Debugging | Symbols. You can set the same
value "srv*C:\symbols*http://msdl.microsoft.com/download/symbols" in the
option.

Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Reply to this Message

Thilo Langbein - 27 Oct 2006 13:20 GMT

I have the same problem. The Translate-method does not work for all
security-Identifiers. I have a Problem with the built-in group
"Server-Operators".

Reply to this Message

Rate this thread:

Some or all identity references could not be translated

Free Magazines