Gravatar for diego.moretto@xcentium.com

Question by Diego, Jan 16, 2015 11:45 AM

Can´t access the admin service

I have an instance of Coveo installed locally and I can´t access it through: localhost:8081

The error I get on the browser is: Cannot connect to the instance default of Coveo Enterprise Search hosted on localhost port 52800. class AdminHelpers::AdminConnection::CannotConnectException: Instance access is denied.

I'm going through the logs and found this on C:\CES7\Log\System_2015-01-16.log(latest log)

WARNING|2015-01-16|14:05:16|0|The security provider "Active Directory" has encountered an exception: class CSP::SecurityInvalidUserGroupException: Unable to convert '' into SID. Error message: class CGLWindows::WindowsInvalidUserGroupException: (MYDOMAIN\iusr): ! LookupAccountNameW( , MYDOMAIN\iusr) failed: No mapping between account names and security IDs was done. [0x00000534] ! LookupAccountNameW(MYDOMAIN, iusr) failed: The RPC server is unavailable. [0x000006ba].|||

I tryied running the Coveo Admin Service as Local system and with my domain account(which is admin on my machine).

On IIS I have the Coveo Enterprise Search 7 Admin site which it´s apppool is CESAppPool admin and I set it to run using my domain credentials which should work right since it´s admin. I even tried with Network service and local system but none of them seem to work.

What I think it´s strange by this error message is that it does look like it is trying to user an iusr to run the service but that´s not working. Any ideas why this would be happening?

Gravatar for jpiche@coveo.com

Comment by jpiche, Jan 21, 2015 9:31 AM

Thanks for your patience answering our questions :) Since none of your answers below hint at a potential misconfiguration, I suggest you contact Coveo's support with this issue.

3 Replies
Gravatar for diego.moretto@xcentium.com

Answer by Diego, Jan 23, 2015 11:52 AM

This is what fixed the problem:

1- On windows services I set all coveo services to run under the same domain user which is admin on the computer. But the domain names are case sensitives which matters for Coveo.

2- on IIS I changed the authentication on Coveo Enterprise Search 7 Admin site to windows authentication and disabled anonymous authentication

Gravatar for vseguin@coveo.com

Answer by Vincent Séguin, Jan 18, 2015 5:57 PM

Hi Diego,

Are you an administrator of your machine? You need to be an admin to access the Admin Tool.

Gravatar for diego.moretto@xcentium.com

Comment by Diego, Jan 19, 2015 9:49 AM

Yes. my domain account has been added to the Administrator group of the machine

Gravatar for vseguin@coveo.com

Comment by Vincent Séguin, Jan 19, 2015 9:50 AM

I'm wondering, with which user the CES Service is running?

Gravatar for jflheureux@coveo.com

Comment by Jean-François L'Heureux, Jan 19, 2015 10:22 AM

Have you logged out and of the machine since your user was added to the administrator group of the machine. Your access tokens are retrieved only at login time. You need to log out and log in again to be detected as an administrator.

Gravatar for diego.moretto@xcentium.com

Comment by Diego, Jan 19, 2015 11:42 AM

Yes I have logged out and in again. On services I see Coveo Admin Service set Log On As to my domain user.

Gravatar for diego.moretto@xcentium.com

Comment by Diego, Jan 20, 2015 9:13 AM

Any ideas? I'm still stuck with this :(

Gravatar for jflheureux@coveo.com

Comment by Jean-François L'Heureux, Jan 20, 2015 9:32 AM

Did you enter any uppercase characters while typing your username (Windows logon, CES service credentials, browser authentication required window…)? If that's the case, can you try with lowercase-only characters to see if it helps?

Gravatar for jpiche@coveo.com

Comment by jpiche, Jan 21, 2015 9:30 AM

To add to jflheureux's comment, I would add: we've seen some issues with dots and special characters in usernames in the past - is this the case of your username?

Gravatar for rfortier@coveo.com

Answer by rfortier, Jan 20, 2015 9:45 AM

  • Could you confirm that the Admin Site's ASP.NET Impersonation is Enabled (in IIS Authentication)?
  • Could you check that your Coveo Enterprise Search 'service' (not the Coveo Admin Search site) is using a user able to access the domain ?
Gravatar for diego.moretto@xcentium.com

Comment by Diego, Jan 20, 2015 2:34 PM

Could you confirm that the Admin Site's ASP.NET Impersonation is Enabled (in IIS Authentication)? yes

All coveo services are running with my account which I double checked it is assigned with the Administrator group

Gravatar for jflheureux@coveo.com

Comment by Jean-François L'Heureux, Jan 20, 2015 3:28 PM

Is your user account a domain account or a local account?

Gravatar for diego.moretto@xcentium.com

Comment by Diego, Jan 21, 2015 11:01 AM

Still no luck. I'm not sure why coveo is trying to use the domain\iusr user even though none of the services run with this user

Ask a question