Gravatar for ben.lutz@rosetta.com

Question by benlutz, Jul 29, 2015 1:47 PM

Security Invalid User Group Exception - unable to Index

Hello,

I am installing an instance of Coveo on a fresh developer machine. Everything is looking good, I get green lights on the status panel and am able to attempt to index content through the Sitecore -> Control Panel -> Index Manager. This seems to fail because on error that appears almost nonstop through the CES console. There are three of them, although two are nearly identical.

7/28/2015 11:43:28 AM | The security provider "Sitecore Security Provider for LTHF7FN32-fis.local" has encountered an exception: class CSP::SecurityInvalidUserGroupException: Unable to convert '' into SID. Error message: class CGLWindows::WindowsInvalidUserGroupException: (coveoSitecoreAdministrators): LookupAccountNameW(coveoSitecoreAdministrators) failed: The trust relationship between the primary domain and the trusted domain failed. [0x000006fc] | LookupAccountNameW( , coveo_SitecoreAdministrators) failed: The trust relationship between the primary domain and the trusted domain failed. [0x000006fc].

And

7/28/2015 11:43:28 AM | The security provider "Sitecore Security Provider for LTHF7FN32-fis.local" has encountered an exception: class CSP::SecurityInvalidUserGroupException: Unable to convert '' into SID. Error message: class CGLWindows::WindowsInvalidUserGroupException: (ServicesAPI): LookupAccountNameW(sitecore\ServicesAPI) failed: No mapping between account names and security IDs was done. [0x00000534] | LookupAccountNameW(ServicesAPI@sitecore) failed: No mapping between account names and security IDs was done. [0x00000534] | LookupAccountNameW(sitecore , ServicesAPI) failed: The RPC server is unavailable. [0x000006ba].

The second error also occurs with coveo_SitecoreAdministrators instead of sitecore/ServicesAPI. This is the same error posted in this thread: https://answers.coveo.com/questions/1991/can-t-access-the-admin-service, but I have full access to the admin portal and I believe that the poster's "fix" resolved the admin issue, but not this error.

Any help would be appreciated. Thank you! -Ben

Gravatar for slangevin@coveo.com

Comment by Simon, Jul 29, 2015 2:51 PM

Just to make sure, this fails during the index rebuild through the Sitecore Indexing Manager? In the Coveo Index Browser, you do not see the documents and their permissions?

I saw this time of error before with the Active Directory account running the service but I have a hard time to see the link with the Sitecore indexing event.

Gravatar for ben.lutz@rosetta.com

Comment by benlutz, Jul 29, 2015 3:08 PM

This is what I'm seeing in the CES console above the 3 errors I mentioned above:

7/29/2015 3:04:43 PM | Pending indexing operations - sitecore://database/web/ItemId/{F8300A8B-9258-4FA5-938E-F628CF16DE76}/Language/ja-JP/Version/1

The index "runs" but doesn't index anything. I can rebuild it through the administrative service as well as through the sitecore control panel, but nothing gets added.

I AM using an active directory account to run almost everything (besides the Queue and sitecore credentials). The account is an admin on the machine. The app pool runs under a local admin account.

Gravatar for slangevin@coveo.com

Comment by Simon, Jul 30, 2015 9:26 AM

Do you have other sources apart from Coveo for Sitecore (Queue)? What I would propose is a dump of the process.

It is a bit of an overkill but since I have limited information on your environment.

So navigate to

\Program Files\Coveo Enterprise Search 7\Bin

Open a command window as an administrator and input these two commands in a row:

CGLDump7.exe -n CESCustomCrawlers7.exe

CGLDump7.exe -n CESService7.exe

It will generate the dump file directly in the bin folder. You can use the -o parameter to dump it somewhere else.

The process should now have its memory cleared.

Cheers

1 Reply
Gravatar for ben.lutz@rosetta.com

Answer by benlutz, Jul 30, 2015 4:11 PM

Update on this:

Dumping the process made them go away temporarily, but I'm still seeing the same behavior. I am indexing my sitecoreweb and master fine.. sitecoremaster_index Rebuild Time: 96 seconds Approximate Throughput: 212 items per second Has Deletions: False Is Clean: True Out of Date : False Document Count : 20393 Is Healthy : True Number of Fields : 401 Last Updated : 7/30/2015 - 7:02 PM (UTC) Number of Terms : -1

But my Coveomasterindex only indexes two documents before the console shows the errors.

Coveomasterindex Rebuild Time: 4 minutes Approximate Throughput: 0 items per second Has Deletions: False Is Clean: True Out of Date : False Document Count : 2 Is Healthy : True Number of Fields : 1130 Last Updated : 7/30/2015 - 7:05 PM (UTC) Number of Terms : 0

I'm pretty stumped here, so any ideas would be helpful.

Gravatar for slangevin@coveo.com

Comment by Simon, Jul 30, 2015 5:00 PM

I sent you a private email. I will post the output on this post once I have something new.

Gravatar for slangevin@coveo.com

Comment by Simon, Sep 20, 2016 11:38 AM

This issue is due to a version mismatch between the existing Coveo and Coveo for Sitecore config files and the installed version of Coveo.

Ask a question