Exchange ECP (Invalid Credential)

Hi
I've faced bad problem about ECP authentication i can't solve it
when i try to logging with ECP it gives me a error that "the user or password you've entered is incorrect"
also i have tried to fully recreate the ECP virtual directory on both Default Web Site and Exchange Back End
I even removed all configuration about ECPApplicationPool on applicationHost.config file
i did everything but i got same error yet
Plz help me ! now users cant open their mailbox setting at OWA cause ECP authentication error
at ECP Default Web site :
basic and anonymous authentication is enabled
at ECP exchange Back End :
Windows and anonymous authentication is enabled
also when i run test-ecpconnectivity it returns:
WARNING: The test couldn't test the internal URL of this virtual directory, because the InternalURL property isn't set.

Get-EcpVirtualDirectory | fl *url,*authentication
InternalUrl : https://&&&&&&/ecp
ExternalUrl : https://*******/ecp
BasicAuthentication : True
WindowsAuthentication : False
DigestAuthentication : False
FormsAuthentication : True
LiveIdAuthentication : False
AdfsAuthentication : False
OAuthAuthentication : FalseGet-owaVirtualDirectory | fl *url,*authentication Url : {}SetPhotoURL : Exchange2003Url : FailbackUrl : InternalUrl : https://&&&&&&&/owaExternalUrl : https://******/owaBasicAuthentication : TrueWindowsAuthentication : FalseDigestAuthentication : FalseFormsAuthentication : TrueLiveIdAuthentication : FalseAdfsAuthentication : FalseOAuthAuthentication : False

Similar Messages

  • Frequent Invalid Credential login Error to Essbase Server

    We have noticed frequently invalid credentials error with  Essbase Server login via Smart View or Classic Add-In.
    Some interesting facts, on invalid credential error:
    1)  We can login using native Essbase Security as Admin.
    2)  Can login into Shared services via MSAD acct.
    3)  Work-space login is also functional.
    4)  Can pull MSAD user ID and accounts from Shared services.
    5) EPMCSS-00301 from shared services log.
    6) Issue will only be fixed if Essbase only service is recycled.
    I am pretty sure MSAD config is not the issue as other components are working upon this error and we have to recycle Essbase  only service.
    Any input is appreciated. There is no issue with "user Id" or "PWD"
    Nothing prudent from the logs as i scrubbed.

    HI John
    Issue occurs in EPM 11.1.2.1.106 Version of  64 Bit Essbase Server.
    Yes we can log in with Native accounts when issue occurs, just MSAD doesn't work with Essbase.
    Workspace, Shared services does work (Smart View & Classic Add-in doesn't work)
    We have to restart Essbase only Service for it to allow login's.
    I have tried setting and using enhanced login via Essbase config.
    LOGINFAILUREMESSAGEDETAILED
    AGENTLOGMESSAGELEVEL DEBUG.
    AD groups are set via config filter but we use native groups assigning MSAD users to Native Shared services groups created.
    Please review and advice.
    Not much Information form logs apart from EPMCSS-00301 which is generic error.  Not sure whats trigerring  Essbase (MASD) security to fail and had to restart service.
    Thu~Aug~08~11:28:53~2013~Local~ESSBASE0~~~13208~Error~(1051440)~
    Essbase user ~[XXX]~ Authentication Fails against the Shared Services Server with Error ~[EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.]
    Thu~Aug~08~11:28:53~2013~Local~ESSBASE0~~~13208~Warning~(1051003)~
    Error ~1051440 ~processing request ~[Login]~ - disconnecting
    Thu~Aug~08~11:29:39~2013~Local~ESSBASE0~~~10344~Warning~(1051003)~
    Error ~-1 ~processing request ~[Logout]~ - disconnecting
    Thu~Aug~08~11:30:11~2013~Local~ESSBASE0~~~18232~Info~(1051164)~EPMCSS-00301: Failed to authenticate user. Invalid credentials. Enter valid credentials.
      at com.hyperion.css.spi.impl.msad.MSADProvider.authenticate(MSADProvider.java:707)
      at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateUser(CSSAbstractAuthenticator.java:686)
      at com.hyperion.css.facade.impl.CSSAPIAuthenticationImpl.authenticate(CSSAPIAuthenticationImpl.java:73)
      at com.hyperion.css.facade.impl.CSSAPIImpl.authenticate(CSSAPIImpl.java:103)
      at com.hyperion.css.facade.impl.CSSAPIImpl.login(CSSAPIImpl.java:825)
      at com.hyperion.css.facade.CSSAPIFacade.login(CSSAPIFacade.java:782)
    - Nested Exception:
    javax.naming.NoInitialContextException: Need to specify class name in environment or system property, or as an applet parameter, or in an application resource file:  java.naming.factory.initial
      at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:645)
      at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
      at javax.naming.InitialContext.getURLOrDefaultInitCtx(InitialContext.java:325)
      at javax.naming.InitialContext.lookup(InitialContext.java:392)
      at com.hyperion.css.spi.util.jndi.pool.CSSJNDIKeyedObjectFactory.makeObject(CSSJNDIKeyedObjectFactory.java:126)
      at org.apache.commons.pool.impl.GenericKeyedObjectPool.borrowObject(GenericKeyedObjectPool.java:797)
      at com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.getBorrowObject(JNDIConnectionPool.java:321)
      at com.hyperion.css.spi.util.jndi.pool.JNDIConnectionPool.borrowValidatedConnection(JNDIConnectionPool.java:307)
      at com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(JNDIHelper.java:482)
      at com.hyperion.css.spi.impl.msad.JNDIHelper.getURLContext(JNDIHelper.java:453)
      at com.hyperion.css.spi.impl.msad.MSADProvider.authenticate(MSADProvider.java:463)
      at com.hyperion.css.facade.impl.CSSAbstractAuthenticator.authenticateUser(CSSAbstractAuthenticator.java:686)
      at com.hyperion.css.facade.impl.CSSAPIAuthenticationImpl.authenticate(CSSAPIAuthenticationImpl.java:73)
      at com.hyperion.css.facade.impl.CSSAPIImpl.authenticate(CSSAPIImpl.java:103)
      at com.hyperion.css.facade.impl.CSSAPIImpl.login(CSSAPIImpl.java:825)
      at com.hyperion.css.facade.CSSAPIFacade.login(CSSAPIFacade.java:782)
    Thanks

  • Error 49: LDAP Invalid credential Supplied when installing Identity Server

    I am installing oracle Acess manager with Active directory for windows server 2003. While installing
    the identity server we facing the issue with
    Error 49: LDAP Invalid credential supplied. Please see the attached screen shot for more details.

    At which stage are getting this error?
    If you are getting this error after specifying LDAP Directory details during identity server install, make sure that your username/password for AD are correct.
    if your domain name = example.com
    and the user you are using is under cn=users in AD use:
    1. cn=your_username,cn=users,dc=example,dc=com
    and your password
    2. if this doesn't work, try:
    [email protected]
    and your password.

  • Invalid Credential

    Messaging Server 5.2 hf 1.21 (W2k p4).
    I have this error in the dir access log:
    - conn=27616 op=0 BIND dn="cn=msg-xxx, cn=iPlanet Messaging Applications, cn=Server Group (2), cn=xxx.abc.com, ou=abc.com, o=NetscapeRoot" method=128 version=2
    - conn=27616 op=0 RESULT err=49 tag=97 nentries=0 etime=0
    I wonder what sitation could this result in err=49 (Invalid Crednetials) as I could not find any MOD operation on this entry. And pop, imap, webmail were not able to start up. I believe it is due to this invalid credential issue.
    Appreciate your comment or advice. Thanks.

    Hi,
    No password policy being set and no changes done on
    the entry as I checked through the dir access log .
    The DN is there.
    Anything else that could lead to this error?Not that I have seen. Clearly directory server doesn't like the password that is being provided.. as a workaround you could change the password on the messaging server and directory server ends and see if that helps e.g.
    (make sure to grab a snapshot of your ./configutil output first, just in case you need to restore values)
    On the directory server side:
    ./ldapmodify -h <directory server> -D "cn=directory manager" -w <directory manager password>
    dn: cn=msg-xxx, cn=iPlanet Messaging Applications, cn=Server Group (2), cn=xxx.abc.com, ou=abc.com, o=NetscapeRoot
    changetype: modify
    replace: userpassword
    userpassword: <new password>
    On the messaging server side:
    ./configutil -o local.service.pab.ldappasswd -v <new password>
    ./configutil -o local.ugldapbinddn -v <new password>
    ./configutil -o local.enduseradmincred -v <new password>
    ./imsimta cnbuild
    ./stop-msg;./start-msg
    Regards,
    Shane.
    Message was edited by:
    shane_hjorth

  • Invalid Credential - when attempt to restart the SAP App. Server in sapmmc

    Hi community,
    I have successfully installed SAP NetWeaver 7.01 ABAP Developer edition on vista 32bit and when i open sapmmc the SAP Application Server is appear green and I able to connect it. However, after i've restarted my laptop the sap application server appear as grey status.
    Therefore, I attempted to restart the sap application server in sapmmc, it prompted me a webservice authentication and I have entered the master password that I specified during the installation but it seems not working .
    I get the error message "start failed: 2 - Invalid Credential" . Is there a specific SAP user name and password or any other userid and password that i require to key in in order to start the application server again? or is a configuration problem? need your advise. Many thanks in advance!

    Hi Vernon,
    Please enter your window userid and password when starting server node in SAP MMC.
    Hope it will helps
    Regards
    Arun Jaiswal

  • Certificate error when trying to access exchange ECP/OWA through browser

    I am able to get into the log in screen and upon entering my creds "example\example" and my password I receive the following error:
    Server Error in '/ecp' Application.
    Invalid provider type specified.
    Description: An
    unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 
    Exception Details: System.Security.Cryptography.CryptographicException:
    Invalid provider type specified.
    Source Error:
    An unhandled exception was generated during the execution
    of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
    Stack Trace:
    [CryptographicException: Invalid provider type specified.
    System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer) +5368074
    System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle) +138
    System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair() +221
    System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey() +516
    Microsoft.Exchange.HttpProxy.FbaModule.ParseCadataCookies(HttpApplication httpApplication) +1222
    Microsoft.Exchange.HttpProxy.FbaModule.OnBeginRequestInternal(HttpApplication httpApplication) +254
    Microsoft.Exchange.HttpProxy.<>c__DisplayClass8.<OnBeginRequest>b__7() +1479
    Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate) +40
    Microsoft.Exchange.HttpProxy.Diagnostics.SendWatsonReportOnUnhandledException(MethodDelegate methodDelegate) +408
    System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80
    System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165
    Version Information: Microsoft .NET Framework
    Version:4.0.30319; ASP.NET Version:4.0.30319.34009 
    Any help/details on how to get this issue resolved would be greatly appreciated.
    Thanks!

    I am sure you are using exchange 2010 or later. Using this utility to see what certificate you have.
    you will need a SAN certificate.
    To check and import certificate properly use this digicert util
    https://www.digicert.com/util/
    Check this.
    http://exchangeserverpro.com/exchange-2010-ssl-certificates/

  • Exchange Account invalid password

    Our company just upgraded their Exchange Server 2003. Since then my iPhone says invalid password. I have tried deleting and readding my account with no luck. Out IT guy says the settings are correct but he doesn't know iPhones so he can't help me. I know my password is corect as I can log in via my computer to email no problem.

    I was having the same problem for a few weeks. I talked to a few different IT folks in my company and finally found out that there was some "Activesync" setting they had to turn on. I think this was Exchange 2007. Not sure by your message if your company upgraded from or to 2003. Hopefully this helps.

  • ICE exchange - Syndicator invalid URL

    Dear all,
    I am facing a problem with the ICE content exchange between out porta linstallations. I am setting up a new Productive EP 7
    instance.
    The system is the product of a system copy from the existing Productive Portal instance in our landscape.
    After completing the system copy procedure, I was  trying to setup an ICE exchange between the two systems and faced the
    following problem.
    While setting up the "Registered Syndicators" in the Subscriber system, whenever I try to save the syndicator data an "Invalid
    URL" error appears.
    After following the instructions of note 883859, the problem still occurs.
    Has anybody come across this error?
    Kind Regards,
    Kontogianni Eleni

    Hi Lorcan,
    thank you for your reply.  The URL is FQDN but not a loadbalancer URL. There is no proxy or firewall in between.
    The strange thing is that the communication between the two portals is established when pressing the "Get catalog"
    button and the Syndicator returns the catalog without an error.
    But when I try to save that data the error appears.
    The offer subscription works and the data is tranferred between the systems but the error keeps appearing.
    Regards,
    Eleni

  • Directory Integration Platform Configuration Assistant - Invalid Credential

    O/S: SuSE Enterprise 9
    Situation: During the installer for Oracle Application Server 10g Basic Installation/Portal, I see the following error:
    "Directory Integration Platform Configuration failed. Please see lofile file: /home/oracle/product/10.1.2/OracleAS/infra/ldap/log/dipca.log"
    A review of dipca.log shows the following:
    "oracle.ldap.oidinstall.backend.OIDCAException: Invalid Credentials at oracle.ldap.oidinstall.backend.OIDConfiguration.sslbind(OIDConfiguration.java:787"
    The user authentication method set up on the server was local (/etc/passwd). Could this be my issue? If so, how do I correct it? Any thoughts as to what the issue is?

    You can have the BI, J2EE and webcache in a single midtier. That should not be an issue.
    The password for b2b stored in OID may be out of sync with the password you have set. Please find out what is the password in OID and then reset your b2b schema password with the password stored in OID. The way to locate the b2b password in OID is as follows:
    Login to OID and traverse through the following nodes:
    Entry Management | cn=OracleContext | Products | IAS | IAS
    Infrastructure Database | orclReferenceName | orclResourceName=B2B
    Hope this will resolve your problem,
    Eng

  • Invalid credential error in SCC for all users

    Hi,
    None of the users, including the admin user, are able to enter the SCC. The SCC portal opens, but when the users try to enter their credentials the system prompts them with 'Invalid Credentials'.
    Please help me on this and let me know you require any specific details.
    Regards,
    Karan

    I faced a similar issue sometime back .How to reset SCC password?
    This is what i did
    1)Open Run(Windows+R) --> type services.msc -->make sure all the relevant servers are started and running.
    2) Make sure SUP server is connected and running
    3) checked if pre requisites are met
    Software                         Version
    Adobe Flash Player        10.1 or later, 11.x
    Internet Explorer              •6.0 (32-bit only)
                                                7.0 (32-bit only)
                                                •8.0 (32- and 64-bit)
                                                •9.0 (32- and 64-bit)
    64-bit versions of Internet Explorer 8.0 and 9.0 support only Adobe Flash Player 11.x
    and for some reasons i realized SCC works mostly in IE but not in other major browsers.
    please check if this can help you

  • Invalid credential error

    Hi,
    I have used below code & get error like
    AdApiError Code: 105 Error Code: InvalidCredentials Message: Authentication failed. Either supplied credentials are invalid or the account is inactive. But i have all credentials correctly... 
    <?php
    // Include the Bing Ads namespaced class files available 
    // for download at http://go.microsoft.com/fwlink/?LinkId=322147 
    include 'bingads\BulkClasses.php'; 
    include 'bingads\ClientProxy.php'; 
    // Specify the BingAds\Bulk objects that will be used. 
    use BingAds\Bulk\DownloadCampaignsByCampaignIdsRequest; 
    use BingAds\Bulk\BulkDownloadEntity; 
    use BingAds\Bulk\DataScope; 
    use BingAds\Bulk\CampaignScope; 
    use BingAds\Bulk\GetDetailedBulkDownloadStatusRequest; 
    use BingAds\Bulk\DownloadStatus; 
    use BingAds\Bulk\DownloadFileType; 
    use BingAds\Bulk\PerformanceStatsDateRange; 
    use BingAds\Bulk\CustomDateRangeEnd; 
    use BingAds\Bulk\CustomDateRangeStart; 
    use BingAds\Bulk\Date; 
    use BingAds\Bulk\GetBulkUploadUrlRequest; 
    use BingAds\Bulk\ResponseMode; 
    use BingAds\Bulk\GetDetailedBulkUploadStatusRequest; 
    // Specify the BingAds\Proxy objects that will be used. 
    use BingAds\Proxy\ClientProxy; 
    // Disable WSDL caching. 
    ini_set("soap.wsdl_cache_enabled", "0"); 
    ini_set("soap.wsdl_cache_ttl", "0"); 
    // Specify your credentials.
    $UserName = "******";  //my bing ads username
    $Password = "******";  //my bing ads password
    $DeveloperToken = "*******"; //token get from developer page
    $AccountId = *****;  //In bing billing page
    $CustomerId = *****;  //In bing billing page
    // Bulk WSDL 
    $wsdl = "https://api.bingads.microsoft.com/Api/Advertiser/CampaignManagement/V9/BulkService.svc?singleWsdl"; 
    // The full path to the bulk file. 
    $BulkFilePath = "c:\\bing\\"; 
    // The full path to the previously extracted bulk file. 
    // This file is used to access the last sync time. 
    $ExtractedFilePath = "c:\\bulk\\extracted\\accounts.csv"; 
    // The full path to the upload result file. 
    $UploadResultFilePath = "c:\\bulk\\uploadresults.zip"; 
    // Specifies the bulk file format. 
    $FileFormat = DownloadFileType::Csv; 
    // Confirm that the download folder exist; otherwise, exit. 
    $length = strrpos($BulkFilePath, '\\'); 
    $folder = substr($BulkFilePath, 0, $length); 
    if (!is_dir($folder)) 
        printf("The output folder, %s, does not exist.\nEnsure that the " . 
            "folder exists and try again.", $folder); 
        return; 
    try 
        $proxy = ClientProxy::ConstructWithAccountAndCustomerId($wsdl, $UserName, $Password, $DeveloperToken, $AccountId, $CustomerId, null); 
        // Use the bulk service to download a bulk file. 
        // The campaigns must all belong to the same account. 
        $campaigns = array(); 
        foreach ($CampaignIds as $id) 
            $scope = new CampaignScope(); 
            $scope->CampaignId = $id; 
            $scope->ParentAccountId = $AccountId; 
            $campaigns[] = $scope; 
        $dataScope = DataScope::EntityData; 
        $entities = array ( 
            BulkDownloadEntity::Ads, 
            BulkDownloadEntity::AdGroups, 
            BulkDownloadEntity::Campaigns, 
            BulkDownloadEntity::Keywords 
        $formatVersion = "2.0"; 
        $lastSyncTimeInUTC = GetLastSyncTime($ExtractedFilePath); 
        // You may include a non-null date range if the lastSyncTime is null, and the data scope includes 
        // either EntityPerformanceData, BidSuggestionsData, or QualityScoreData. 
        $performanceStatsDateRange = new PerformanceStatsDateRange(); 
        $performanceStatsDateRange->CustomDateRangeEnd = new Date(); 
        $performanceStatsDateRange->CustomDateRangeEnd->Day = 15; 
        $performanceStatsDateRange->CustomDateRangeEnd->Month = 9; 
        $performanceStatsDateRange->CustomDateRangeEnd->Year = 2013; 
        $performanceStatsDateRange->CustomDateRangeStart = new Date(); 
        $performanceStatsDateRange->CustomDateRangeStart->Day = 15; 
        $performanceStatsDateRange->CustomDateRangeStart->Month = 9; 
        $performanceStatsDateRange->CustomDateRangeStart->Year = 2013; 
        // GetDownloadRequestId helper method calls the corresponding Bing Ads service operation 
        // to request the download identifier. 
        $downloadRequestId = GetDownloadRequestId( 
                $proxy, 
                $campaigns, 
                $dataScope, 
                $FileFormat, 
                $entities, 
                    $formatVersion, 
                $lastSyncTimeInUTC, 
                null 
        $waitTime = 5 * 1;  
        if ($downloadRequestId != null) 
            printf("Download Request Id: %s\n", $downloadRequestId); 
            $downloadSuccess = false; 
            // This sample polls every 30 seconds up to 5 minutes. 
            // In production you may poll the status every 1 to 2 minutes for up to one hour. 
            // If the call succeeds, stop polling. If the call or  
            // download fails, the call throws a fault. 
            for ($i = 0; $i < 10; $i++) 
                sleep($waitTime); 
                // GetDownloadRequestStatus helper method calls the corresponding Bing Ads service operation  
                // to get the download status. 
                $downloadRequestStatus = GetDownloadRequestStatus( 
                    $proxy,  
                    $downloadRequestId 
                if (($downloadRequestStatus != null) && ($downloadRequestStatus == "Completed")) 
                    $downloadSuccess = true; 
                    break; 
            if ($downloadSuccess) 
                $downloadUrl = GetDownloadUrl( 
                        $proxy, 
                        $downloadRequestId 
                printf("Downloading from %s.\n\n", $downloadUrl); 
                DownloadFile($downloadUrl, $BulkFilePath); 
                printf("The download file was written to %s.\n", $BulkFilePath); 
            else // Pending 
                printf("The request is taking longer than expected.\n " . 
                        "Save the download request ID (%s) and try again later.\n", 
                        $downloadRequestId); 
    catch (SoapFault $e) 
        // Output the last request/response. 
        print "\nLast SOAP request/response:\n"; 
        print $proxy->GetWsdl() . "\n"; 
        print $proxy->GetService()->__getLastRequest()."\n"; 
        print $proxy->GetService()->__getLastResponse()."\n"; 
        // Bulk service operations can throw AdApiFaultDetail. 
        if (isset($e->detail->AdApiFaultDetail)) 
            // Log this fault. 
            print "The operation failed with the following faults:\n"; 
            $errors = is_array($e->detail->AdApiFaultDetail->Errors->AdApiError) 
                    ? $e->detail->AdApiFaultDetail->Errors->AdApiError 
                    : array('AdApiError' => $e->detail->AdApiFaultDetail->Errors->AdApiError); 
            // If the AdApiError array is not null, the following are examples of error codes that may be found. 
            foreach ($errors as $error) 
                print "AdApiError\n"; 
                printf("Code: %d\nError Code: %s\nMessage: %s\n", $error->Code, $error->ErrorCode, $error->Message); 
                switch ($error->Code) 
                    case 0:    // InternalError 
                        break; 
                    case 105:  // InvalidCredentials 
                        break; 
                    default: 
                        print "Please see MSDN documentation for more details about the error code output above.\n"; 
                        break; 
        // Bulk service operations can throw ApiFaultDetail. 
        elseif (isset($e->detail->ApiFaultDetail)) 
            // Log this fault. 
            print "The operation failed with the following faults:\n"; 
            // If the BatchError array is not null, the following are examples of error codes that may be found. 
            if (!empty($e->detail->ApiFaultDetail->BatchErrors)) 
                $errors = is_array($e->detail->ApiFaultDetail->BatchErrors->BatchError) 
                        ? $e->detail->ApiFaultDetail->BatchErrors->BatchError 
                        : array('BatchError' => $e->detail->ApiFaultDetail->BatchErrors->BatchError); 
                foreach ($errors as $error) 
                    printf("BatchError at Index: %d\n", $error->Index); 
                    printf("Code: %d\nError Code: %s\nMessage: %s\n", $error->Code, $error->ErrorCode, $error->Message); 
                    switch ($error->Code) 
                        case 0:     // InternalError 
                            break; 
                        default: 
                            print "Please see MSDN documentation for more details about the error code output above.\n"; 
                            break; 
            // If the OperationError array is not null, the following are examples of error codes that may be found. 
            if (!empty($e->detail->ApiFaultDetail->OperationErrors)) 
                $errors = is_array($e->detail->ApiFaultDetail->OperationErrors->OperationError) 
                        ? $e->detail->ApiFaultDetail->OperationErrors->OperationError 
                        : array('OperationError' => $e->detail->ApiFaultDetail->OperationErrors->OperationError); 
                foreach ($errors as $error) 
                    print "OperationError\n"; 
                    printf("Code: %d\nError Code: %s\nMessage: %s\n", $error->Code, $error->ErrorCode, $error->Message); 
                    switch ($error->Code) 
                        case 0:     // InternalError 
                            break; 
                        case 106:   // UserIsNotAuthorized 
                            break; 
                        default: 
                            print "Please see MSDN documentation for more details about the error code output above.\n"; 
                            break; 
    catch (Exception $e) 
        if ($e->getPrevious()) 
            ; // Ignore fault exceptions that we already caught. 
        else 
            print $e->getCode()." ".$e->getMessage()."\n\n"; 
            print $e->getTraceAsString()."\n\n"; 
    // GetDownloadRequestId helper method calls the DownloadCampaignsByCampaignIds service operation  
    // to request the download identifier. 
    function GetDownloadRequestId($proxy, $campaigns, $dataScope, $downloadFileType,  
            $entities, $formatVersion, $lastSyncTimeInUTC, $performanceStatsDateRange) 
        // Set the request information. 
        $request = new DownloadCampaignsByCampaignIdsRequest(); 
        $request->Campaigns = $campaigns; 
        $request->DataScope = $dataScope; 
        $request->DownloadFileType = $downloadFileType; 
        $request->Entities = $entities; 
        $request->FormatVersion = $formatVersion; 
        $request->LastSyncTimeInUTC = $lastSyncTimeInUTC; 
        $request->PerformanceStatsDateRange = $performanceStatsDateRange; 
        return $proxy->GetService()->DownloadCampaignsByCampaignIds($request)->DownloadRequestId; 
    // GetDownloadRequestStatus helper method calls the GetDetailedBulkDownloadStatus service operation  
    // to get the download request status. 
    function GetDownloadRequestStatus($proxy, $requestId) 
        $request = new GetDetailedBulkDownloadStatusRequest(); 
        $request->RequestId = $requestId; 
        return $proxy->GetService()->GetDetailedBulkDownloadStatus($request)->RequestStatus; 
    // GetDownloadUrl helper method calls the GetDetailedBulkDownloadStatus service operation  
    // to get the download Url. 
    function GetDownloadUrl($proxy, $requestId) 
        $request = new GetDetailedBulkDownloadStatusRequest(); 
        $request->RequestId = $requestId; 
        return $proxy->GetService()->GetDetailedBulkDownloadStatus($request)->ResultFileUrl; 
    function DownloadFile($downloadUrl, $filePath) 
        if (!$reader = fopen($downloadUrl, 'rb')) 
            throw new Exception("Failed to open URL " . $downloadUrl . "."); 
        if (!$writer = fopen($filePath, 'wb')) 
            fclose($reader); 
            throw new Exception("Failed to create ZIP file " . $filePath . "."); 
        $bufferSize = 100 * 1024; 
        while (!feof($reader)) 
            if (false === ($buffer = fread($reader, $bufferSize))) 
                fclose($reader); 
                fclose($writer); 
                throw new Exception("Read operation from URL failed."); 
            if (fwrite($writer, $buffer) === false) 
                fclose($reader); 
                fclose($writer); 
                throw new Exception ("Write operation to ZIP file failed."); 
        fclose($reader); 
        fflush($writer); 
        fclose($writer); 
    // Decompresses a ZIP Archive and writes the contents to the specified file path. 
    function DecompressFile($fromZipArchive, $toExtractedFile) 
        $archive = new ZipArchive; 
        if ($archive->open($fromZipArchive) === TRUE) { 
            $archive->extractTo(dirname($toExtractedFile)); 
            $archive->close(); 
        else { 
            throw new Exception ("Decompress operation from ZIP file failed."); 
    // Compresses a bulk file to a ZIP Archive. 
    function CompressFile($fromExtractedFile, $toZipArchive) 
        $archive = new ZipArchive; 
        if ($archive->open($toZipArchive, ZipArchive::OVERWRITE) === TRUE) { 
            $archive->addFile($fromExtractedFile, basename($fromExtractedFile)); 
            $archive->close(); 
        else { 
            throw new Exception ("Compress operation to ZIP file failed."); 
    // Get the time stamp of the last download from the previous 
    // download file. The SyncTime node contains the time stamp. 
    function GetLastSyncTime($path) 
        $lastSyncTime = null; 
        if (is_file($path)) 
            $reader = @fopen($path, "r"); 
            try 
                $syncTimeColumn = 0; 
                // The first record contains column header information, for example "Type" and "Sync Time". 
                $record = fgets($reader); 
                if($record != null) 
                    $fields = explode(",", $record, 100); 
                    $column = 0; 
                    do 
                        $syncTimeColumn = ($fields[$column] == "Sync Time") ? $column : $syncTimeColumn; 
                    } while($syncTimeColumn == 0 && (++$column < count($fields))); 
                // Look for the Account record after any other metadata. 
                $isAccount = false; 
                do 
                    $record = fgets($reader); 
                    $fields = explode(",", $record, 100); 
                    if($fields[0] == "Account") 
                        date_default_timezone_set("UTC"); 
                        $date = (new DateTime($fields[$syncTimeColumn]))->format('Y-m-d\TH:i:s'); 
                        $lastSyncTime = ($fields[$syncTimeColumn] != "") ? $date : null; 
                        $isAccount = true; 
                } while(!$isAccount); 
                fclose($reader); 
                $reader = null; 
            catch (Exception $e) 
                if (isset($reader)) 
                    fclose($reader); 
                throw $e; 
        return $lastSyncTime; 
    ?>                   

    Hello.
    Here are a couple of suggestions to check first:
    UserName cannot be a Microsoft account (email format). If you have a Microsoft account, you must use OAuth. For more information, please see
    Managing User Authentication with OAuth.
    AccountId is not the same as Account Number that you would find on the Accounts & Billing page. The account details page should provide both Account Number and Account Id, so please be sure to use the AccountId. For an example of how to get the AccountId
    using the API, please see
    Search Customers by User in PHP.
    If you are still blocked, I suggest reaching out to support to verify your credentials.
    https://msdn.microsoft.com/en-US/library/bing-ads-error-handling-guide.aspx#engagesupport 
    I hope this helps!

  • Invalid Credential/Disabled User

    Hi,
    I have a requirment of capturing the message "Invalid Username/Password" or Disabled User on the OAM Login (Enterprise Login Page). For example -
    I have 2 applications which are protected by the same authentication scheme and they are SSO enabled. If a user tries to access those applications will be challanged by the Login Page. If the user puts the wrong password or user name over to the Login Page, I should be able to caputre that message and show a message to the User saying that "The username or password provided are wrong". Similar is the case for the Disabled users, so if the userid is disabled and the user tries to get in to the application he should get a message "Your User ID is disabled" on the Log in Page. Is there any way I can achive this. Is it a Out of Box functionality of OAM or I have to write any custom scheme for this. Please help me on this.
    Thanks&Regards
    Debi

    Originally Posted by DParkes
    Can you try this from the standalone GWCheck, Tommy and I think the server
    side is broken for this specific operation
    Cheers Dave
    Dave Parkes [NSCS]
    Occasionally resident at http://support-forums.novell.com/
    Awesome. Local GWCheck works when you specify a user that is on the same post office as the library. The server task does not work even though the user is on the same po. Is this a confirmed bug?

  • Hide Quota Settings in Exchange ECP for Helpdesk Administrator

    Have the following:
    Windows 2012r2 on top Exchange 2013 mbx
    We have to delegate admin role for helpdesk admin. But we want to hide Quota settings in User mailbox properties. 
    1,created a custom role based on the parent role "LJ Mail Recipients"
    2,remove other cmdlets than the Mailbox Statistics, 
    3,remove other parameters other than -*Quota*
    4,assign the custom role to the helpdesk admin
    I could see still the Mailbox Usage appears, how to hide the mailbox usage from user properties.
    Please help!
    Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

    Hi aganesh007,
    Thank you for your question.
    There are two sentences which confused me, I want to get deeply state:
    But we want to hide Quota settings in User mailbox properties. 
    remove other parameters other than -*Quota*
    I will give a solution to meet your requirement which is “remove other cmdlets than the Mailbox Statistics”
    a. Create a role which is Mailbox Statistic:
    New-Managementrole –Name “LJ Mail Recipient” –parent “Mail recipients”
    Get-ManagementRoleEntry “LJ Mail Recipient \*” | where {$_.name –ne “Get-MailboxStatistics”} | Remove-ManagementRoleEntry
    Then we could type “A”.
    b. Customized role group and Role was add  role group
    New-RoleGroup –Name “Manage Recipients for Helpdesk” –Roles
    “LJ Mail Recipient” –RecipientOrganizationalUnitScope “contoso.com/Users”
    c. Add the user you want to grant this connect-mailbox permission to this role group through EAC
    When we add user to Manage Recipients for Helpdesk, we could check if we could see mailbox usage.
    If there are any questions regarding this issue, please be free to let me know. 
    Best Regard,
    Jim

  • Exchange 2013 CU7 ECP 500 Unexpected Error

    I get the error "500 Unexpected Error" when i try to Login to the Exchange ECP. but OWA is normal,
    Plese help me.
    Exchange error log:
    System.Configuration.ConfigurationErrorsException: “”(hexadecimal value 0x03)is an invalid character. Line 1, position 1 (C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\ecp\quarantine\web.config line 1) ---> System.Xml.XmlException: “”(hexadecimal
    value 0x03)is an invalid character. Line 1, position 1
        System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
        System.Xml.XmlTextReaderImpl.ParseRootLevelWhitespace()
        System.Xml.XmlTextReaderImpl.ParseDocumentContent()
        System.Configuration.XmlUtil..ctor(Stream stream, String name, Boolean readToFirstElement, ConfigurationSchemaErrors schemaErrors)
        System.Configuration.BaseConfigurationRecord.InitConfigFromFile()
        System.Configuration.ConfigurationSchemaErrors.ThrowIfErrors(Boolean ignoreLocal)
        System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject)
        System.Configuration.BaseConfigurationRecord.GetSection(String configKey)
        System.Web.Configuration.RuntimeConfig.GetSectionObject(String sectionName)
        System.Web.Configuration.RuntimeConfig.GetSection(String sectionName, Type type, ResultsIndex index)
        System.Web.Configuration.RuntimeConfig.get_Authorization()
        System.Web.Security.UrlAuthorizationModule.IsUserAllowedToPath(HttpContext context, VirtualPath virtualPath)
        System.Web.SiteMapProvider.IsAccessibleToUser(HttpContext context, SiteMapNode node)
        Microsoft.Exchange.Management.ControlPanel.EacSiteMapProvider.IsAccessibleToUser(HttpContext context, SiteMapNode node)
        System.Web.StaticSiteMapProvider.GetChildNodes(SiteMapNode node)
        System.Web.XmlSiteMapProvider.GetChildNodes(SiteMapNode node)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
        Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
        System.Web.UI.Control.LoadRecursive()
        System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
        System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
        System.Web.UI.Page.ProcessRequest()
        System.Web.UI.Page.ProcessRequest(HttpContext context)
        System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
        System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
        System.Configuration.ConfigurationSchemaErrors.ThrowIfErrors(Boolean ignoreLocal)
        System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject)
        System.Configuration.BaseConfigurationRecord.GetSection(String configKey)
        System.Web.Configuration.RuntimeConfig.GetSectionObject(String sectionName)
        System.Web.Configuration.RuntimeConfig.GetSection(String sectionName, Type type, ResultsIndex index)
        System.Web.Configuration.RuntimeConfig.get_Authorization()
        System.Web.Security.UrlAuthorizationModule.IsUserAllowedToPath(HttpContext context, VirtualPath virtualPath)
        System.Web.SiteMapProvider.IsAccessibleToUser(HttpContext context, SiteMapNode node)
        Microsoft.Exchange.Management.ControlPanel.EacSiteMapProvider.IsAccessibleToUser(HttpContext context, SiteMapNode node)
        System.Web.StaticSiteMapProvider.GetChildNodes(SiteMapNode node)
        System.Web.XmlSiteMapProvider.GetChildNodes(SiteMapNode node)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateDataContract(SiteMapNode sNode)
        Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
        Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
        System.Web.UI.Control.LoadRecursive()
        System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
        System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
        System.Web.UI.Page.ProcessRequest()
        System.Web.UI.Page.ProcessRequest(HttpContext context)
        System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
        System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    System.Xml.XmlException: “”(hexadecimal value 0x03)is an invalid character. Line 1, position 1
        System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
        System.Xml.XmlTextReaderImpl.ParseRootLevelWhitespace()
        System.Xml.XmlTextReaderImpl.ParseDocumentContent()
        System.Configuration.XmlUtil..ctor(Stream stream, String name, Boolean readToFirstElement, ConfigurationSchemaErrors schemaErrors)
        System.Configuration.BaseConfigurationRecord.InitConfigFromFile()
        System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)
        System.Xml.XmlTextReaderImpl.ParseRootLevelWhitespace()
        System.Xml.XmlTextReaderImpl.ParseDocumentContent()
        System.Configuration.XmlUtil..ctor(Stream stream, String name, Boolean readToFirstElement, ConfigurationSchemaErrors schemaErrors)
        System.Configuration.BaseConfigurationRecord.InitConfigFromFile()

    Hi,
    According to your description, I understand that cannot login ECP with error “500 Unexpected Error”, however OWA works fine.
    I want to confirm some points, please help to collect the answers for following questions to narrow down the issue:
    1. Are all account or some special accounts experience this question?
    2. Is it works before?
    Firstly, please run following command by EMS to double check whether all services works fine:
    Test-ServiceHealth
    Secondly, please open IIS manager to recycle “MSExchangeECPAppPool” or run “lodctr /r” and “iisreset” as administrator in cmd on all exchange servers.
    Additional, we can rebuild the ECP virtual directories, for your reference:
    http://technet.microsoft.com/en-us/library/ff629372(v=exchg.141).aspx
    If the issue still exists, we can collect the IIS log except the event warning log.
    Best Regards,
    Allen Wang

  • Exchange 2013 ECP "500 Unexpected Error" after Updates

    Hi *,
    after installing the latest Server 2012 Updates, i get the error "500 Unexpected Error" when i try to Login to the Exchange ECP. There wer no changes to the URL or front-/backend.
    I also tried the Workaround focussed over here: http://social.technet.microsoft.com/Forums/exchange/en-US/777b51ee-330d-43cc-a56e-4614d44aed7b/unable-to-access-owa-or-ecp-something-went-wrong-or-500-unexpected-error?forum=exchangesvrclientsentries but
    there were no entries like CN=Services at the ADSI edit.
    Best Regards
    Max @ Magelan Support

    Hi Max,
    Please double check the port bindings are correct.
    Please try to run lodctr /r and reset IIS as administrator.
    Found a similar thread for your reference:
    Unable to access ECP. -  "500 unexpected error"
    http://social.technet.microsoft.com/Forums/en-US/b4b7c47e-cde4-4c62-8bb1-91a5430d4814/unable-to-access-ecp-500-unexpected-error?forum=exchangesvrclients
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support

Maybe you are looking for