Could not retrieve iView - Error: - -2147024891

Hi,
We r using EP5.0 and we have some applications runnning on EP5.0 which will call some transactions from a SAP HR system. Everything was working fine till yesterday. Suddenly we are getting the error "Could not retrieve iView - Error: - -2147024891" when we tried to use those iViews today. One of the iView's functionality is like calling the Transaction "PZ01" in SAP(who's who).
Can anybody tell me why this is happening? Thanks in Advance.

Hi
No (usefull) answer from SAP yet. For me it looks like the problem is to be found in the communication between IIS and J2EE (SAPJ2EE) because other web-applications on the IIS and the J2EE are working.
Did anybody install MS Security updates before reboot/the problem occured? We did but the uninstall of this update didn't help. The error code is generated by the IIS (I assume) - you can find this error in the MS KBase (http://support.microsoft.com) too. But it didn't help me a lot
Regards
Nicolaj

Similar Messages

Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

When I pull up the Term store in CA or any MySite collection, it works.
When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
Logging Correlation Data xmnv Medium Site=/
Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
The "The caller is not authorized to access the service." message seems pertinent.
Both web apps are using only NTLM auth.
The url for both web apps ends in the same contoso.com domain.
I get the same errors no matter what account I use, including the install account.
Things I've tried:
Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
Giving the root site app pool identity full permissions on the metadata service app.
Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
Made sure IIS auth settings on both sites are identical
Both sites are using the same SSL certificate (though the call to the web service appears to be http)
Reprovisioned the metadata service app with a new database and new app pool identity.
Made sure C2WT is running. Tried it with the service stopped as well.
Web.configs are identical between working and non-working apps.
I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
UPDATE:
Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
Update:
The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
Update:
The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
Removed an old login from SQL that no longer existed in AD because of this ULS error:
System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
bIsDL)
This login was the identity of the application pool that used to run the web app in question.
This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
I changed the authentication method from NTLM to Negotiate.
I am rolling back #3 and #4 to see if the issue resurfaces.
Update:
It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
I think I can. I think I can.

maybe that web app was accidentally created with classic auth?
here's an example of how to create claims based, with classic, and then "doing 2013" claims
#Create the example web application, as mentioned above, either with gui, and pick later, or
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-databaseName$contentDB-securesocketslayer
#If doing for 2013
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-AuthenticationProvider(new-spauthenticationprovider)
-databaseName$contentDB-secureSocketsLayer

Logon Error:Could not retrieve the source file for Port "Main"

Hi All,
We have a port which is blocked due to structural exceptions.When i try to connect to the Exceptions folder
"Main[Exceptions]" the import manager throws an error "Logon Error:Could not retrieve the source file for port "Main".
Any help greatly appreciated

Hi ,
Thanks for your reply.
This is what I see in the log file in the exceptions folder
These are the line I see almost to the end of the log file before they complete field mappings,value addings
          <Failure ts="2008/07/22 00:10:48.326 GMT" tid="1286" entry-no="9114" operation="Create lookups" rc="0x80000001">Illegal value for parameter</Failure>
          <Timer ts="2008/07/22 00:10:48.327 GMT" tid="1286" entry-no="9115" name="Import Lookup" total="0.040819">1</Timer>
          <Trace ts="2008/07/22 00:10:48.327 GMT" tid="1286" entry-no="9116">Import of Lookup Failed.</Trace>
But when I open the same source xml file after downloading to my local folder from Exceptions Structural folder and load manually using IM i get the status as "Ready to import".
Any Help greatly appreciated

Error ADS: com.adobe.ProcessingException:Could not retrieve(200101)getting

Hi,
In our development system CD2(ECC backend system) when I am acessing t-code PHAP_CATALOG_PA->Category Group/Category/Template>Zero Harm>DRA JKSW2>Preview --->Print Layout giving below error.Here PD7( Dev portal ) is acting as frontend.
Error :
ADS: com.adobe.ProcessingException: Could not retrieve(200101)
Message no. FPRUNX001
Diagnosis
An error occurred when Adobe Document Services (ADS) was launched.
System Response
Error message
Procedure
When troubleshooting, follow the steps described in SAP Note 944221.
First check the connection to ADS. You can use the program FP_PDF_TEST_00 to do this. From SAP NetWeaver Release 7.0, the program FP_CHECK_DESTINATION_SERVICE must also run successfully (both with and without the checkbox selected on the selection screen). If this program does not run successfully, there is a error in the configuration.
Please help in this case.
Regards
Nilesh

Hi,
Perform the ADS configuration check as specified in : http://help.sap.com/saphelp_nwmobile71/helpdata/en/43/f0638873b56bede10000000a11466f/frameset.htm
You need to check all the configuration steps to makesure everything is setup right. Also, try after restarting your Java engine where ADS is installed. Check your ADS RFC connection using SM59 tcode, and check whether ADSUSER and ADS_AGENT are not locked.
Try and let know.
Regards,
Shahid.

Error "Could not retrieve process instance" w UWL-GP thru Load Balancer

Hi,
We're using NW'04s EP SP14 for developing our portal website. An external load balancer balances the load between two portal instances CI & DI.
We are getting an Exception "Could not retrieve process instance: contact your system administrator" when we try to access the UWL Requests through the Load Balancer though it is working fine with the direct HostName in the URL.
SAP Note 1026119 did not solve the issue.
Has anyone faced such an issue before?
Thanks.

Hi
I am getting the same error, but when i tried to retrieve the process instance from nwa I see the process instance to be missing. I could not trace the process instance.
Can you please tell me where else can i look for the process instance.
Its very urgent
Thanks and Regards
Anitha

Error: SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='

I'm getting the following error, but it only seems to happen with my 'admin' id. At our company we have a regular user id that we use for daily use that has our email attached to it, and then we have an admin id that has elevated privileges on the
various systems.
I haven't found any trace of this error appearing for anyone else in the system, only for my Admin id. I don't know if it has something to do with not having an Exchange account set up for it, or if there is something else missing. In searching
for this error I can find lots of references to Kerberos, but we don't have that running at this company. I'm not sure why it says Kerberos in the error message.
Any ideas?
THanks.
Ted
P.S. Here is the error:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='Domain\ID', UPN='[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]:
WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access
the service.
at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity)
at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid)
at SyncInvokeUpnLogon(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..

Hi Ted,
What operations(e.g. create a site?) are your performing with your "admin" account, when you are getting this error?
Please check the following article with similar posts, e.g. grant the admin account proper permissions, or modify the config file (please back up the original file in a safe place for recovery in future), etc., let us know results.
http://onefootinthecloud.blogspot.jp/2012/01/save-template-error-no-windows-identity.html
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/efb39291-857c-4a85-b244-56712f11430a/sharepoint-2010-migrated-to-claims-strange-error?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/b4d06b64-a713-480e-a00c-d02a466ad891/claims-to-windows-token-issue?forum=sharepointadminprevious
Thanks,
Daniel Yang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]
Daniel Yang
TechNet Community Support

Could not retrieve the doc with the passed obsolete token(Error: RWI 00323)

Error using WebService API via Tomcat and .NET framework 2.0. Am storing ReportEngine and Session instance memory as suggested but still get this error. How can I reset tokens or increase token limit so this error does not occur.
Inner Exception
Type : BusinessObjects.DSWS.DSWSException, BusinessObjects.DSWS, Version=11.5.4100.0, Culture=neutral, PublicKeyToken=692fbea5521e1304
Message : getDocumentInformation exception (Error: RWI 00323)
Source : DSWS Web Service Consumer
Help link :
ID : R1
WebServiceID :
Operation : reportengine.dsws.businessobjects.com/getDocumentInformation
CallStackTrace : com.businessobjects.rebean.wi.ConfigurationException: Could not retrieve the document with the passed obsolete token. (Error: RWI 00323)
at com.businessobjects.rebean.wi.ReportEngineImpl.getDocumentFromStorageToken(ReportEngineImpl.java:461)
at com.businessobjects.rebean.wi.occa.WebiReportEngine.getDocumentFromStorageToken(WebiReportEngine.java:239)
at com.businessobjects.dsws.WebIntelligenceReportEngineManager.openDocument(Unknown Source)
at com.businessobjects.dsws.wsb.reportengine.WebIntelligenceReportEngineSoapImpl.getDocumentInformation(Unknown Source)
at com.businessobjects.dsws.reportengine.ReportEngineSoapImpl.getDocumentInformation(Unknown Source)
at com.businessobjects.dsws.reportengine.ReportEngineSoapSkeleton.getDocumentInformation(Unknown Source)
at sun.reflect.GeneratedMethodAccessor166.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:402)
at org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:309)
at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:333)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:150)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:120)
at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:481)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:323)
at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:854)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:339)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
at com.businessobjects.dsws.wsc.common.axis.FlashFilter.doFilter(Unknown Source)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
at java.lang.Thread.run(Thread.java:534)
Caused by: com.businessobjects.rebean.internal.util.storage.InternalStorageException: token:we00100000e9816b1c411b is probably too old, could not be found in token history...
at com.businessobjects.rebean.internal.util.storage.ClusterStorageManager.retrieveObject(ClusterStorageManager.java:380)
at com.businessobjects.rebean.wi.ReportEngineImpl.getDocumentFromStorageToken(ReportEngineImpl.java:449)
... 47 more
CauseID : RWI 00323
CauseMessage : Could not retrieve the document with the passed obsolete token. (Error: RWI 00323)
CauseDetail :
CauseException : com.businessobjects.rebean.wi.ConfigurationException
Data : System.Collections.ListDictionaryInternal
TargetSite : BusinessObjects.DSWS.ReportEngine.DocumentInformation GetDocumentInformation(System.String, BusinessObjects.DSWS.ReportEngine.RetrieveMustFillInfo, BusinessObjects.DSWS.ReportEngine.Action[], BusinessObjects.DSWS.ReportEngine.Navigate, BusinessObjects.DSWS.ReportEngine.RetrieveData)
Stack Trace : at BusinessObjects.DSWS.ReportEngine.ReportEngine.GetDocumentInformation(String documentReference, RetrieveMustFillInfo retrieveMustFillInfo, Action[] actions, Navigate navigate, RetrieveData retrieveData)
Thanks

You can reclaim storage token stack space by sending Close action to any document you're done with.
You can increase the storage token stack space by editing the Web Services Provider app dswsbobje.war, the file WEB-INF\classes\webi.properties. Look inside that file for the storaget token stack size setting.
Sincerely,
Ted Ueda

ERROR: Could not retrieve a valid windows identity

When I try to create PowerView reports from BISM connection file, I get error:
<MoreInformation>
<Source>Microsoft.ReportingServices.ProcessingCore</Source>
<Message msrs:ErrorCode="rsErrorOpeningConnection" msrs:HelpLink="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsErrorOpeningConnection&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.3000.0"
xmlns:msrs="http://www.microsoft.com/sql/reportingservices">Cannot create a connection to data source 'TemporaryDataSource'.</Message>
<MoreInformation>
<Source>Microsoft.AnalysisServices.AdomdClient</Source>
<Message/>
<MoreInformation>
<Source>Microsoft.SharePoint</Source>
<Message>Could not retrieve a valid Windows identity.</Message>
<MoreInformation>
<Source>mscorlib</Source>
<Message>WTS0003: The caller is not authorized to access the service.</Message>
</MoreInformation>
</MoreInformation>
</MoreInformation>
</MoreInformation>
From SharePoint logs: I get following exception details:
01/02/2013 11:00:34.17            w3wp.exe (0x0828)        0x2AEC SharePoint Foundation Claims Authentication
bz7l        Medium
SPSecurityContext: Could not retrieve a valid windows identity for username 'DOMAIN\user' with UPN 'user@domain'. UPN is required when Kerberos
constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException: The message could not be dispatched because the service at the endpoint address 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' is unavailable for the
protocol of the address.    Server stack trace:      at System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper&
timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection
connection, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan
timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan
timeout)     at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)     at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage
methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)     at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String
upn, Int32 pid)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().
a1bef09b-025a-208e-cd5e-4ef6678b6d0d
Any help on how to get this resolved would be greatly appreciated.

Hi GuYuming
I have already read the mentioned blog. Code mentioned there gives me the following output.
I have already verified that the c2WTS service is running and it's dependency 'Cryptographic services' is also running.
Where is the root cause? How can I resolve this?
Output of the code on the mentioned blog:
Testing Service c2WTS
+- Service c2WTS found
+- Service c2WTS is running
+- Path of service: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe
+- Config File: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe.config
+- Service Logon: SYSTEM\NT AUTHORITY
----- start of config file ----
<?xml version="1.0"?>
<configuration>
<configSections>
<section name="windowsTokenService" type="Microsoft.IdentityModel.WindowsTokenService.Configuration.WindowsTokenServiceSection, Microsoft.IdentityModel.WindowsTokenService, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
/>
</configSections>
<startup>
<supportedRuntime version="v4.0" />
<supportedRuntime version="v2.0.50727" />
</startup>
<windowsTokenService>

<allowedCallers>
<clear />
<add value="WSS_WPG" />
</allowedCallers>
</windowsTokenService>
</configuration>
----- end of config file ----
Retrieving security groups/users allowed to use the service from config file
+- WSS_WPG
Trying to login .........
Using current Windows Credentials
***** c2WTS could not provide a valid Windows Token. Reason: WTS0003: The caller is not authorized to access the service.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.<>c__DisplayClass1.<UpnLogon>b__0(IS4UService_dup channel)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
at c2WTSTest.Form1.button2_Click(Object sender, EventArgs e)
Now Verifying if user DOMAIN/monish has rights on c2WTS
+- User DOMAIN/monish has no access to the service
*** Analysis Complete ***
Monish Gupta

Error: Could not retrieve deployment system configuration

Hi,
when I'm trying to list deployed components in the deployment perspective of my NW Developer Studio (7.2), I get the following error. It seems that the NW server is not reachable, but I had a look at the management console on the server - everything is running.
Exception occurred during the 'List Components' operation.
Cause:Could not retrieve deployment system configuration for CE1. Please check if the system is running.
Exception:
com.sap.ide.eclipse.deployer.api.APIException: Could not retrieve deployment system configuration for CE1. Please check if the system is running.
     at com.sap.ide.eclipse.deployer.DeployerPlugin.getCurrentServerInfo(DeployerPlugin.java:105)
     at com.sap.ide.eclipse.deployer.DeployerPlugin.getClient(DeployerPlugin.java:201)
     at com.sap.ide.eclipse.deployer.ui.UIUtils.getClient(UIUtils.java:212)
     at com.sap.deployment.ui.nodes.SystemNode.fetchData(SystemNode.java:84)
     at com.sap.deployment.ui.nodes.SystemNode.refresh(SystemNode.java:78)
     at com.sap.deployment.ui.view.RepositoryJob.run(RepositoryJob.java:26)
     at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55)
In addition, I noticed that if I add the NW server in the developer studio (preferences > SAP Java AS), only on server instance is listed (SCS01). Normally (after NW installation), two instances have been listed there.
The error prevents to deploy anything from within the developer studio. Does anyone have a clue about that? Thanks in advance!

The problem I faced was related but just slightly different - solution is below. This is really only an issue if your AS Java server is on a different server than your NWDS and a firewall is active.
Error when trying to publish ConverterWeb demo project from local dev machine CE 7.2 Netweaver Developer Studio to server CE 7.2 AS Java was:
Could not retrieve deployment system configuration for CE1. Please check if the system is running.
[ERROR: 7/10/10 10:58 PM /userOut/daView_category (eclipse.UserOutLocation)
Thread[Thread-22,5,main]]
Issue is a firewall problem. Solution is:
1) remove default SAP AS Java from NW Developer Studio (Windows -> Preferences -> SAP AS Java
2) shutdown NWDS
3) open ports 50113 (port for instance 1), 50013 (port for instance 0), 50004 (deploy port) and 5000 (http for NWASJAVA) on the AS Java server.
4) open NWDS
5) add SAP AS Java in NWDS (Windows -> Preferences -> SAP AS Java: host - 192.168.1.16, instance - 1, Domain - Default
6) add SAP AS Java in NWDS (Windows -> Preferences -> SAP AS Java: host - 192.168.1.16, instance - 0, Domain - Default
7) publish ear.
8) navigate to: http://192.168.1.16:50000/ConverterWeb/
obviously you'll need to replace the internal ip with the ip of your server.
I think this firewall info is somewhere in the docs.
Edited by: adamtarshis on Jul 11, 2010 8:16 AM

IOS Packaging Error: Could not retrieve certificate chain from keystore

Hi all,
I'm currently evaluating Flash Builder 4.5, with an eye toward prototyping on iOS (since lots of folks here know Flash and ActionScript, but only a couple of us use XCode and Objective-C). I'm currently looking at the Hello World tutorial...
http://www.adobe.com/devnet/flash-builder/articles/hello-world.html
I've built and tested on desktop, and am now trying to package the app to test on iOS. However, when I run the device configuration I get a dialog with the following...
'Launching FlashTest' has encountered a problem.
Error occurred while packaging the application:
could not retrieve certificate chain from keystore
It then shows me the usage text for adt. I have no idea what the problem is.
I've imported the same certificate I use to deploy through XCode, and have created an AppID and provisioning profile specific for my test app.
Thoughts?
p.s. - How do I change my forum name?

i understood why
I had the same problem
i solved in this way
before exporting the *.p12 file i chained the certificate to the key by selecting it in the key panel and importing from the file menu the certificate
in this way key and certificate are associated
at this poin i created the p12 file and it worked fine!!!!

Error could not retrieve the virtual desktop template details

Dear Sir&Madam
I have windows server 2012 R2 DataCenter and I installed Hyper-v , after that i create Template , then I make Preper Shutdown (in C:\windows\System32\SysPrep\SysPrep.exe) Run As Administrator, then choose Generalized , Then Shutdown ,when I make a collection
I got this error (error could not retrieve the virtual desktop template ) please is there any solution for this issue it is very Urgent !!!!!!!!!!!!
Best regards
Rawa Zangana

Hi,
Thank you for posting in Windows Server Forum.
From the error description it suspects that there is some configuration issue. Also agree with Jeremy, please check whether it has 1024 MB of memory. Then suggest you to recheck the steps with below link and then verify the result.
You can run the following command line:
Windows 7: %windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown
Windows 8: %windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /mode:vm
Deploying VDI for RDS 2012 / 2012R2 – Part II – Publishing a Windows 7 Pooled Desktop
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

ISync will not start with error "Could not retrieve .Mac config"

iSync fails when run from .Mac System Preferences with message
"There was a problem with the sync operation
Could not retrieve .Mac configuration."
However, Backup and iDisk access are successfull.
Dual G5 Etc. Mac OS X (10.4.7)

iSync does not run from a System Preferences pane, but .Mac Sync does.
This is actually a .Mac Sync issue, not an iSync issue. Since the release of Mac OS X 10.4 about 19 months ago, the synchronization of selected content to and through .Mac has been the responsibility of .Mac Sync. You may want to post you query here, instead:
http://discussions.apple.com/forum.jspa?forumID=957

Could not retrieve the document with the passed obsolete token.

Hi,
Issue is with the specific report not able to execute when the query is cancelled and getting an error when you are cancelling an already executing query.
Receiving an error message during running one of our report in the
following way:
- Run the Webi report
- Select the value for 8 prompts
- Click on cancel
- try to re-run by clicking on re-fresh and receive an error message.
The error message is the following:
"Could not retrieve the document with the passed obsolete token (Error: RWI 00323) (Error: INF)"
Till now we have made the following changes:
This might be caused by a storage token that identifies a document state, which is no longer available in the storage tokens stack.
In the webi.properties file, increased the value of storage tokens stack size.
1. Edit the webi.properties file found in the following location:
u2022 <Installed dir>\program files\businessobjects\BOenterprise115\Web services\en\dsws_webservice_boe\data\asemble\dsewsBobjJava\src\WEB-INF\classes\webi.properties.
2. Add or change the following variables:
u2022 WID_FAILOVER_SIZE (This sets the maximum number of tokens to keep in memory. It is 10 by default.)
u2022 WID_STORAGE_TOKEN_STACK_SIZE (this sets the maximum number of tokens stored on disk. It is 10 by default.)
u2022 Deleted cookies.
u2022 Add the Java Runtime Parameter value from following path:
Start - > Control Panel-> Java -> Java Applet Runtime Settings
Click on View.
Add the Java runtime Parameter value: Xmx200.
It is not a machine specific issue however it is intermittent.
Please advice.
Regards,
Pradnya Kokil

Hi Pradnya,
Following solutions might help you to resolve the issue.
Solution1:
To achieve optimum performance, the developer should limit the number of new windows that can be opened using the OpenDocument function, particularly if using it within the drill function.
If you must open a new window each time, you can increase the number of document instances available on the system by modifying parameters in the webi.properties file:
1. On the Business Objects server, navigate to the following directory:
C:\Program Files\Business Objects\Tomcat\webapps\businessobjects\enterprise115\desktoplaunch\WEB-INF\classes
2. Open the webi.properties file using a text editor.
3. Uncomment the FAILOVER_SIZE=10 line by removing the # from the beginning of the line.
4. After FAILOVER_SIZE, add the following:
STORAGE_TOKEN_STACK_SIZE=40
5. Save the file.
6. Restart the application server
Solution2:
Do not use Control Key + N or File New from Browser for invoking new instance of Browser
Avoid opening Infoview by Hyperlinks.
Alternatively, by setting logontoken.enabled property in web.xml for desktop.war, will stop users allowing using old token
Locate web.xml file in desktop.war file deployed on your application server
Locate the following string in web.xml:<param-name>logontoken.enabled</param-name>
Change the <param-value> for logontoken.enabled from true to false (forexample, <param-value>false</param-value>)
Save and close the file
Restart the web application server to apply the changes
Regards,
Sarbhjeet Kaur

Could not retrieve Enterprise Global Template - Load balancer issue

Hi,
We have 4 Project Server 2010 servers. The 4 web servers are load balanced by networking team with sticky session configured.
When we try to connect to the Project Server using MPP 2007 SP2, it fails saying 'Could not retrieve Enterprise Global template'. It works perfect when we point to a specific server by specifying the IP address for server name in the 'hosts'
file.
Earlier we observed some errors in the event viewer related to the SharePoint's internal load balancer for which restarted the 'Project Server Application' on each web server and it got fixed.
Now, the only entries that we see related to load balancer are as mentioned below as Information (not errors).
SharePoint Web Services Round Robin Service Load Balancer Event: Initialization
Process Name: w3wp
Process ID: 15080
AppDomain Name: /LM/W3SVC/539065287/ROOT-1-130462463500778047
AppDomain ID: 2
Service Application Uri: urn:schemas-microsoft-com:sharepoint:service:ae7c7ee5c09b4e8198bdbb1ecb8c1c1b#authority=urn:uuid:9f626d347784423eb14bde4a1f4d13fc&authority=https://lonms12546:32844/Topology/topology.svc
Active Endpoints: 4
Failed Endpoints:0
Endpoint List:
http://lonxxx2532:32843/ae7c7ee5c09b4e8198bdbb1ecb8c1c1b/PSI
http://lonxxx2545:32843/ae7c7ee5c09b4e8198bdbb1ecb8c1c1b/PSI
http://lonxxx2546:32843/ae7c7ee5c09b4e8198bdbb1ecb8c1c1b/PSI
http://lonxxx2566:32843/ae7c7ee5c09b4e8198bdbb1ecb8c1c1b/PSI
Could the issue be due to network load balancer?
Could the issue be due to Sticky session configuration on the load balancer.?
How can we get to the root cause of the issue?
Which logging category should we set to 'Verbose' that can give us some hint.
Update: We tried to capture the requests through fiddler and observed that when fiddler is running on the client computer then the connection works perfectly fine even through the load balancer. Probably fiddler is reformatting the SOAP
envelop of the web service requests the way it should before sending the request to the server.
If we do not run fiddler and run some other similar tool (like Charles) then it again gives the issue and the request stucks at /PWA/_vti_bin/psi/winproj.asmx
We ran Wireshark on the servers and found the following for that web service call:
[TCP Previous segment not captured] Continuation or non-HTTP traffic.
Please let me know if someone could provide any hint what can be done next.
Regards, Amit Gupta

There are several ways to configure your load balancer. I would suggest that you work with the network engineer, the load balancer vendor and your project administrator to resolve this issue.
Basically you need URL to be resolved correctly. Also, I don't believe PS2007 did a good job handling load balancing, so you may need to bring someone in good with IIS and see they can tweek IIS to manage the cache better.
As I go back and look at your analysis, I think you should probably look at upgrading to Project Server 2013. They made some improvement in load balancing and the management of distributive cache.
I assume you have 4 WFE because you have thousands of project users. Roughly how many you have? Over 1000, over 5000
Have you tried to see if using two load balancing work? How about just one front end. I often see companies scaling SharePoint and Project server to extremes.
Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
Website http://www.WhartonComputer.com
Blog http://MyProjectExpert.com contains my field notes and SQL queries

Seeburger AS2 - DECRYPTION_ERROR - Could not retrieve certificate

Hi
Can anyone suggest a reason why I am getting this error regarding failed Decryption:
Error while parsing AS2 message: DECRYPTION_ERROR # Error while loading decryption certificate: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Could not retrieve certificate TRUSTED\STEVEB\XX.com.seeburger.ediint.edi.EDIMessageException: cannot decrypt message (certificate or private key missing)
I am pretty sure that the configuration is correct...
Configuration:
[View Creator Role|http://i1111.photobucket.com/albums/h469/SBentley2011/ViewCreatorRole.png]
[JCA Connection Factory |http://i1111.photobucket.com/albums/h469/SBentley2011/connectionFactory.png]
[Keystore View|http://i1111.photobucket.com/albums/h469/SBentley2011/keystore.png]
[PI7.1 Config|http://i1111.photobucket.com/albums/h469/SBentley2011/config.png]
BTW I am using PI7.1 ENH 1 and Seeburger 2.5.1
Thanks for looking.
Edited by: Andy Cliff on May 25, 2011 12:40 AM

Hi
Really strange, but no joy at all. Even going for the alternative 'Code Based Access' option described below, I continually get Error:
java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Could not retrieve certificate
_Code Based Access to the SAP Keystore_
Creating/Inserting a New Certificate
1. Create a personalized key store view. Certificates and private key entries should be stored in this
view.
2. Using the Security tab of the key storage service web interface, assign the following list of
permissions to the codebase of the adapter in use:
4. Note that permissions that are view based only need to be set once per view and
codebase/domain combination, but entry based permissions need to be set for each entry in the
view to the codebase/domain!
5. Open the NetWeaver Administrator - Application Resources and select the JCA Connection
Factory for the respective adapter. In the lower pane, select the Configuration Properties and
adjust the adapterUser to an empty String (delete the previously entered name). This disables the
user based access and enables code based access. Do not forget to Save your changes.
The following table lists the adapters and the corresponding codebases/domains:
SEEBURGER Adapter Configuration for SAP NW Process Integration 19
In case you experience errors which read as "Reauthentication failed" or "Error
construction implementation" you might need to restart the J2EE server
u2022 VIEW_ALIASES
u2022 GET_VIEW
u2022 LIST_VIEW
u2022 IS_VIEW_EXISTS
u2022 FIND_ALIAS
u2022 LIST_ENTRY
u2022 READ_ENTRY
u2022 IS_ENTRY_A_KEY
u2022 IS_ENTRY_EXISTS
u2022 CREATE_ENTRY_AT_VIEW (for pending keystores)
4. Note that permissions that are view based only need to be set once per view and
codebase/domain combination, but entry based permissions need to be set for each entry in the
view to the codebase/domain!
5. Open the NetWeaver Administrator - Application Resources and select the JCA Connection
Factory for the respective adapter. In the lower pane, select the Configuration Properties and
adjust the adapterUser to an empty String (delete the previously entered name). This disables the
user based access and enables code based access. Do not forget to Save your changes.

Could not retrieve iView - Error: - -2147024891

Similar Messages

Maybe you are looking for