Unable Windows Identity Foundation in Windows 10 TP

Hi all,
This question has been asked before but I've yet to see anyone describe the exact steps they have attempted to resolve the issue.
Microsoft Dynamics AX 2012 R2 client has a dependency upon Windows Identify Foundation being installed / option enabled.
WIF is not able to be installed on Windows 10 TP as an executable, the same as Windows 8. However, the option to manually register the DLL using the
gacutil option is not working either.
I have also attempted to resolve by running the same PowerShell command line that the AX installer uses to configure WIF.
C:\Program Files\Microsoft SDKs\Windows\v7.0\Bin>gacutil /i "C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll"
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.30729.1
Copyright (c) Microsoft Corporation. All rights reserved.
Assembly successfully added to the cache
PS C:\WINDOWS\system32> Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-Foundation
Enable-WindowsOptionalFeature : Feature name Windows-Identity-Foundation is unknown.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName Windows-Identity-F ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
Thanks,
Kieran.

Similar Messages

Unable to install Windows Identity Foundation on Windows 7

Following installtion guide titled "Setting Up the Development Environment for SharePoint 2010 on Windows Vista, Windows 7, and Windows Server 2008".
I am installing SharePoint Foundation 2010 on Windows 7 Enterprise 64 Bit. Following the guide above, I was able to install all of the prerequisites except for the two hotfixes: KB976462 and KB974405. Ater some research I believe KB976462 is
to be installed after KB974405 so I am troubleshooting this item before. I've downloaded the MSU file (Windows6.1-KB974405-x64.msu) and during the installtion for KB974405 it reports that the installation failed. When I go into the Windows
Update history and check the details for that update attempt it indicates Error Code 80070643. This seems to be a generic failure so I'm having trouble with solving it.
I've searched as best as I could for the solution but the solutions for others I've seen online didn't work for me. I've double checked the prerequisites for the hotfix and have IIS 7.5 as well as .NET Framework 3.5 SP1. I used the .NET
Framework Setup Verification Tool and did not see any issues. The other potention issue I saw was that in the Windows Update screen it says that "Some settings are managed by your system administrator" and automatic updates are turned
off. However, I was given a username and password that has local admin rights and that's what I was able to use to install all of the other items in the guide. Therefore I don't think that would be the issue. I'm really stuck and not sure
at all how to proceed at this point.
When I tried installing SPF 2010 dispite that error, during the wizard I recieved the error "Failed to load dependency Microsoft.IdentityModel of assembly Microsoft.SharePoint". Based on that I saw that KB974405 couldn't be ignored.
Edit: Please see complete error log below.

Below is the complete error log of the installation attempt:
2014-04-20 17:21:49:458 3308 9e8 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:49:458 3308 9e8 Misc   = Process: C:\windows\system32\wusa.exe
2014-04-20 17:21:49:458 3308 9e8 Misc   = Module: C:\Windows\system32\wuapi.dll
2014-04-20 17:21:49:457 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::AddScanPackageService -----------
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ServiceName = Windows Update Standalone Installer
2014-04-20 17:21:49:459 3308 9e8 COMAPI   - ScanFileLocation = C:\31ee30e9c2a50686553b\wsusscan.cab
2014-04-20 17:21:49:464 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\ScanFile\758e58e0-c318-45ba-b6ae-e6b311555e5c\Source.cab:
2014-04-20 17:21:49:473 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:49:479 576 7bc DtaStor Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
2014-04-20 17:21:49:480 3308 9e8 COMAPI   - Added scan package service, ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:480 3308 9e8 COMAPI -------------
2014-04-20 17:21:49:480 3308 9e8 COMAPI -- START -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:480 3308 9e8 COMAPI ---------
2014-04-20 17:21:49:486 576 2484 Agent *************
2014-04-20 17:21:49:486 576 2484 Agent ** START ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent *********
2014-04-20 17:21:49:486 576 2484 Agent   * Online = Yes; Ignore download priority = No
2014-04-20 17:21:49:486 576 2484 Agent   * Criteria = "DeploymentAction='Installation'"
2014-04-20 17:21:49:486 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:49:486 576 2484 Agent   * ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:49:486 576 2484 Agent   * Search Scope = {Machine}
2014-04-20 17:21:49:606 576 2484 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2014-04-20 17:21:49:606 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:49:606 576 2484 PT WARNING: Cached cookie has expired or new PID is available
2014-04-20 17:21:50:227 576 2484 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2014-04-20 17:21:50:227 576 2484 PT   + Offline serviceId = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:21:50:303 576 2484 Agent   * Added update {B78C39B2-C915-4F8C-9780-23F71C14A560}.501 to search result
2014-04-20 17:21:50:303 576 2484 Agent   * Found 1 updates and 62 categories in search; evaluated appl. rules of 129 out of 415 deployed entities
2014-04-20 17:21:50:304 576 2484 Agent *********
2014-04-20 17:21:50:304 576 2484 Agent ** END ** Agent: Finding updates [CallerId = wusa]
2014-04-20 17:21:50:304 576 2484 Agent *************
2014-04-20 17:21:50:305 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI   - Updates found = 1
2014-04-20 17:21:50:307 3308 21ec COMAPI ---------
2014-04-20 17:21:50:307 3308 21ec COMAPI -- END -- COMAPI: Search [ClientId = wusa]
2014-04-20 17:21:50:307 3308 21ec COMAPI -------------
2014-04-20 17:21:52:602 576 7bc DnldMgr *********** DnldMgr: Copy update to cache [UpdateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501] ***********
2014-04-20 17:21:52:602 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:602 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:602 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:603 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:603 576 7bc Handler Detected download state is dsStart
2014-04-20 17:21:52:603 576 7bc Handler Adding Windows6.1-KB974405-x64.cab (entire file) to request list.
2014-04-20 17:21:52:606 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:52:613 576 7bc Misc Validating signature for C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc\Windows6.1-KB974405-x64.cab:
2014-04-20 17:21:52:661 576 7bc Misc Microsoft signed: Yes
2014-04-20 17:21:52:661 576 7bc DnldMgr Asking handler to generate non-range requests.
2014-04-20 17:21:52:661 576 7bc Handler Generating request for CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C in sandbox C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4_ctc
2014-04-20 17:21:52:661 576 7bc Handler Selecting self-contained because update does not have express payload.
2014-04-20 17:21:52:661 576 7bc Handler Selected payload type is ptSelfContained
2014-04-20 17:21:52:661 576 7bc Handler Detected download state is dsHavePackage
2014-04-20 17:21:52:664 576 7bc Handler Request generation for CBS update complete with hr=0x0 and pfResetSandbox=0
2014-04-20 17:21:54:230 3308 9e8 COMAPI -------------
2014-04-20 17:21:54:230 3308 9e8 COMAPI -- START -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:230 3308 9e8 COMAPI ---------
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Allow source prompts: Yes; Forced: No; Force quiet: No
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - Updates in request: 1
2014-04-20 17:21:54:230 3308 9e8 COMAPI   - ServiceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C} Third party service
2014-04-20 17:21:54:231 3308 9e8 COMAPI   - Updates to install = 1
2014-04-20 17:21:54:231 576 2428 Agent *************
2014-04-20 17:21:54:231 3308 9e8 COMAPI <<-- SUBMITTED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:21:54:231 576 2428 Agent ** START ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:21:54:232 576 2428 Agent *********
2014-04-20 17:21:54:232 576 2428 Agent   * Updates to install = 1
2014-04-20 17:21:54:233 576 2428 Agent   *   Title = Update for Windows (KB974405)
2014-04-20 17:21:54:233 576 2428 Agent   *   UpdateId = {B78C39B2-C915-4F8C-9780-23F71C14A560}.501
2014-04-20 17:21:54:233 576 2428 Agent   *     Bundles 1 updates:
2014-04-20 17:21:54:233 576 2428 Agent   *       {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501
2014-04-20 17:21:54:242 576 2428 Agent WARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point
2014-04-20 17:21:54:244 576 2428 Handler Attempting to create remote handler process as [] in session 1
2014-04-20 17:21:54:328 576 2428 DnldMgr Preparing update for install, updateId = {0B05DEF0-BBC7-48EB-BA7A-8AA72411783C}.501.
2014-04-20 17:21:54:331 7904 2290 Misc =========== Logging initialized (build: 7.5.7601.17514, tz: -0700) ===========
2014-04-20 17:21:54:331 7904 2290 Misc   = Process: C:\windows\system32\wuauclt.exe
2014-04-20 17:21:54:331 7904 2290 Misc   = Module: C:\windows\system32\wuaueng.dll
2014-04-20 17:21:54:329 7904 2290 Handler :::::::::::::
2014-04-20 17:21:54:331 7904 2290 Handler :: START :: Handler: CBS Install
2014-04-20 17:21:54:331 7904 2290 Handler :::::::::
2014-04-20 17:21:54:334 7904 2290 Handler Starting install of CBS update 0B05DEF0-BBC7-48EB-BA7A-8AA72411783C
2014-04-20 17:21:54:340 7904 2290 Handler CBS package identity: Microsoft-Windows-Identity-Foundation-Package-TopLevel~31bf3856ad364e35~amd64~~6.1.7600.16394
2014-04-20 17:21:54:342 7904 2290 Handler Installing self-contained with source=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\Windows6.1-KB974405-x64.cab, workingdir=C:\windows\SoftwareDistribution\Download\8709ecf85b29aaabb0f3e3cdc126a9e4\inst
2014-04-20 17:22:20:838 7904 1214 Handler FATAL: CBS called Error with 0x80070643,
2014-04-20 17:22:20:937 7904 2290 Handler FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80070643
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::
2014-04-20 17:22:20:938 7904 2290 Handler :: END :: Handler: CBS Install
2014-04-20 17:22:20:938 7904 2290 Handler :::::::::::::
2014-04-20 17:22:20:940 576 2428 Agent *********
2014-04-20 17:22:20:940 576 b1c AU Can not perform non-interactive scan if AU is interactive-only
2014-04-20 17:22:20:940 3308 21ec COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 576 2428 Agent ** END ** Agent: Installing updates [CallerId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
2014-04-20 17:22:20:940 576 2428 Agent *************
2014-04-20 17:22:20:940 3308 21ec COMAPI   - Reboot required = No
2014-04-20 17:22:20:940 3308 21ec COMAPI   - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
2014-04-20 17:22:20:940 3308 21ec COMAPI ---------
2014-04-20 17:22:20:940 3308 21ec COMAPI -- END -- COMAPI: Install [ClientId = wusa]
2014-04-20 17:22:20:940 3308 21ec COMAPI -------------
2014-04-20 17:22:23:877 3308 9e8 COMAPI ----------- COMAPI: IUpdateServiceManager::RemoveService -----------
2014-04-20 17:22:23:877 3308 9e8 COMAPI   - ServiceId = {758e58e0-c318-45ba-b6ae-e6b311555e5c}
2014-04-20 17:22:23:956 3308 9e8 COMAPI IUpdateService removing volatile scan package service, serviceID = {758E58E0-C318-45BA-B6AE-E6B311555E5C}
2014-04-20 17:22:23:957 576 2220 Agent WARNING: WU client fails CClientCallRecorder::RemoveService with error 0x80248014
2014-04-20 17:22:23:957 3308 9e8 COMAPI WARNING: ISusInternal::RemoveService failed, hr=80248014
2014-04-20 17:22:25:939 576 2484 Report REPORT EVENT: {D1B660E1-6D7E-4434-A011-F61B74BFDEF5} 2014-04-20 17:22:20:939-0700 1 182 101 {B78C39B2-C915-4F8C-9780-23F71C14A560} 501 80070643 wusa Failure Content
Install Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows (KB974405).
2014-04-20 17:22:25:947 576 2484 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
2014-04-20 17:22:25:947 576 2484 Report WER Report sent: 7.5.7601.17514 0x80070643 B78C39B2-C915-4F8C-9780-23F71C14A560 Install 101 Unmanaged
2014-04-20 17:22:25:947 576 2484 Report CWERReporter finishing event handling. (00000000)

Windows identity foundation

how to install windows identity foundation in windows 10..??
Now have problems with install Microsoft Dynamics AX 2012 Client in 1 terminal with Windows 10, and the installer can't launch because show the next message Windows Update Standalone Installer. Installer encountered an error 0x80096002. The certificate for
the signer of the message is invalid or not found.
Help I have provate this aplication for update user of AX 2012.

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Cannot install Windows-Identity-Foundation

Hello, I've tried to install "Windows-Identity-Foundation" feature, but without success (OS is Windows 8.1 Professional).
I can not find this feature in the UI (ControlPanel -> Programs&Features -> "Turn Windows Features on or off").
So I've tried to install it via command line (dism tool).
I've checked feature via executing command "dism /online /Get-FeatureInfo /FeatureName:Windows-Identity-Foundation"
this command line is returning correct output on working machine,
but on my machine it returns:
> Error: 0x800f080c
> Feature name Windows-Identity-Foundation is unknown.
> A Windows feature name was not recognized.
So I can't install it via the "dism /online /Enable-Feature /FeatureName:Windows-Identity-Foundation" command.
That issue is occurs not only with the "Windows-Identity-Foundation", but also with some other features (for example "Legacy Components").
Next I googled that this issue may be fixed via calling "sfc /scannow" to restore the packages,
but "sfc" is ended with message "Windows Resource Protection found corrupt files but was unable to fix some of them.";
the log file contains the next errors:
* STATUS_OBJECT_NAME_NOT_FOUND #5186404# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(
* Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression
(full logs I put in the onedrive http://1drv.ms/1BILQWs )
so that errors are not clear to me,
please guide me how I can try to fix this issue?
any advice is welcome.

Just have tried to execute "InstallFeature" with /Sourceand locate image with windows installation files
>dism /online /enable-feature /featurename:Windows-Identity-Foundation /Source:G:\sources\sxs
and the response:
Error: 0x800f080c
Feature name Windows-Identity-Foundation is unknown.
A Windows feature name was not recognized.
The dism.log file contains errors:
* Failed to get the Update through CBS. - CDISMPackage::Internal_OpenFeature
* Failed to get the underlying CBS Feature - CDISMPackage::OpenFeature
* Feature name windows-identity-foundation is unknown. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Unknown features were specified on the command-line. - CPackageManagerCLIHandler::Private_GetFeaturesFromCommandLine
* Failed to get the Feature List from the command line. - CPackageManagerCLIHandler::Private_ProcessFeatureChange
* Failed while processing command enable-feature. - CPackageManagerCLIHandler::ExecuteCmdLine
Full log file copied to onedrive: http://1drv.ms/18TpVSf .
I am accepting any advice.

Windows Identity Foundation no more available? No Dynamicy CRM working?

Hi,
I am testing Windows 10 TP. I tried to configure Dynamics CRM but it crashes with the exception: "Could not load file or assembly Microsoft.IdentityModel".
The Internet says that I have to install the Feature "Windows Identity Foundation", but this is not listed under Windows 10 TP Features.
Any suggestions?
Regards
Thomas

If installing .NET 4.5 doesn't work, then there is no way to install this functionality. Someone mentioned a workaround, which is to copy the DLL files from a Windows 8.1 install to the Windows 10 install, but there's nothing built in
right now.
The WIF libraries were moved into the base install of .NET 4.5, that's why I suggested installing .NET 4.5 and seeing what happens. If that doesn't work, then either 1) you'll need to wait until Microsoft updates Win 10 with the ability to install
this feature, or 2) copy the DLLs from a Windows 8.1 install of WIF.
Hope that helps!

Windows Server 2012: Installing Windows Identity Foundation runtime

Hello!
I'm trying to install Windows Identity foundation runtime (Windows6.1-KB974405-x64.msu) on a Server 2012 Standard and keep getting this error:
This package installs properly on my Windows 7 prof workstation.
Thank you in advance,
Michael

Hello,
Any reason not to use the following?
(Powershell)
Add-WindowsFeaturewindows-identity-foundation
Regards
MCITP: Enterprise Messaging Administrator 2010 MCTS: Lync Server 2010, Configuring MCSE

SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity. No windows identity for domain\user.

Hi,
We get plenty of error messages:
SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity.
No windows identity for domain\user.
Our SharePoint 2010 environment consists of 2 app and 2 front end servers. We have plenty of SPSecurityContext.WindowsIdentity errors in our SharePoint logs. I found that this is related to C2WTS service. We have this service running under Local System account
and only running on both Front-end servers. We are not using Kerberos in our environment.
My question is should this service be configured with domain account even we are not using Kerberos?
Also should this server be started on App sharepoint servers?
Is any other way to prevent those errors?
Thank you,

Since local accounts are unable to query the domain, and I suspect that the Local System account uses a virtual local account (as opposed to the computer's domain account), then the same would apply to your C2WTS.
Yes, configure a domain account (DEDICATED, since C2WTS requires some VERY elevated privileges), and the C2WTS will be able to do all of its domain lookups.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Windows 10 and Dynamics CRM 2013 Outlook Client - Identity Foundation missing

How can I install/activate the Identity Foundation in Windows 10.
In Control Panel\All Control Panel Items\Programs and Features the feature is missing.
Dynamics CRM 2013 (and 2011) Outlook Client does need the Identity Foundation:
Error is "Could not load file or assembly 'Microsoft.Identity.Model, Version=3.5.0.0 ...
icomedias Austria - Germany

I've had the same problem with the CRM 2011 Plug-in.. It is not possible to install the Windows Identity Framework onto Windows 10 since it was not included as an option in the "Features" menu.
Also - I found this forum entry discussing that exact problem (with no answer, so far):
Windows Identity Foundation not working with Technical Preview
EDIT: Fixed link. Inside of the linked discussion thread, I see this:
"From Windows 8.1 Features Screen:
WIF 3.5 has been superseded by WIF classes that are provided as part of .NET 4.5. It is recommended that you use .NET 4.5 for supporting claims-based identity in your applications.
so i guess they removed it completely in Windows TP"

ERROR: Could not retrieve a valid windows identity

When I try to create PowerView reports from BISM connection file, I get error:
<MoreInformation>
<Source>Microsoft.ReportingServices.ProcessingCore</Source>
<Message msrs:ErrorCode="rsErrorOpeningConnection" msrs:HelpLink="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsErrorOpeningConnection&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.3000.0"
xmlns:msrs="http://www.microsoft.com/sql/reportingservices">Cannot create a connection to data source 'TemporaryDataSource'.</Message>
<MoreInformation>
<Source>Microsoft.AnalysisServices.AdomdClient</Source>
<Message/>
<MoreInformation>
<Source>Microsoft.SharePoint</Source>
<Message>Could not retrieve a valid Windows identity.</Message>
<MoreInformation>
<Source>mscorlib</Source>
<Message>WTS0003: The caller is not authorized to access the service.</Message>
</MoreInformation>
</MoreInformation>
</MoreInformation>
</MoreInformation>
From SharePoint logs: I get following exception details:
01/02/2013 11:00:34.17            w3wp.exe (0x0828)        0x2AEC SharePoint Foundation Claims Authentication
bz7l        Medium
SPSecurityContext: Could not retrieve a valid windows identity for username 'DOMAIN\user' with UPN 'user@domain'. UPN is required when Kerberos
constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException: The message could not be dispatched because the service at the endpoint address 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' is unavailable for the
protocol of the address.    Server stack trace:      at System.ServiceModel.Channels.ConnectionUpgradeHelper.DecodeFramingFault(ClientFramingDecoder decoder, IConnection connection, Uri via, String contentType, TimeoutHelper&
timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection
connection, TimeoutHelper& timeoutHelper)     at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)     at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan
timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)     at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan
timeout)     at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)     at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage
methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)     at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String
upn, Int32 pid)     at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)     at Microsoft.SharePoint.SPSecurityContext.GetWindowsIdentity().
a1bef09b-025a-208e-cd5e-4ef6678b6d0d
Any help on how to get this resolved would be greatly appreciated.

Hi GuYuming
I have already read the mentioned blog. Code mentioned there gives me the following output.
I have already verified that the c2WTS service is running and it's dependency 'Cryptographic services' is also running.
Where is the root cause? How can I resolve this?
Output of the code on the mentioned blog:
Testing Service c2WTS
+- Service c2WTS found
+- Service c2WTS is running
+- Path of service: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe
+- Config File: C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe.config
+- Service Logon: SYSTEM\NT AUTHORITY
----- start of config file ----
<?xml version="1.0"?>
<configuration>
<configSections>
<section name="windowsTokenService" type="Microsoft.IdentityModel.WindowsTokenService.Configuration.WindowsTokenServiceSection, Microsoft.IdentityModel.WindowsTokenService, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"
/>
</configSections>
<startup>
<supportedRuntime version="v4.0" />
<supportedRuntime version="v2.0.50727" />
</startup>
<windowsTokenService>

<allowedCallers>
<clear />
<add value="WSS_WPG" />
</allowedCallers>
</windowsTokenService>
</configuration>
----- end of config file ----
Retrieving security groups/users allowed to use the service from config file
+- WSS_WPG
Trying to login .........
Using current Windows Credentials
***** c2WTS could not provide a valid Windows Token. Reason: WTS0003: The caller is not authorized to access the service.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.IS4UService_dup.UpnLogon(String upn, Int32 pid)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.<>c__DisplayClass1.<UpnLogon>b__0(IS4UService_dup channel)
at Microsoft.IdentityModel.WindowsTokenService.S4UClient.CallService(Func`2 contractOperation)
at c2WTSTest.Form1.button2_Click(Object sender, EventArgs e)
Now Verifying if user DOMAIN/monish has rights on c2WTS
+- User DOMAIN/monish has no access to the service
*** Analysis Complete ***
Monish Gupta

Unable to download Sun Java System Identity Synchronization for Windows

Please any one can help me How can i download Sun Java System Identity Synchronization for Windows
* Sun Java System Directory Server ---------------------able to download
* Sun Java System Directory Proxy Server --------------able to download
* Sun Java System Identity Synchronization for Windows-------------Not able to download
* Sun Java System Directory Editor------------------------able to download
* Sun Java System Directory Server Resource Kit------able to download
Regards
kamal

ISW is already present in the 5.2p4 and 5.2p6 archives.
dn: cn=pswsync,cn=plugins,cn=config
objectClass: top
objectClass: nsSlapdPlugin
objectClass: ds-signedPlugin
objectClass: extensibleObject
cn: pswsync
nsslapd-pluginPath: /export/home/abc/local/ds52p6/lib/psw-plugin.so
nsslapd-pluginInitfunc: pswsync_init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled: off
creatorsName: cn=server,cn=plugins,cn=config
modifiersName: cn=server,cn=plugins,cn=config
createTimestamp: 20090121011643Z
modifyTimestamp: 20090121011643Z
nsslapd-pluginId: Identity Sync for Windows
nsslapd-pluginVersion: 5.2_Patch_6
nsslapd-pluginVendor: Sun Microsystems, Inc.
nsslapd-pluginDescription: Identity Synchronization for Windows Plug-In

Get System Identity Synchronization for Windows working in relication mode

I have got ISW running on DS 5.2 it is all working correctly.
What I want to do is set up a relica DS server with ISW on it as well.
What I have done:
Install DS5.2 on another machine and start replication and it works all data is in the new LDAP server, but I am having problems install the ISW software on the new server.
Steps:
1) On original master with ISW installed and tell ISW of a secondery server. It tell me to install connector an that machine.
2) On my replica server I run "runInstaller.sh" and it all seems to work except when I stop and restart the server I get the followowing errors:
# /etc/init.d/directory start
[11/Aug/2006:15:07:38 +0100] - ERROR<4167> - Startup - conn=-1 op=-1 msgId=-1 - System error Load library /opt/SUNWiswdp/lib/64/psw-plugin.so: error ld.so.1: ns-slapd: fatal: /opt/SUNWiswdp/lib/64/psw-plugin.so: open failed: No such file or directory
[11/Aug/2006:15:07:38 +0100] - ERROR<4140> - plugin_setup - conn=-1 op=-1 msgId=-1 - Configuration error Could not load symbol "pswsync_init" from library "/opt/SUNWiswdp/lib/psw-plugin.so" for plugin pswsync
[11/Aug/2006:15:07:38 +0100] - ERROR<4112> - Bootstrap config - conn=-1 op=-1 msgId=-1 - Configuration error Unable to load plugin "cn=pswsync,cn=plugins,cn=config".
Server not running!! Failed to start ns-slapd process.
/etc/init.d/directory: unable to start the Directory Server 5.2
I have checked and the above files are not installed well SUNWxrcsj and SUNWiswcm have not be installed.
Question:
How do I install ISW on a secondery server. I thought I was following the online docs, but I guess I am missing something.

Hello All,
Waiting for any idea for the long time. I am trying again and again by restoring my directory server zone. I have two whole root zones one i am using for sun portal and communication suite 5 and other is for directory server. They are working fine. but when i try to install the Sun Java System Identity Synchronization for Windows 6.0 on directory server zone. Some time it hangs at 97% while installing core and some time it giving error the installer cannot upload some entries in the template this error comes when i restore my directory server zone.
Can some please give me idea why it giving these error on solaris zone.
Thanks in Advance,
Sikander

Unable to install itunes in windows 7 64 bit - hanging

Unable to install itunes in windows 7 64 bit - screen is hanging after first few steps ...
Also i am unable to uninstall Apple update software. Are these both related.
Now how do i get the software installed( itunes installed in windows 7)

Hey gigipramod,
Thanks for the question. I understand you are experiencing issues installing iTunes. The following resource may provide a solution:
Issues installing iTunes or QuickTime for Windows
http://support.apple.com/kb/HT1926
Thanks,
Matt M.

Unable to login with Jabber Windows

Hi ,
Am unable to login the Jabber Windows Client. Getting the error as "Unable to Communicate With the Server".
Able to login with CUPS & CUCM end user page. CUCM Integrated with LDAP.
While going through the UP Profile logs seen that "Failed to SOAP login".
Tried with restart of CUCM & CUPS several times but no go.
CUCM Version - 8.6.2
CUPS Version - 8.6.1
Tried with CUPC client result also same.
Thanks in Advance

If credentials work on CCMuser CUPSuser I would suspect either some kind of communication problem between the clients and the servers and/or misconfiguration (user/device/line association, device owner, roles, CTI/CCMCIP profiles, etc) on CUCM/CUPS.
Specially because you mention the same happens with CUPC.
HTH
java
if this helps, please rate
www.cisco.com/go/pdihelpdesk

Claims debacle (error) with Term Store: "Could not retrieve a valid windows identity" for all sites in a particular web app.

When I pull up the Term store in CA or any MySite collection, it works.
When I do so in any other site collection (HNSCs, incidentally), It doesn't return any term stores.
My ULS log immediately before and after the "/_vti_bin/taxonomyinternalservice.json/CheckPermission" POST on termstore .aspx triggers the WCF call:
Claims Authentication af30y Verbose Claims Windows Sign-In: Successfully signed-in the the user 'contoso\domainUser' for request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Claims Authentication af30q Verbose Updating header 'LOGON_USER' with value '0#.w|contoso\domainUser' for the request url 'https://sp13-root-prd.contoso.com/_vti_bin/taxonomyinternalservice.json/CheckPermission'.
Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|contoso\domainUser, ClaimsCount=77
Logging Correlation Data xmnv Medium Site=/
Topology e5mc Medium WcfSendRequest: RemoteAddress: 'http://CONTOSOFE3:32843/00e6d55691824965ac223f1d1cfae6d2/MetadataWebService.svc' Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:590e916c-c89a-4f89-9819-a82c97fabcaa'
Claims Authentication bz7l Medium SPSecurityContext: Could not retrieve a valid windows identity for username 'contoso\domainUser' with UPN '[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: WTS0003: The caller is not authorized to access the service. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.UnauthorizedAccessException: WTS0003: The caller is not authorized to access the service. at Microsoft.IdentityModel.WindowsTokenService.CallerSecurity.CheckCaller(WindowsIdentity callerIdentity) at Microsoft.IdentityModel.WindowsTokenService.S4UServiceContract.PerformLogon(Func`1 logonOperation, Int32 pid) at SyncInvokeUpnLogon(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet))..
Claims Authentication g220 Unexpected No windows identity for contoso\domainUser.
The "The caller is not authorized to access the service." message seems pertinent.
Both web apps are using only NTLM auth.
The url for both web apps ends in the same contoso.com domain.
I get the same errors no matter what account I use, including the install account.
Things I've tried:
Deleting and building a new HNSC root web app and site. Error happens in all sites in all web apps except the PBSC hosting MySites.
Giving the root site app pool identity full control of the metadata service app (even though the MySite identitiy doesn't have it)
Giving the root site app pool identity full permissions on the metadata service app.
Comparing database and web app config permissions between dev (where everything works perfectly) and prod (where it does not).
Made sure IIS auth settings on both sites are identical
Both sites are using the same SSL certificate (though the call to the web service appears to be http)
Reprovisioned the metadata service app with a new database and new app pool identity.
Made sure C2WT is running. Tried it with the service stopped as well.
Web.configs are identical between working and non-working apps.
I'm stumped but still Googling. I'm hoping to avoid having to call Micrososft. Any help would be appreciated!
UPDATE:
Interestingly, when I restored the web application from backup (via CA), I ended up with 3 identical "Windows Authentication" authentication providers assigned to the problem web app. Since there was more than one, I was directed to the provider-chooser
page when visiting the site. Upon choosing 1 of the 3, I was authenticated, and *poof*, no more authentication errors and the term store loaded term sets as expected.
Of course, 3 providers was not an ideal state, so I grabbed the one that worked (#1) via get-spauthenticationprovider, and assigned it to the web app via set-spwebapplication, and my problem returned.
I am currently updating the farm to SP1 from June 2013 CU. Fingers crossed.
Update:
The update to SP1 went smoothly, but did not resolve the issue. Also related (I believe) are the random authentication errors when trying to upload images to some libraries, and 401-errors on the accessdenied.aspx page itself.
Update:
The problem is resolved, seemingly after making 4 changes. I'm trying to narrow down which change was the cure, if any:
I installed SP1 on all 6 servers, rebooted and upgraded. This appeared to have no effect.
Removed an old login from SQL that no longer existed in AD because of this ULS error:
System.Runtime.InteropServices.COMException: The user or group contoso\svc_xxxxxxxxx' is unknown., StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.GetFullNameFromLoginEx(String loginName, Boolean&
bIsDL)
This login was the identity of the application pool that used to run the web app in question.
This login was the schema owner of a schema named after itself on every SharePoint database so I changed the schema owner to dbo but left the schema attached.
The problem may have surfaced initially when the app pool identity was changed in CA, but went unnoticed?
Note that the web app had been deleted and recreated many times with a new identity and pool to no avail, but the URL remained the same throughout each attempted fix. Relevant?
Grasping at straws, I changed the app pool identity for this web app to the same one that runs the MySite web app pool as per this only slightly related problem: http://www.planetsharepoint.org/m/preview.php?id=372&rid=34764&author=Vlad+Catrinescu
I changed the authentication method from NTLM to Negotiate.
I am rolling back #3 and #4 to see if the issue resurfaces.
Update:
It doesn't appear to have been the NTLM/Negotiate setting. Web app is currently set to NTLM and all is well. No strange accessdenies, and term Store is still manageable from all sites.
Update: Sorry for the delay. I am administering 6 farms these days. Will update as soon as the final phase of rollbacks happens.
I think I can. I think I can.

maybe that web app was accidentally created with classic auth?
here's an example of how to create claims based, with classic, and then "doing 2013" claims
#Create the example web application, as mentioned above, either with gui, and pick later, or
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-databaseName$contentDB-securesocketslayer
#If doing for 2013
New-SPWebApplication-ApplicationPool$applicationPool-ApplicationPoolAccount$serviceAcct-Name$WebApp-Port
5050
-AuthenticationProvider(new-spauthenticationprovider)
-databaseName$contentDB-secureSocketsLayer

Error while installing "Identity Synchronization for Windows"

Hello All,
I am in the middle of installing Identity Synchronization for Windows and I am running into a probelm.
After I gave the ldap address of the Java Directory server, (which is installed in the same machine that I am installing ISW on), then I specified the "Configuration Root Suffix" , and then I gave the "cn=Directory Manager" credentials, It returns an error saying...
The selected Directory Server is not a configuration
directory server. You must select a directory server that
has "o=netscaperoot". Please note that merely adding the
+"o=netscaperoot" entry will not suffice.+
I am running Solaris 10 (SPARC) on a T2000, and I downloaded the latest version of "Sun Java System Directory Server Enterprise Edition" (6.2 I think it is...is there a way to find out?) and I downloaded ISW (1.1 SP1) from Sun.com...
Anyone else had this problem? Any solutions? Thanks.
-C

That was that !
The proof:
possum@laptop ~/Downloads/Sun/Directory Server $ tar tvzf DSEE.6.2.Solaris-Sparc-full.tar.gz | more
drwxr-xr-x svbld/staff       0 2007-08-21 13:51 DSEE_Directory_Editor/
-rw-r--r-- svbld/staff 3154227 2006-10-23 15:23 DSEE_Directory_Editor/DE_InstallConfigGuide.pdf
-rw-r--r-- svbld/staff 113483 2006-10-23 15:23 DSEE_Directory_Editor/DE_ReleaseNotes.pdf
-rw-r--r-- svbld/staff 9649312 2006-10-23 15:23 DSEE_Directory_Editor/de.class
-rw-r--r-- svbld/staff     178 2006-10-23 15:23 DSEE_Directory_Editor/install.bat
-rw-r--r-- svbld/staff     167 2006-10-23 15:23 DSEE_Directory_Editor/install.sh
drwxr-xr-x svbld/staff       0 2007-08-21 13:53 DSEE_Identity_Synchronization_for_Windows/
-rw-r--r-- svbld/staff     831 2007-08-21 13:53 DSEE_Identity_Synchronization_for_Windows/README.txt
drwxr-xr-x svbld/staff       0 2006-11-07 01:32 DSEE_Identity_Synchronization_for_Windows/installer/
drwxr-xr-x svbld/staff       0 2006-11-07 01:16 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/
drwxr-xr-x svbld/staff       0 2006-11-07 01:17 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/
drwxr-xr-x svbld/staff       0 2006-11-07 01:16 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/
drwxr-xr-x svbld/staff       0 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/
drwxr-xr-x svbld/staff       0 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/
-rwxr-xr-x svbld/staff 186114 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_zh.properties
-rwxr-xr-x svbld/staff 163040 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_es.properties
-rwxr-xr-x svbld/staff 163040 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_es_ES.properties
-rwxr-xr-x svbld/staff 184456 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_zh_TW.properties
-rwxr-xr-x svbld/staff 233399 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_ko.properties
-rwxr-xr-x svbld/staff 233399 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_ko_KR.properties
-rwxr-xr-x svbld/staff 162199 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_de.properties
-rwxr-xr-x svbld/staff 162199 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_de_DE.properties
-rwxr-xr-x svbld/staff 172057 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_fr.properties
-rwxr-xr-x svbld/staff 172057 2006-10-25 14:45 DSEE_Identity_Synchronization_for_Windows/installer/admserv_package/setup_data/l10n/locale/resources/ASSetupResources_fr_FR.propertiesSo, we need both packaging: native PKG and tar.gz ! Great !
I think this thread can be marked as resolved now.

Unable Windows Identity Foundation in Windows 10 TP

Similar Messages

Maybe you are looking for