ADFS page stuck at waiting

[schrockmatthew]

Not sure what the issue might be........When I sign in using ADFS after the newest ldapcp.wsp install....The sign in page is stuck at waiting on the adfs page before it states problem with "https://url/_trust/".........Not one error in the sharepoint logs and only see fatal communication errors in even viewer on the Windows Process Activation Service

[Yvand]

Can you capture a Fiddler trace, confirm it hangs on the POST to /_trust?
If so, then you can get its correlation ID and use it to filter SharePoint logs. It should help you understand the cause of the hang.

[schrockmatthew]

Thank you for contacting. Unfortunately, we had to uninstall the ldapcp.wsp and are in the process of building our own people picker via adfs. In the SharePoint logs it would state authenticated successfully but would eventually time out on the _trust page. It would successfully augment the groups correctly as well. In the windows logs however, it would state a .Net fault in the site that used ldapcp. Any further help would be appreciated though.

…

________________________________ From: Yvan Duhamel <[email protected]> Sent: Tuesday, October 1, 2019 9:59:34 AM To: Yvand/LDAPCP <[email protected]> Cc: schrockmatthew <[email protected]>; Author <[email protected]> Subject: Re: [Yvand/LDAPCP] ADFS page stuck at waiting (#99) Can you capture a Fiddler trace, confirm it hangs on the POST to /_trust? If so, then you can get its correlation ID and use it to filter SharePoint logs. It should help you understand the cause of the hang. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#99?email_source=notifications&email_token=AE2F4EYTREEIKZPLK2X4MTLQMNJUNA5CNFSM4I4AXOWKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEABLUYI#issuecomment-537049697>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AE2F4E5OXBNW4RLCXPROPSLQMNJUNANCNFSM4I4AXOWA>.

[Yvand]

Did the problem disappear just after you uninstalled LDAPCP?

[khalilG]

We have the same issue here.
The weird thing is that the first time we installed the ldapcp.wsp solution, we tested on an already opened site and it worked for a while. After closing and reopening the browser, problems showed up.
As a workaround, You can use this code to revert back without uninstalling the solution :
![image](https://user-images.githubusercontent.com/8361028/66045704-8b4a5a80-e524-11e9-8091-c822eeb1f83e.png)
Also, we'll try an older version, we'll update this post to tell if it worked or not.

[schrockmatthew]

Yes but I had to run the sptrusted command again to get it to work as it was before.

…

________________________________ From: Yvan Duhamel <[email protected]> Sent: Wednesday, October 2, 2019 2:04:17 AM To: Yvand/LDAPCP <[email protected]> Cc: schrockmatthew <[email protected]>; Author <[email protected]> Subject: Re: [Yvand/LDAPCP] ADFS page stuck at waiting (#99) Did the problem disappear just after you uninstalled LDAPCP? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#99?email_source=notifications&email_token=AE2F4E2BI5LYRLQXJBKDFWDQMQ2WDA5CNFSM4I4AXOWKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEADU5BQ#issuecomment-537349766>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AE2F4E7JTLODE4TAXGESBGLQMQ2WDANCNFSM4I4AXOWA>.

[Yvand]

Can you also make sure that you visit a LDAPCP administration page (hosted in central administration > security) before you try to load any site.
The reason is that visiting a LDAPCP page will create a configuration object, which may fix this issue

[khalilG]

@Yvand Yes, I visited the administration page on the central administration and, by the way, launched the configuration script available here : [https://ldapcp.com/Configure-LDAPCP.html]

[schrockmatthew]

Ldapcp states in the SharePoint log that configuration is successful. The logs even state successful token and augment of user groups. I believe it’s .Net issue.

…

________________________________ From: Yvan Duhamel <[email protected]> Sent: Wednesday, October 2, 2019 11:06:22 AM To: Yvand/LDAPCP <[email protected]> Cc: schrockmatthew <[email protected]>; Author <[email protected]> Subject: Re: [Yvand/LDAPCP] ADFS page stuck at waiting (#99) Can you also make sure that you visit a LDAPCP administration page (hosted in central administration > security) before you try to load any site. The reason is that visiting a LDAPCP page will create a configuration object, which may fix this issue — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#99?email_source=notifications&email_token=AE2F4E2M73RAFSBXYV5VBJTQMS2G5A5CNFSM4I4AXOWKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEAFCWII#issuecomment-537537313>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AE2F4EZRZYB6MJIBQHBZUWTQMS2G5ANCNFSM4I4AXOWA>.

[khalilG]

When I try to debug on our test environment, we got this issue :

System.StackOverflowException
But no more explanation.

[khalilG]

I finally found a way to deploy the solution and attach breakpoints.
What is remarkable is that it keeps hitting the "Initialize" function again and again until StackOverflow exception is raised.

@Yvand : any idea why it's keeping initializing ?
Thanks.

[Yvand]

In Visual Studio > Debug > Options: can you unckeck "Enable just my code" and break again?
It should show the SharePoint frames in the call stack

[khalilG]

In Visual Studio > Debug > Options: can you unckeck "Enable just my code" and break again?
It should show the SharePoint frames

Will try that now !

[khalilG]

Here are some screenshots :

[khalilG]

As described in the Call Stack, the method "GetUerKeyForEntity" is keeping called again and again. After debugging it, I found that some breakpoints are never reached, as described below :

[Yvand]

I see, the StackOverflow is caused by the elevation of privileges done in method GetUserKeyForEntity.
As you can see in the comment, this elevation of privileges was added in v14 to fix issue #87, unfortunately, in your environment this is causing the StackOverflow, which is bad news.
Can you let me know:

• What is your SharePoint build?
• The configuration of your web app (zones / authentication providers enabled per zone)

[khalilG]

• Farm Build Version : 16.0.4717.1000
• Web App configuration :
  
  
  

[Yvand]

Can you revert your customization of the default sign in page to default sign in page and confirm that you still reproduce the issue?

[khalilG]

I revert back to the default sign in page. When I open my site, I have 2 choices :

If I choose 'Windows Authentication', everything works fine, site is accessible and I can get AD users from the people picker :

But if I choose our trusted identity provider, the error occurs :

[Yvand]

So it is the same issue, assuming this unhandled exception is the StackOverflow caused by the elevation of privileges in GetUserKeyForEntity.

I added this elevation of privileges as part of a larger change to fix issue #87 and I never reproduced this StackOverflow during my tests, but you are 2 to reportedly reproduce it.
Considering this, I will revert the change and publish soon an update with this sole change.

Issue #87 is still mitigated by other changes also introduced in current version in v14, so it's not that bad.

[kalervojankko]

Not sure what the issue might be........When I sign in using ADFS after the newest ldapcp.wsp install....The sign in page is stuck at waiting on the adfs page before it states problem with "https://url/_trust/".........Not one error in the sharepoint logs and only see fatal communication errors in even viewer on the Windows Process Activation Service

Had exactly the same issue right after I ran the Update-SPSolution command as I updated older LDAPCP version to this version.

After two hours of troubleshooting I found this post and then decided to remove LDAPCP with these instructions: https://ldapcp.com/Remove-LDAPCP.html and then installed version 13.0.20190621.905 and everything worked again. I already installed earlier this 13. version to our TEST farm so I knew this shouldn't have any issues.

[khalilG]

Not sure what the issue might be........When I sign in using ADFS after the newest ldapcp.wsp install....The sign in page is stuck at waiting on the adfs page before it states problem with "https://url/_trust/".........Not one error in the sharepoint logs and only see fatal communication errors in even viewer on the Windows Process Activation Service

Had exactly the same issue right after I ran the Update-SPSolution command as I updated older LDAPCP version to this version.

After two hours of troubleshooting I found this post and then decided to remove LDAPCP with these instructions: https://ldapcp.com/Remove-LDAPCP.html and then installed version 13.0.20190621.905 and everything worked again. I already installed earlier this 13. version to our TEST farm so I knew this shouldn't have any issues.

@kalervojankko : will try this Monday and let you know if it succeeded.

[khalilG]

@kalervojankko I just installed the 13.0.20190621.905 version and it seems to be perfectly working.

[Yvand]

@khalilG @kalervojankko this is clearly a regression in v14, I will publish soon v14.1 to fix it, code is ready and I'm running integration tests on it.
Thank you for reporting and updating me with your tests and findings

[Yvand]

@khalilG, @kalervojankko, @schrockmatthew, are you willing to test v14.1 beta and confirm that it resolves the issue?
As I'm not able to repro it, it would be great to have your validation before I publish it.

[kalervojankko]

@Yvand I can test it tomorrow in our TEST farm and will let you know how it goes.

[khalilG]

@khalilG, @kalervojankko, @schrockmatthew, are you willing to test v14.1 beta and confirm that it resolves the issue?
As I'm not able to repro it, it would be great to have your validation before I publish it.

@Yvand Will do that today and let you know if it succeeded.

[kalervojankko]

@khalilG, @kalervojankko, @schrockmatthew, are you willing to test v14.1 beta and confirm that it resolves the issue?
As I'm not able to repro it, it would be great to have your validation before I publish it.

Ok, I have now installed this 14.1.20191007.981 beta version and seems to work. I didn't make any comprehensive testing, but at least it didn't break. :)

[Yvand]

@kalervojankko that's very good news, many thanks for taking the time to test it.
@khalilG I'll wait for your feedback. If it is positive, I'll make the pre-release a normal release, so it will be the version downloaded by default

[khalilG]

@kalervojankko that's very good news, many thanks for taking the time to test it.
@khalilG I'll wait for your feedback. If it is positive, I'll make the pre-release a normal release, so it will be the version downloaded by default

@Yvand I've got some issues with my SharePoint test environment, nothing related to LDAPCP, so seems like I'll not be able to give you a feedback for today, hope things will get better and try to test tomorrow. Thanks.

[Yvand]

@khalilG thanks for the update, please do let me know if you are not able to complete the test by tomorrow

[khalilG]

@Yvand Sorry but I don't think I'll be able to give you feedback today, I'm stuck with another issue. I think if it works for the others, it will be the same for me.
Thank you again for your efforts.

[AmitW02]

I finally found a way to deploy the solution and attach breakpoints. What is remarkable is that it keeps hitting the "Initialize" function again and again until StackOverflow exception is raised. @Yvand : any idea why it's keeping initializing ? Thanks.

Hi @khalilG, How did you find this debugging works? I have same situation, getting overflow exception. and not getting hit on brakepoint. Could you please help me?

[khalilG]

I finally found a way to deploy the solution and attach breakpoints. What is remarkable is that it keeps hitting the "Initialize" function again and again until StackOverflow exception is raised. @Yvand : any idea why it's keeping initializing ? Thanks.

Hi @khalilG, How did you find this debugging works? I have same situation, getting overflow exception. and not getting hit on brakepoint. Could you please help me?

@AmitW02 Sorry, it has been so long since the last time I've worked on this (almost 2 years) and I moved to another position now so I can't help you anymore.

[Yvand]

@AmitW02 this looks like another thread took the lock and does not release it.
What version of LDAPCP.dll exactly are you debugging ?

[AmitW02]

@Yvand Using latest LCAPCP version code

https://github.com/Yvand/LDAPCP/releases/tag/14.1.20191007.981

[Yvand]

@AmitW02 is this issue still present?

[schrockmatthew]

Not for I.

…

________________________________ From: Yvan Duhamel ***@***.***> Sent: Tuesday, November 23, 2021 9:36:12 AM To: Yvand/LDAPCP ***@***.***> Cc: schrockmatthew ***@***.***>; Mention ***@***.***> Subject: Re: [Yvand/LDAPCP] ADFS page stuck at waiting (#99) @AmitW02<https://github.com/AmitW02> is this issue still present? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub<#99 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AE2F4E672IJWESZYTY5E2MTUNORFZANCNFSM4I4AXOWA>. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[AmitW02]

I am good now. Thanks.