Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

ADFS 3.0 is logging error ID 364 about every half an hour

$
0
0

Good day,

maybe someone can help me with one error I get into the ADFS/Admin logs every about 30 minutes two times:

Log Name:      AD FS/Admin

Source:        AD FS

Date:          30.7.2015 19:41:23

Event ID:      364

Task Category: None

Level:         Error

Keywords:      AD FS

User:          xxxx\xxxx

Computer:      xxxx

Description:

Encountered error during federation passive request.

Additional Data

Protocol Name:

 

Relying Party:

 

Exception details:

Microsoft.IdentityServer.Web.InvalidRequestException: Duplicate post parameter \"Res\".

   at Microsoft.IdentityServer.Web.HttpContextUtility.ParsePostBody(String postBody, Boolean caseSensitiveKey)

   at Microsoft.IdentityServer.Web.UI.PageBase..ctor(WrappedHttpListenerContext httpListenerContext, IList`1 customCulture)

   at Microsoft.IdentityServer.Web.UI.AuthenticationPageBase..ctor(WrappedHttpListenerContext context, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, Boolean renderAllOptionsExplicitly, Boolean isSecondStageAuthentication, String username, Int32[] customLocales)

   at Microsoft.IdentityServer.Web.UI.ErrorPage..ctor(WrappedHttpListenerContext context, Exception exception, Boolean isSecondStageAuthentication, String username, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, RelyingParty relyingParty)

   at Microsoft.IdentityServer.Web.UI.ErrorPage.WriteErrorPage(WrappedHttpListenerContext context, Exception exception, Boolean isSecondStageAuthentication, String username, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, RelyingParty relyingParty)

Original exception:

Microsoft.IdentityServer.Web.InvalidRequestException: Duplicate post parameter \"Res\".

   at Microsoft.IdentityServer.Web.HttpContextUtility.ParsePostBody(String postBody, Boolean caseSensitiveKey)

   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationContextFactory.CreateProtocolContextFromRequest(WrappedHttpListenerRequest request, ProtocolContext& protocolContext)

   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.CreateProtocolContext(WrappedHttpListenerRequest request)

   at Microsoft.IdentityServer.Web.PassiveProtocolListener.GetProtocolHandler(WrappedHttpListenerRequest request, ProtocolContext& protocolContext, PassiveProtocolHandler& protocolHandler)

   at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="AD FS" Guidxxxx" />

    <EventID>364</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8000000000000001</Keywords>

    <TimeCreated SystemTime="2015-07-30T16:41:23.116432100Z" />

    <EventRecordID>285</EventRecordID>

    <Correlation ActivityID="{BE40626D-CAE4-0000-C167-40BEE4CAD001}" />

    <Execution ProcessID="3748" ThreadID="4000" />

    <Channel>AD FS/Admin</Channel>

    <Computer>xxxx</Computer>

    <Security UserID="xxxx" />

  </System>

  <UserData>

    <Event xmlns="http://schemas.microsoft.com/ActiveDirectoryFederationServices/2.0/Events">

      <EventData>

        <Data>

        </Data>

        <Data>

        </Data>

        <Data>Microsoft.IdentityServer.Web.InvalidRequestException: Duplicate post parameter \"Res\".

   at Microsoft.IdentityServer.Web.HttpContextUtility.ParsePostBody(String postBody, Boolean caseSensitiveKey)

   at Microsoft.IdentityServer.Web.UI.PageBase..ctor(WrappedHttpListenerContext httpListenerContext, IList`1 customCulture)

   at Microsoft.IdentityServer.Web.UI.AuthenticationPageBase..ctor(WrappedHttpListenerContext context, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, Boolean renderAllOptionsExplicitly, Boolean isSecondStageAuthentication, String username, Int32[] customLocales)

   at Microsoft.IdentityServer.Web.UI.ErrorPage..ctor(WrappedHttpListenerContext context, Exception exception, Boolean isSecondStageAuthentication, String username, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, RelyingParty relyingParty)

   at Microsoft.IdentityServer.Web.UI.ErrorPage.WriteErrorPage(WrappedHttpListenerContext context, Exception exception, Boolean isSecondStageAuthentication, String username, ReadOnlyCollection`1 options, IAuthenticationHandler selectedOption, Boolean otherOptions, RelyingParty relyingParty)

Original exception:

Microsoft.IdentityServer.Web.InvalidRequestException: Duplicate post parameter \"Res\".

   at Microsoft.IdentityServer.Web.HttpContextUtility.ParsePostBody(String postBody, Boolean caseSensitiveKey)

   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationContextFactory.CreateProtocolContextFromRequest(WrappedHttpListenerRequest request, ProtocolContext&amp; protocolContext)

   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.CreateProtocolContext(WrappedHttpListenerRequest request)

   at Microsoft.IdentityServer.Web.PassiveProtocolListener.GetProtocolHandler(WrappedHttpListenerRequest request, ProtocolContext&amp; protocolContext, PassiveProtocolHandler&amp; protocolHandler)

   at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

</Data>

      </EventData>

    </Event>

  </UserData>

</Event>

The service itself works perfectly when logging into Outlook Web App from the internal network and also via Web App Proxy. So there is no problem with the whole service itself. It’s only this logged error I don’t know what it tries to tell me and don’t know how to get rid of it.

All the certificates which are installed have the whole chain of roots installed and also the servers can talk to the internet for revocation. The WAP server is not domain joined but it syncing its clock with the domain.

Thank you for your help.

Regards Robert



Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>