Last friday we’ve updated the cloud panel to the latest version.
Since than trying to download ‘Distribution Group Permission Report’ or ‘Mailbox Permission Report’ returns Error 500.
We assume it could be an permission problem, but aren’t sure about that.
Checking the logfiles resulted with these lines:
2022-11-08 12:03:59,383 [ERROR] ADPowershell – PSERROR: System.Management.Automation.RemoteException: Es kann kein Anbieter mit dem Namen “Microsoft.ActiveDirectory.Management.dll\ActiveDirectory” gefunden werden. <<>> REASON: ProviderNotFoundException
2022-11-08 12:03:59,384 [ERROR] CloudPanel.Modules.Reports.ExchangeReportModule – Error processing report: System.Exception: An error occurred attempting to get send as permissions for mailbox:(masked) CN=XX,OU=XX,OU=XX,OU=XX,DC=XX,DC=XX,DC=XX…System.Management.Automation.RemoteException: Es kann kein Anbieter mit dem Namen “Microsoft.ActiveDirectory.Management.dll\ActiveDirectory” gefunden werden.
bei CloudPanel.ActiveDirectory.ADPowershell.HandleErrors(Boolean ignoredNotFound, Boolean ignoreAlreadyExist)
bei CloudPanel.ActiveDirectory.ADObjects.Get_ACL(String distinguishedName, String samAccountName)
bei CloudPanel.ActiveDirectory.ADObjects.Get_ACL(String distinguishedName, String samAccountName)
bei CloudPanel.Modules.Reports.ExchangeReportModule.<.ctor>b__1_21(Object _)
After installing Active Directory Users & Computers remote admin tools and rebooting the CloudPanel server, the error persists.
@rechenzentrumkraemer-it-de Will you open powershell and type: “Import-Module -Name ActiveDirectory” and tell me if it imports or gives you error. The exact command it is trying to run is:
Import-Module -Name ActiveDirectory
Then it executes:
Get-ACL -Path "Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/<distinguished name here>"
So if you want to test and your domain name is “lab.com” then you could type:
Get-ACL -Path "Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/DC=lab,DC=com"
Import-Module -Name ActiveDirectory
This does fine but,
Get-ACL -Path “Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/<distinguished name here>”
doesn’t find the dll file.
Output:
+ CategoryInfo : ObjectNotFound: (Microsoft.Activ…ActiveDirectory:String) [Get-Acl], ProviderNotFoundException
+ FullyQualifiedErrorId : ProviderNotFound,Microsoft.PowerShell.Commands.GetAclCommand
When I try:
Get-ACL -Path “ActiveDirectory:://RootDSE/<distinguished name here>”
It works.
Is there anything we’re doing wrong?
@rechenzentrumkraemer-it-de We still cannot produce this but we see others out there having issues running this command as well. Some have suggested it was a bug. Can you tell me what operating system this is running and tell me if you have all the Microsoft & Windows patches? Also if we could do a remote session that will be helpful.
@jdixon It’s running on an Windows Server 2016. All patches are installed, aswell as the latest cloudpanel update.
Of course we can do a remote session.
@rechenzentrumkraemer-it-de Can you please run this and tell me what the “Path” value is:
Get-ACL -Path “ActiveDirectory:://RootDSE/<distinguished name here>”
I’m looking for the value returned under the Path column. I think this is a bug in Windows version 1809 where the Path value returned should contain a .dll at the end but it does not. For example, this is the correct output you should bee in the Path value if querying your root domain:
Microsoft.ActiveDirectory.Management.dll\ActiveDirectory:://RootDSE/CN=Users,DC=***,DC=local
But I am thinking you will get this in your system:
Microsoft.ActiveDirectory.Management\ActiveDirectory:://RootDSE/CN=Users,DC=****,DC=local
You will notice it is missing the .dll at the end which it shouldn’t be. If we switch the code to using ActiveDirectory:: or even AD:: I think we may run into additional uses if anyone is using the format of Lastname, Firstname for the CN attribute in Active Directory.
Can you confirm you are running 1809 and also confirm if you get that Path value it is missing the ‘.dll’?
Running
Get-ACL -Path “ActiveDirectory:://RootDSE/<distinguished name here>”
returns
Microsoft.ActiveDirectory.Management\ActiveDirectory:://RootDSE/CN=Users,DC=****,DC=local
just as you assumed.
But it’s not 1809. We’re running an windows server 2016 with version 1607.
@rechenzentrumkraemer-it-de I am unable to reproduce this on any of my servers but I’m not running that version. I did discover there is a shorthand version we can use which may solve this issue but would require a code update.
@rechenzentrumkraemer-it-de We put this in the new version and you would need to update but you testing it with that powershell command tells us it will work. We were planning on releasing an update today but we found an issue so I would prefer to resolve that and run it on our production before releasing it.
@rechenzentrumkraemer-it-de We have a new release we would like you to install. Please make sure you backup the CloudPanel server and the database before proceeding. If you run into any issues you can always email us at support@knowmoreit.com
Download: https://compsysar.sharefile.com/d-s77cf8d50cab846a4a5defef25bfacc2d
Also since we’ve updated the CloudPanel and the service there is a error message on the webconsole.
CloudPanel detects incompatible versions
It appears the CloudPanel service version does not match the CloudPanel application version. Please make sure that the CloudPanel service has been updated.
Even tough both, the CloudPanel service and the CloudPanel application were updated.
@rechenzentrumkraemer-it-de Can you email support@knowmoreit.com and let’s do a remote session?
