Password Reset Error
When trying to enroll in password reset through the portal (Authentication Workflow Registration -> Password Reset AuthN Workflow -> Register) I am recieving the following error:FIM Generic Registration"A service proxy exception was encountered while running the Password Reset application"Error Text: ReadFile failedError Code: 233I've followed the recommendations in the following thread with no success:http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/7d538ef4-a286-481f-8ff1-6e4f886e2f1dI am seeing the same result whether I'm on the FIM Portal Server directly, or a client machine.In addition, if I attempt "Register for password reset" from the Home Page I recieve the following (even less helpful) error:FIM Password Reset Registration"An error occured while processing your request. Please try again later. If this error persists please contact your system administrator."I've already run through the TechNet Doc "Introduction to Password Reset" found here:http://technet.microsoft.com/en-us/library/ee534892(WS.10).aspxAny suggestions?Thanks!-Ryan
January 29th, 2010 2:06am

do u have any issue register/reset without portal? i.e. type the following for registration C:\windows\system32\MsPwdRegistration or MsPwdRegistration -all and reset at the logon screen i want to make sure those are working before adding portal into the pictureThe FIM Password Reset Blog http://blogs.technet.com/aho/
Free Windows Admin Tool Kit Click here and download it now
January 29th, 2010 7:12am

So I see the same result using the command mentioned above. As well as the "Reset Password" option when logging into a domain joined machine.I'm not sure what the next troubleshooting steps should be.Thanks!-Ryan
January 29th, 2010 6:27pm

Anthony,I took a look at your blog (still reading actually :) ) in order to attempt to better understand the password reset process.It seems as though, of the steps you've out-lined (I've copied the first few below) it's failing pretty early on, as in Step 2 and/or 3. I'm just not sure what other configuration, etc. to look at in order to diagnose.Thanks!-Ryan Registration Sequence C:\Windows\System32\MsPwdRegistration.exe auto starts when user logon. It performs some housekeeping routines and call into GF to initiate the registration sequence. GF establishes a secured name pipe to Proxy. Proxy will then.....
Free Windows Admin Tool Kit Click here and download it now
January 29th, 2010 7:39pm

if u restart the FIMPasswordReset service, would the problem goes away? that's a known issueThe FIM Password Reset Blog http://blogs.technet.com/aho/
January 29th, 2010 9:42pm

Anthony,I've already tried that as well, I just tried again in fact, as I had read that as well. It does not solve the problem.Thanks!-Ryan
Free Windows Admin Tool Kit Click here and download it now
January 29th, 2010 9:54pm

thanks for trying. need a bit more info 1. OS 2. IE version #1 if u are using IE6/8, it needs to be in the intranet zone #2 if u are using IE7, it needs to be in the trusted zone # in all case, u need default security settings for the zone, and protected mode OFF Try this. 1. Go to C:\Program Files\Microsoft Forefront Identity Manager\2010\Password Reset Client Service 2. Open the config file with notepad 3. Uncomment that section 4. Change "Warning" and "Error" to "Verbose" 5. Create C:\Logs and grant authenticated users full control on that folder 6. restart FIMPasswordReset 7. C:\Windows\System32\MsPwdRegistration.exe -all A. copy and paste here the exact error you see. B. How soon do u see the error? (<1 second?) C. check event log for error The FIM Password Reset Blog http://blogs.technet.com/aho/
January 29th, 2010 11:45pm

FIM Server is running Server 2008 Standard SP2 (Hosting Sync Service & Portal, SQL db's are on another box) w/ IE8.I also have a Windows7 client that I've been testing from as well.The site is in the intranet zone, with protected mode off.I have attempted with the default security settings as well as:In the Security Setting – Trusted Sites Zone dialog box, select Enable under the menu item, Initialize and script ActiveX controls not marked as safe for scripting.As described in the "Intro to Password Sync" article linked in my original post.I've detailed the exact text of my errors, and when they occur, in my original post. They come up pretty quickly (2-3 seconds). Running "MsPwdRegistration.exe -all" provides the "less helpful" error that I listed above.An Error with Event ID 3 was logged in the Application Log:The description for Event ID 3 from source Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: mscorlib: System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at http://http/ResourceManagementService/MEX that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.Net.WebException: The remote name could not be resolved: 'http' at System.Net.HttpWebRequest.GetRequestStream() at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream() --- End of inner exception stack trace --- Server stack trace: at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream() at System.ServiceModel.Channels.HttpOutput.Send(TimeSpan timeout) at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.SendRequest(Message message, TimeSpan timeout) at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout) at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at System.ServiceModel.Description.IMetadataExchange.Get(Message request) at Microsoft.ResourceManagement.WebServices.MetadataClient.Get(String dialect, String identifier) at Microsoft.ResourceManagement.WebServices.Client.ResourceManagementClient.SchemaManagerImplementation.RefreshSchema() at Microsoft.ResourceManagement.WebServices.Client.ResourceManagementClient.SchemaManagerImplementation.get_Instance() at Microsoft.ResourceManagement.WebServices.Client.ResourceManagementClient.get_SchemaManager() at Microsoft.IdentityManagement.PasswordReset.GinaOperation.GetLoginId(String domainname, String username, UniqueIdentifier& userIdentifier) the message resource is present but the message is not found in the string/message table
Free Windows Admin Tool Kit Click here and download it now
January 30th, 2010 1:23am

you must have specified wrong hostname during installation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Identity Manager\2010\Extensions\Intranet Address: http://fimserver:5725/ If you are on x64 machine, also change the corresponding settings in the 32-bit registry hive restart FIMPasswordReset service after that The FIM Password Reset Blog http://blogs.technet.com/aho/
January 30th, 2010 3:43am

In the registry, the address was listed as http://http://fimserver:5725I've corrected the address in both hives.I am no longer getting the messages listed in the original post.Now I'm getting the following (same message no matter how I attempt to register):FIM Password Reset Registration"An error was encountered. Please call helpdesk or your system administrator for further assistance."I get that error from both the FIM Server and the client machine.I've reviewed the trace log and I am now recieving 2 different errors (different from original tracelog errors). First (based on timestamp) seems to still be looking for the original endpoint address from the registry (http://http://). I've restarted the service twice now and even rebooted the server.The second error in the tracelog is "Microsoft.IdentityManagement.PasswordReset.Utilities.UserFailureException: An unexpected error has occurred. Please contact helpdesk or your administrator."So it seems like we're making progress. However, maybe somehow this change didn't take? Weird. I've searched the registry for any other http://http and it comes back empty.I'm not sure where to look next.
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2010 7:50pm

One more thing....The new error comes up AFTER I click next on the initial registration splash screen. The previous error was coming up in front of the splash screen (so "next" wasn't an option).
February 1st, 2010 7:57pm

go to the FIMService machine open the config file look for externalHostname attribute it should be just the hostname of the server (it needs to be DNS resolvable by the client. so use FQDN if necessary) restart FIMServiceThe FIM Password Reset Blog http://blogs.technet.com/aho/
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2010 8:56pm

I've confirmed that it's correct and resolvable.
February 1st, 2010 9:07pm

I removed the "http://" from the extenalHostname attribute and that seems to have resolved the issue.Thanks for your help Anthony!
Free Windows Admin Tool Kit Click here and download it now
February 2nd, 2010 3:42am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics