.NET 4.5 Bug in UserPrincipal.FindByIdentity (System.DirectoryServices.AccountManagement)

by

We are experiencing the exact same issue (cross domain queries failing on updating to 4.5) – I would consider this a bug since it breaks existing (4.0) code.

However, in the interest of making it work – taking a look at one of the (now) failing clients, I noticed that there were a bunch of DNS requests for SRV records that were failing, of the form:

_ldap._tcp.MYSERVER1.mydomain.com,INet,Srv
_ldap._tcp.dc._msdcs.mydomain.com,INet,Srv

Modifying our DNS server (the DNS used by the failing clients) to have a forward zone for all mydomain.com traffic to one of the DCs on the domain did resolve the issue.

Using nslookup, the behavior from before (when it was failing) to now (working) was that before those queries would return “Non-existent domain” whereas now they return “* No Service location (SRV) records available for …”. The point of failure seems to be the perceived nonexistence of the domain rather than missing SRV records. Hopefully MS reverts this behavior but in the meantime you might have some luck creating a DNS forward zone if you can control the DNS for the failing clients.

More Related Contents:

  1. Built-in helper to parse User.Identity.Name into Domain\Username
  2. What is the purpose of “return await” in C#?
  3. Validate a username and password against Active Directory?
  4. How do I make calls to a REST API using C#?
  5. Awaiting multiple Tasks with different results
  6. How can I get a list of users from active directory?
  7. Token based authentication in Web API without any user interface
  8. Find Recursive Group Membership (Active Directory) using C#
  9. There is no argument given that corresponds to the required formal parameter – .NET Error
  10. Format A TimeSpan With Years
  11. ASP.NET Core 2.0 LDAP Active Directory Authentication
  12. How does Task become an int?
  13. Is it possible to run a .NET 4.5 app on XP?
  14. Await operator can only be used within an Async method [duplicate]
  15. Creating Directories in a ZipArchive C# .Net 4.5
  16. How to get all the AD groups for a particular user?
  17. Active Directory COM Exception – An operations error occurred (0x80072020)
  18. Create zip file from byte[]
  19. How to check if a user belongs to an AD group?
  20. Error 0x80005000 and DirectoryServices
  21. How to get the logon SID in C#
  22. Thread parameters being changed
  23. The HTTP request is unauthorized with client authentication scheme ‘Ntlm’ The authentication header received from the server was ‘NTLM’
  24. cURL with user authentication in C#
  25. Prevent from displaying of Windows Security window
  26. How do I validate Active Directory creds over LDAP + SSL?
  27. Large Object Heap Compaction, when is it good?
  28. How to get the current user’s Active Directory details in C#
  29. Decompressing password-protected ZIP files with .NET 4.5
  30. Run async method 8 times in parallel

Leave a Comment