Sunday, January 27, 2019

Resolving “Could not retrieve a valid windows identity for username with UPN.” error for a user from external domain

In one of my SharePoint/BI farms I got following error when opening a PowerPivot report with data refresh.











In this scenario I had another domain with Forest trust and I faced the error when logging in to SharePoint site with a user account from that domain.
Following is the error message I got from ULS
SPSecurityContext: Could not retrieve a valid windows identity for username '' with UPN ''. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied
Following are the checkpoints
  • Relevant SPN entries are in place : Done
  • Service account is enabled for delegation : Done
  • Name suffix is enabled for routing : Gotcha!!
In my scenario relevant name suffix was disabled. Following is the way to enable it
  • Log in to Domain Controller
  • Navigate to Active Directory Domains and Trusts. Go to Properties & Trusts tab
      

  • Select the relevant domain name & click on Properties.Then navigate to Name Suffix Routing Tab
    

  • Enable it
   














It resolved the error for me!

9 comments:

Robert McCain said...

If you think your spouse is cheating, and you need to hire a real hacker to remotely monitor / hack their phone, recover your stolen bitcoin / any other cryptocurrency, or hack a database and clear bad records with guaranteed privacy, contact easybinarysolutions@gmail.com or whatsapp: +1 3478577580, they are efficient and confidential.

George said...

DO YOU NEED A BITCOIN RECOVERY EXPERT?
Hello, I am George. A bitcoin recovery expert, I work with a group of intellectuals with the aim to help everyone that has been scammed online by Fake Binary Options and Fake Investment companies to gain back their scammed funds. We at Cryptorefunder360 have helped quite a lot of people to recover back their scammed funds after it has been taken from them. Provided you have the right information needed to process the recovery, you do not need to worry anymore. We at Cryptorefunder360@gmail(dot)com, we can help you recover back all the funds that seems to be lost. We have testimonies flowing in from different angles and you might just be the next to testify. Contact us now at CRYPTOREFUNDER360(AT)GMAIL(DOT)COM or WhatsApp us +13349559030. If you need our assistance in recovering your scammed funds.

CREDIT CARDS AND BLANK ATM CARDS FOR PURCHASE TO HELP SOLVE YOUR FINANCIAL NEEDS,KINDLY WHATSAPP US WITH Whatsapp:+1(913) 214-6263 said...

We have specially programmed ATMs that can be used to withdraw money at ATMs, shops and points of sale. We sell these cards to all our customers and interested buyers all over the world, the cards have a withdrawal limit every week.The programmed ATM card withdraw money from each ATM but have a withdrawal limit every week, only your PIN code is in it, it is a high-tech card system. The PROGRAMMED ATM card works on all card-based ATMs, anywhere in the world.
-hack into any kind of phone
_Increase Credit Scores
_western union, bitcoin and money gram hacking
_criminal records deletion_BLANK ATM/CREDIT CARDS
_Hacking of phones(that of your spouse, boss, friends, and see whatever is being discussed behind your back)
_Security system hacking...and so much more. Contact us now and get whatever you want at
Email:creditcards.creditscoreupgrade@gmail.com
whatsapp:+1785 279 3047

George said...

DO YOU NEED A BITCOIN RECOVERY EXPERT?
Hello, I am George. A bitcoin recovery expert, I work with a group of intellectuals with the aim to help everyone that has been scammed online by Fake Binary Options and Fake Investment companies to gain back their scammed funds. We at Cryptorefunder360 have helped quite a lot of people to recover back their scammed funds after it has been taken from them. Provided you have the right informations needed to process the recovery, you do not need to worry anymore. We at Cryptorefunder360@gmail(dot)com, we can help you recover back all the funds that seems to be lost. We have testimonies flowing in from different angles and you might just be the next to testify. Contact us now at CRYPTOREFUNDER360(AT)GMAIL(DOT)COM or WhatsApp us +13349559030. If you need our assistance in recovering your scammed funds.

PROFESSIONAL PROGRAMMERS(FLIP) said...

I am learning a lot all day from your article, Thanks for this special peace of mind that worth millions of dollars for those who understand your article.
Only people of clean hearts can share these types of hidden information to the public freely, same as Hi-Tech programmers have been helping people around the world for obtaining from banks and lenders,
* Personal Loans with bad credit score  
* Credit Card Loans with low score
* mortgage advances
* Car Loans
* Two-Wheeler Loans
* Small Business Loans
* Payday Loans
* Cash Advances

With their UNDETECTED FAKE BANK STATEMENTS still unknown to many individuals you can also join their 209.3k members TELEGRAM GROUP
to share your own opinion with the rest of the groups members.
Thanks once more for this powerful article.

Unknown said...

As a novice in the crypto world, I had a wrong transaction and got ripped off by a scammer through an investment scam, I lost about 0.7 btc and 1.5 eth to him. I spoke to a friend who's a crypto expert and he referred me CLEVERHACKER.HACK@GMAIL.COM, in less than 48 hours after following due procedures by him I got my btc and Eth back, he's a life saver. You can also text him at (803)814-5462

william\ said...

I know an organization who have private investigators for hire who can help you get into your spouse’s phones,emails remotely from your phone they can also help you with your
* credit score
* clearing of criminal record
*increasing of school grades etc
You can confirm for yourself from their website https://wavedrive.tech so you can also give your testimony

james said...

Waow this is unbelievable, it is my first time to be carried away by such a high profile article, I will immediately contact you directly and also to take the advantage to share some latest information about FAKE MALAYSIAN PASSPRT

Linda Lee said...

I would strongly love to recommend the services of the best team of dark web hackers. They are professional and very discreet in carrying out their jobs, they have the best customer service agents and satisfaction at heart. If you have any services you wish to contact them for, go on albertgonzalezwizard@gmail.com OR info@albertgonzalezwizard.com whatsapp +31685248506 AND Telegram:  +31685248506. They help track and monitor your cheating partner's phone without his idea, clear or erase criminal records as well as repair a bad credit score, all social media hacks,funds recovery and many others.