0

Hi,

We upgraded to 1.4.2 and when i try to create a new organisation with Exchange i get this error

Error creating organization. See audit log for more details. 

Server was unable to process request. —> Error executing ‘CREATE_ORG’ task on ‘gbo’ ORGANIZATION —> Server was unable to process request. —> This access control list is not in canonical form and therefore cannot be modified.

00:00:01
Domain ID: 2758

00:00:01
Domain Name: gbo.xx

00:00:02
SetAclPermissions
Server was unable to process request. —> This access control list is not in canonical form and therefore cannot be modified.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SolidCP.EnterpriseServer.OrganizationController.CreateOrganization(Int32 packageId, String organizationId, String organizationName, String domainName)

00:00:02
ORGANIZATION_DELETE_ORG

00:00:02
Org ID: 7536

00:00:02
Org Name: gbo

00:00:02
Org ID: 7536

00:00:02
Org Name: gbo

00:00:02
Org ID: 7536

00:00:02
Org Name: gbo

00:00:02
BLACKBERRY_GET_BLACKBERRY_USERS

00:00:02
BLACKBERRY_GET_BLACKBERRY_USERS_COUNT

00:00:02
ORGANIZATION_CLEANUP_ORGANIZATION_ENTERPRISE_STORAGE

00:00:02
Org ID: 7536

00:00:02
Org Name: gbo

00:00:02
REMOTE_DESKTOP_SERVICES_CLEANUP

00:00:02
ORGANIZATION_FOLDERS_DELETE_ALL_FOLDERS

00:00:02
ORGANIZATION_FOLDERS_DELETE_FOLDERS_BY_TYPE

00:00:04
Org ID: 7536

00:00:04
Org Name: gbo

00:00:04
ORGANIZATION_DELETE_DOMAIN

00:00:04
Org ID: 7536

00:00:04
Org Name: gbo

00:00:04
Domain ID: 2758

00:00:04
Domain Name: gbo.xx

00:00:04
Domain ID: 2758

00:00:04
Domain Name: gbo.xx

00:00:04
Server was unable to process request. —> This access control list is not in canonical form and therefore cannot be modified.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SolidCP.EnterpriseServer.OrganizationController.CreateOrganization(Int32 packageId, String organizationId, String organizationName, String domainName)

[10/17/2018 3:56:21 PM] ERROR: HostedSolution
System.InvalidOperationException: This access control list is not in canonical form and therefore cannot be modified.
at System.Security.AccessControl.CommonAcl.RemoveQualifiedAces(SecurityIdentifier sid, AceQualifier qualifier, Int32 accessMask, AceFlags flags, Boolean saclSemantics, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType)
at System.Security.AccessControl.DiscretionaryAcl.RemoveAccess(AccessControlType accessType, SecurityIdentifier sid, Int32 accessMask, InheritanceFlags inheritanceFlags, PropagationFlags propagationFlags, ObjectAceFlags objectFlags, Guid objectType, Guid inheritedObjectType)
at System.Security.AccessControl.DirectoryObjectSecurity.ModifyAccess(AccessControlModification modification, ObjectAccessRule rule, Boolean& modified)
at System.Security.AccessControl.DirectoryObjectSecurity.RemoveAccessRule(ObjectAccessRule rule)
at System.Collections.Generic.List`1.ForEach(Action`1 action)
at SolidCP.Providers.HostedSolution.ActiveDirectoryUtils.RemoveIdentityAllows(String objectPath, IdentityReference identity)
at SolidCP.Providers.HostedSolution.ADPermission.SetOUAclPermissions(OrganizationProvider orgProvider, String organizationId, String rootDomain, String rootDomainPath)
at SolidCP.Providers.HostedSolution.OrganizationProvider.SetOUAclPermissions(String organizationId)

Answered question