FIM SSPR Troubleshooting: Error 3000 - Value cannot be null

Overview

Attempting to reset a password and/or register for password reset displays the following error message to the end-user.

“An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3000)”

 Reviewing the Forefront Identity Manager Event Log the following errors may appear.

Event viewer logs

FOREFRONT IDENTITY MANAGER EVENT LOG

Event ID: 3 – Source: Microsoft.CredentialManagement.RegistrationPortal

GateLoadAssemblyNotLoadedException

Microsoft.IdentityManagement.CredentialManagement.Portal: System.Web.HttpUnhandledException: ScriptManager_AsyncPostBackError ---> System.ArgumentNullException: Value cannot be null. Parameter name: The string 'GateLoadAssemblyNotLoadedException' does not exist in the resource files at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.CustomizationProvider.GetString(String name) at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.GateLoader.GetString(String name) at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.GateLoader.LoadGate(Guid gateIdentifier) at Microsoft.IdentityManagement.CredentialManagement.Portal.Components.DriverBase.GetCurrentGate() at Microsoft.IdentityManagement.CredentialManagement.Portal.BasePage.ShowCurrentGate(Control container) at Microsoft.IdentityManagement.CredentialManagement.Portal.Reset.MoveToAuthenticationGates() at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) --- End of inner exception stack trace --- at Microsoft.IdentityManagement.CredentialManagement.Portal.Site.ScriptManager_AsyncPostBackError(Object sender, AsyncPostBackErrorEventArgs eventArgs) at System.Web.UI.ScriptManager.OnAsyncPostBackError(AsyncPostBackErrorEventArgs e) at System.Web.UI.PageRequestManager.OnPageError(Object sender, EventArgs e) at System.Web.UI.TemplateControl.OnError(EventArgs e) at System.Web.UI.Page.HandleError(Exception e) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.default_aspx.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)"

Event ID: 3 – Source: Microsoft.CredentialManagement.RegistrationPortal

System.InvalidOperationException

Description: The error page was displayed to the user. Details: Title: Error Message: An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3000) Attributes: Details: System.InvalidOperationException: HttpContext.Current.User.Identity.Name is Null or Empty at Microsoft.IdentityManagement.CredentialManagement.Portal. Components.RegistrationDriver.GetDomainAndUserName(String& domain, String& userName) at Microsoft.IdentityManagement.CredentialManagement.Portal.Components.RegistrationDriver.InitiateRegistration() at Microsoft.IdentityManagement.CredentialManagement.Portal.Registration.Next() at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) ErrorCode: 3000

Event ID: 3 – Source: Microsoft.CredentialManagement.RegistrationPortal

System.ArgumentNullException

Log Name: Forefront Identity Manager Source: Microsoft.CredentialManagement.ResetPortal Event ID: 3 Level: Error Keywords: Classic Description: The error page was displayed to the user. Details: Title: Error Message: An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3000) Attributes: Details: System.ArgumentNullException: Value cannot be null. Parameter name: The string 'GateLoadAssemblyNotLoadedException' does not exist in the resource files at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.CustomizationProvider.GetString(String name) at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.GateLoader.GetString(String name) at Microsoft.IdentityManagement.CredentialManagement.Portal.Common.GateLoader.LoadGate(Guid gateIdentifier) at Microsoft.IdentityManagement.CredentialManagement.Portal.Components.DriverBase.GetCurrentGate() at Microsoft.IdentityManagement.CredentialManagement.Portal.BasePage.ShowCurrentGate(Control container) at Microsoft.IdentityManagement.CredentialManagement.Portal.Reset.MoveToAuthenticationGates() at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) ErrorCode: 3000

 

Resolution

• Disable Kernel Mode Authentication
• IIS Authentication Settings
  • FIM Password Reset Portal: Enable Anonymous Authentication and Disabled Windows Integrated Authentication
  • [FIM2010R2-TROUBLESHOOTING
  • FIM Password Registration Portal: Disable Anonymous Authentication and Enabled Windows Integrated Authentication
  • -SSPR] Error 3000 - IIS Authentication Settings: http://social.technet.microsoft.com/wiki/contents/articles/15429.fim2010r2-troubleshooting-sspr-error-3000-iis-authentication-settings.aspx

 

Additional information

• FIM 2010 R2: Kerberos Authentication Setup: http://social.technet.microsoft.com/wiki/contents/articles/4118.fim-2010-r2-kerberos-authentication-setup.aspx#Password_Registration_Site_amp_Password_Reset_Site

• How to configure an ASP.NET application for a delegation scenario: http://support.microsoft.com/kb/810572

  "Note If Anonymous authentication is enabled, IIS will always try to authenticate by using it first, even if other methods are enabled.  If Anonymous authentication, Integrated Windows authentication, and Basic authentication are all selected, Integrated Windows authentication takes precedence over Basic authentication, after Anonymous authentication."

• Configure Windows Authentication (IIS 7): http://technet.microsoft.com/en-us/library/cc754628(v=ws.10).aspx

• FIM: Anonymous Access cannot be set for the FIM 2010 Password Portal in SharePoint: http://support.microsoft.com/kb/2013939

• Troubleshooting : Maintaining Forefront Identity Manager 2010 R2 - Self-Service Password Reset:  http://technet.microsoft.com/en-us/library/jj134290(v=ws.10).aspx