index > Team Foundation Server - General > Adding users/ groups with "/" char in the caption of th...

Adding users/ groups with "/" char in the caption of th...

Hi,

I am running Team foundation RTM.

When I try to add windows domain users to one of the security groups

I get the error:

"Team Foundation Server could not resolve the user 'XXXXX/XXXX'. The user or group might be a member of a different domain , or the server might not have access to that domain. Verify the domain membership of the server and any domain trusts".

I noticed it only happens with users ot group which their caption contains the '/' char.

If I add a user/group which doesn't have this char it works OK.

It's a real problem for my as almost all the users have the char in their caption because of the organization policy which says that the pattern should be:

MyProject/MyName

The only workaround I found so far is creating a new security group in the active directory for each user giving it a name without a '/' in the caption, but I have to add over 100 users , and this is a real problem !

Any ideas how to work it out better ?

Thanks,

Eli Ofek.

Eli Ofek

I am currently trying to create a test AD environment to reproduce the problem that you are seeing. Unfortunately I am running into some unrelated problems, so it is going to take me longer than I would like to reproduce the problem.

Matthew Hoover

Hi Matt,

The Command Line tool works great, so it's probably a GUI problem.

(which is great for me as I can continue to migrate the project...)

It would be great if there would be a fix for the gui problem though :-)

Thanks !

Eli.

Eli Ofek

I'm glad that the command line workaround was able to let you make progress. I have been trying to reproduce the problem here, but I have not been able to reproduce it. On thing that would help me to reproduce the problem is if you where to capture the output of TFSSecurity when it adds one of the users with this problem and post it. That should give me enough information to create a user here that will reproduce the problem.

Thank you for your help in tracking down this problem.

--Matt Hoover

Visual Studio Team Foundation

Software Design Engineer

Matthew Hoover

Hi Matt,

Sorry for the late response, out internet connection was down.

I will the tfssecurity command with output redirection to a file

and post you the output tomorrow.

Thanks,

Eli.

Eli Ofek

Hi Matt,

I am posting th tfssecurity output:

This is the command I entered:

tfssecurity /server:tfsapp1 /g+ [TfsBugSample]\Contributors n:devdomain\elio >c:\errlog.txt

This is the output:

notice that the caption of the user I added has number & hebrew chars,

so I hope it will be posted here right ...

_________________________

TFSSecurity - Team Foundation Server Security Tool
(c)Copyright, Microsoft Corporation, 2005. All rights reserved.

The target Team Foundation Server is TFSAPP1.
Resolving identity "[TfsBugSample]\Contributors"...
Angel

[TfsBugSample]\Contributors
Resolving identity "n:devdomain\elio"...
Broken Heart

devdomain\elio (000/ ????? ???? - ??? ????)
Adding 000/ ????? ???? - ??? ???? to Contributors...
Verifying...

SID: S-1-9-1551374245-1204400969-2402986413-2179408616-1-2449649867-2776397388-2211866798-3814730563

DN:

Identity type: Team Foundation Server application group
Group type: Generic
Project scope: TfsBugSample
Display name: Contributors
Description: Members of this group can add, modify, and delete items within the team project.

1 member(s):
Broken Heart

devdomain\elio (000/ ????? ???? - ??? ????)

Member of 1 group(s):
e Angel

[SERVER]\Team Foundation Valid Users

Done.
_________________________

I hope this will help to make the repro work.

Thanks,

Eli.

Eli Ofek

Thank you for posting the output of TfsSecurity. This will be a great help to reproduce the problem.

--Matt Hoover

Matthew Hoover

I too am experiencing the same problem. When I add devdomain\ssmith to the group membership settings and I'm adding a windows user or group, I type in my domain\ntuserid and then it resolves that account with my AD account name, which contains slashes etc.

Here is what my Active Directory account looks like when the security setup resolves my name, but when I run it from the command line with just my nt userid instead, it works fine...

display name in active directory - Wesley, Bob/DEN (bob.wesley@123.com)

B. Wesley

There is a hotfix being worked on for this problem. You will need to contact Customer Support to get the hotfix. This fix will be in SP1. Brian Harry blogged about SP1 at http://blogs.msdn.com/bharry/archive/2006/09/26/772371.aspx. Please note that the SP1 Beta is not a go live license, so take that into consideration.

--Matt Hoover

Matthew Hoover - MSFT

reply 9