@atripp

What you've asked is how I've been deleting it. I go into the UI, I see the bad package version, and then delete it. I don't check "delete all versions" because it would wipe the good one. When I do delete it, I am re-directed to the main page for the feed. Once I do this, I search for the package, and I still see it there in the UI as if nothing has happened.

Of course, all versions go away when i delete all versions of the package.... that is until I promote from another feed; then they return.

Hallo,

I've got a package issue that I'm not sure of how to solve:

I manually repackaged a nuget to try and fix a version issue because it has some semantic version problem. This fixed an old package to have a version of 1.0 and 1.0.0 in Proget. Unfortunately this causes download errors now when I use this feed because it can't truly resolve either of those packages. I've since tried to delete the package and all of its versions and run a cleanup. When I promote the package in its original form from the test feed to the main one where the errors are, it re-creates both versions of this package that I had deleted and restores both of their statistics. I'd like to remove the bad version but it doesn't go away, even if I only delete the one I repackaged myself.

How can I get rid of it? I'm on version 5.3.17 (build 19).

Yeah, that's a nightmare and a half and I can see why you did that.

Currently I've tried repackaging the nuget but it brings about other errors, where it restores properly but later on in compile I get build errors. Right now I'm using the legacy version/older version of the nuget URL instead of the current v3 one until they get off of that package and I can remove it from my feed. It follows the format: https://url.domain/nuget/feedName/ instead of https://url.domain/nuget/feedName/v3/index.json .

@atripp

Thank you for that information. I had suspected as much that this might be a nuget problem but did not have enough information to confirm. What do you suggest I do? Should I just repackage the nuget then to fix it? From what I've seen this is a very recent issue and it almost seems better to work around it in code (on our end)

Hello!

I ran into an issue recently with a few packages that I'd like to get more information on how to solve. I noticed that there are a few packages that have a semvar of X.0.0, and instead of showing up with that version in my server, it shows up as X.0 instead and the last 0 is removed. I'll note that all packages I upload to the server are uploaded in bulk to the drop folder I have created for the feed. The server's version is Version 5.3.17 (Build 19).

An example is Owin. The latest version as indicated on Nuget.Org is 1.0.0. I've tested the download of the file from that site manually, and it appears as Owin.1.0.0.nupkg as I'd expect. However When I upload it to my proget server, it reads as 1.0. This in turn is causing weird nuget restore issues for my build server, where the package "cannot be found" because the expected version is 1.0.0 but I only have 1.0.

There are a few other packages with a similar version, like 1.0.0, or 2.0.0, and in those cases the package versions get truncated.

See example below:

I know that you can repackage a nuget file to fix the version? but I'm not sure what exactly that does to the package itself.

What I've tried:

• Manually uploading a downloaded .nupkg directly off of nuget.org after verifying that it has the correct version. From there I go to my feed and upload the file directly. It shows a truncated file version.
• Imported the nuget directly from the Api. This has the most peculiar results when I try to manually import from another feed, as I occasionally have problems getting the version. If I remove the last 0 from the file version it works.

Currently I have a workaround where my build server also uses the official nuget.org api to grab the packages it needs when it can't find them on my proget server. Strangely enough It will restore from there officially with that file version.

@rhessinger --
I did forget to add: I was able to resolve it all after I reset the admin password and reset the services. Once logged in It prompted me to clear cookies for my name account since I am the only one that's been using it.

I have done ask you asked in your last reply. It looks as though renaming the file to just be InedoCore.upack is the solution.

I have since logged back into my instance of Proget and re-enabled LDAP using an administrative service account. From there, it sent be back to the login, where I logged in as myself. In the Permissions page for users and groups, I have added a user in the directory where the users reside, and can confirm that his username does NOT get replaced with his MACHINEACCOUNT$ object. Testing on a few other users seems to indicate that the issue is solved.

Thank you very much for your help.

• I restarted both the service and the IIS webserver after I rolled it back. When I found that did not fix the issue I kicked the OS entirely.
• My upack file name that I installed matched what you had me download off of that feed.
• Extensions Page in the UI:
  
• Extensions folder on the VM:

Trying to install it, but it causes this error when I load the web portal:

[InvalidCastException: Unable to cast object of type 'System.Byte[]' to type 'System.String'.]
   Inedo.Extensions.UserDirectories.Entry.ExtractGroupNames() +260
   Inedo.Extensions.UserDirectories.ActiveDirectoryUser.IsMemberOfGroup(String groupName) +120
   System.Linq.WhereArrayIterator`1.MoveNext() +71
   System.Linq.Buffer`1..ctor(IEnumerable`1 source) +492
   System.Linq.<GetEnumerator>d__1.MoveNext() +116
   System.Linq.Buffer`1..ctor(IEnumerable`1 source) +281
   System.Linq.Enumerable.ToArray(IEnumerable`1 source) +90
   System.Collections.Concurrent.ConcurrentDictionary`2.GetOrAdd(TKey key, Func`2 valueFactory) +87
   Inedo.ProGet.Web.Security.TaskChecker.FindPrivilege(IUserDirectoryUser user, ScopedTask& scopedTask) +42
   Inedo.Security.UserContext.CanPerformTask(ScopedTask& task) +162
   Inedo.ProGet.WebApplication.Security.WebUserContext.IsAuthorizedForTask(ProGetSecuredTask task, Nullable`1 feedId) +199
   Inedo.ProGet.WebApplication.Pages.RootPage.CreateTopPanel() +1006
   Inedo.ProGet.WebApplication.Pages.<CreateChildControlsAsync>d__2.MoveNext() +871
   System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() +31
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +60
   Inedo.ProGet.WebApplication.Pages.<InitializeAsync>d__10.MoveNext() +621
   System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() +31
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +60
   Inedo.Web.PageFree.<ExecutePageLifeCycleAsync>d__46.MoveNext() +234
   System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() +31
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +60
   Inedo.Web.PageFree.<ProcessRequestAsync>d__45.MoveNext() +240
   System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() +31
   System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) +60
   System.Web.TaskAsyncHelper.EndTask(IAsyncResult ar) +59
   Inedo.Web.Handlers.AsyncHandlerWrapper.EndProcessRequest(IAsyncResult result) +33
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +648
   System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step) +213
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +131

I've rolled it back by deleting the .upack file i added to the /Extensions folder and restoring the one I had put in the recycle bin, but I'm still facing this error.

My searches were all done in the advanced search window, and that did not return computer accounts. I also tried in active directory to just look up computer accounts (instead of users) and couldn't return any.

@rhessinger absolutely. my IT team tells me no, and I am in AD looking at the account via Active Directory Users and computers and I do not find anything. I can confirm without a doubt that there isn't a gMSA for this user.

No Reverse-Proxy in front of my server.

RE: [Privileges]

My account is the only account in this user domain that I have explicitly specified, and it has a $ in the name.

Other data fields for my entry are as follows:

| PrincipalType_Code |  Role_Id | Feed_Id | PrivilegeType_Code | UserDirectory_Id |
|G                   |    4     | NULL	  |  G 	               | 6                |

I'm going to take a wild guess and assume then that the PrincipalType_Code value means group account, as actual user accounts show up with code U, and the actual group accounts which contain the users I want to have in the various roles also show up as G.

Product Version: Version 5.3.15 (Build 2)
Extension Version: 1.7.10

Absolutely.

Im in the users and tasks menu adding a permission. Everything looks normal here.

It adds my machine account instead after I click save. Does this for every user in that domain.
.

I verified this with our IT department: user accounts do not have their own gMSA. When I test the search feature it shows me the correct user in the dropdown when I select options. Further testing shows that when I explicitly look for any machine name account, it fails to find it. Truly peculiar.

I'm using Active Directory (LDAP). Within that configuration I only have 1 Domain listed, and only 1 DC hostname. There are not NetBios mappings, and I only have gMSA checked as an option. Search Mode is set to All Trusted Domains

I do not have multiple LDAP directories configured on my ProGet server. I only have the Server LDAP one configured.

Please excuse my delay, I accidentally caused myself AD issues that completely broke the server and made it so I could not go in and check my settings.

To answer your question, I'm using the Server directory where my servers reside, since they're in a different domain and network than the User Domain where the users reside. There's some crossover because I can look up principals in the other domain. Earlier this afternoon I was trying it out and I got one of the users to show up in the permissions screen, however when assigning permissions a few seconds later it reverted back to Machine Accounts.

Afternoon Rich,

I did some more digging after I reset the admin password to see what caused my random issue. It turns out to not be the SPN or the domain controller being inactive.

The source was definitely the AD connection though. The domain I was using did not have LDAPS set up yet (I mistakenly thought that it was), and me selecting LDAPS checkbox in AD settings caused it to break and lock me out of the server. No fun. I've since fixed that issue and everything looks like it is working as expected.

Thank you for your help on this issue.

Hi @atripp ,

Based on the options listed I don't think any of those would be an issue. We did retire one of our DCs, but I made sure to choose a valid one when I began setting it all up, and can verify the address of it. We don't have a proxy in place, and the cert I have used was verified before it was given to me.

Rebooting didn't make this go away either. I switched it back to Network Service as the default, but still get the error. This is what Event Viewer has recorded:

Event code: 4010 
Event message: An unhandled security exception has occurred. 
Event time: 11/9/2020 11:44:51 AM 
Event time (UTC): 11/9/2020 4:44:51 PM 
Event ID: af3bcc1e9e934c97b6f727944820e1d0 
Event sequence: 3 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/2/ROOT-1-132494135555642283 
    Trust level: Full 
    Application Virtual Path: / 
    Application Path: C:\Program Files\ProGet\Web\ 
    Machine name: PROGET 
 
Process information: 
    Process ID: 7884 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Request information: 
    Request URL: https://proget-url:443/log-in?ReturnUrl=/administration 
    Request path: /log-in 
    User host address: 127.0.0.1 
    User: Anonymous 
    Is authenticated: True 
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
 
Custom event details:

and

Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 11/9/2020 11:41:43 AM 
Event time (UTC): 11/9/2020 4:41:43 PM 
Event ID: 9ac92bad88f74897af0715e1c1a1eab8 
Event sequence: 2 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/2/ROOT-1-132494135555642283 
    Trust level: Full 
    Application Virtual Path: / 
    Application Path: C:\Program Files\ProGet\Web\ 
    Machine name: CICD-PROGET 
 
Process information: 
    Process ID: 7884 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Exception information: 
    Exception type: COMException 
    Exception message: The server is not operational.

   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindOne()
   at Inedo.Extensions.UserDirectories.ADUserDirectory.TryGetPrincipal(PrincipalSearchType searchType, String principalName)
   at Inedo.Extensions.UserDirectories.ADUserDirectory.TryGetAndValidateUser(String userName, String password)
   at Inedo.ProGet.WebApplication.ProGetHttpModule.ValidateUser(HttpApplication app, String userName, String password)
   at Inedo.Web.InedoHttpModule.AuthenticateRequestAsync(HttpApplication app)
   at Inedo.Web.InedoHttpModule.ProcessBegin(Object sender, EventArgs e, AsyncCallback cb, Object extraData)
   at System.Web.HttpApplication.AsyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 
 
Request information: 
    Request URL: https://proget:443/nuget/companyIP/Packages()/$count?$filter=IsAbsoluteLatestVersion&semVerLevel=2.0.0 
    Request path: /nuget/companyIP/Packages()/$count 
    User host address: 127.0.0.1 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
 
Thread information: 
    Thread ID: 13 
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
    Is impersonating: False 
    Stack trace:    at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindOne()
   at Inedo.Extensions.UserDirectories.ADUserDirectory.TryGetPrincipal(PrincipalSearchType searchType, String principalName)
   at Inedo.Extensions.UserDirectories.ADUserDirectory.TryGetAndValidateUser(String userName, String password)
   at Inedo.ProGet.WebApplication.ProGetHttpModule.ValidateUser(HttpApplication app, String userName, String password)
   at Inedo.Web.InedoHttpModule.AuthenticateRequestAsync(HttpApplication app)
   at Inedo.Web.InedoHttpModule.ProcessBegin(Object sender, EventArgs e, AsyncCallback cb, Object extraData)
   at System.Web.HttpApplication.AsyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 
Custom event details:

I can validate that my DC is correct. At this point I can't login anymore to get into the administration to do anything. Because I enabled AD the Admin account wont work...

Would removing the Active Directory rows in SQL fix my issue? I want to get rid of this setting so I can start over and figure out where it went wrong.

I'm setting up integrated auth, and there's a directory where most of my users reside where they have a machinename that matches their login name. When I search for users in proget I can easily find them, however when I click OK to submit permissions update it shows their machine account instead.

example:

MyUser@domain.com returns as MYUSER$@domain.com.

How do I filter that out in my settings?