Error when using the Live Labs STS

Hello:

I'm trying to use the Live Labs STS, however I'm getting an error when I try to use the issued managed card.

1) I was able to generate the card your site
2) I was able to import the card
3) When I try to signin in the Live Labs Relay, the CardSpaces UI appears correctly.
4) I'm able to choose the card.
5) The CardSpace correcly prompts me for the password (it was a password based managed card)
6) ERROR:
i) The CardSpace UI notifies me with this error message: Your data could not be retrieved from the (...). Check your network connection and verify you have supplied the correct authentication credentials
ii) There are two events in the Application Event Log
1) A token could not be created. Identity provider requested for an unsupported authentication type.
2) There was a failure making a WS-Trust exchange with an external application. Could not retrieve token from identity provider.

I think I'm using the RTM version of .NET 3.0 on a XP SP2 machine.
How can I verify the version of the CardSpace that I'm using.
Thanks for any help
Best Regards

Pedro Felix



Answer this question

Error when using the Live Labs STS

  • naylouvar

    Hello:

    Thanks for the reply. However I'm still having problems.

    1) I've requested new cards fom the sts.labs.live and I'm still getting the same error. I'm sure the password is correct. I'm also using a card associated with a personal card (no password necessary) and I also get the same error.

    2) I've checked the version numbers of infocard.exe and of the WCF assemblies and they are correct. I've beed using WCF for a while, namely in federation scenarios with my own STS, and I don't have any problems.

    3) I've managed to sucessfully use CardSpace to log in at http://www.identityblog.com/

    4) Sometimes, the CardSpace hangs when opened explicitly. However this is not deterministic. The following two events are logged when this happens:
    -----------------------------------------------------------------
    An error occurred when communicating with the Windows CardSpace service. Error obtaining client Process info.



    Additional Information:
    at System.Environment.GetStackTrace(Exception e, Boolean needFileInfo)
    at System.Environment.get_StackTrace()
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.BuildMessage(InfoCardBaseException ie)
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.TraceAndLogException(Exception e)
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.ThrowHelperError(Exception e)
    at Microsoft.InfoCards.ClientRequest.GetCallingProcessFromRpcHandle(IntPtr RpcHandle)
    at Microsoft.InfoCards.RequestFactory.CreateClientRequestInstance(UIAgentMonitorHandle monitorHandle, String reqName, IntPtr rpcHandle, Stream inStream, Stream outStream)
    at Microsoft.InfoCards.RequestFactory.ProcessNewRequest(Int32 parentRequestHandle, IntPtr rpcHandle, IntPtr inArgs, IntPtr& outArgs)
    -----------------------------------------------------------------
    An error occurred when communicating with the Windows CardSpace service. The UI crashed for an unknown reason.



    Additional Information:
    at System.Environment.GetStackTrace(Exception e, Boolean needFileInfo)
    at System.Environment.get_StackTrace()
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.BuildMessage(InfoCardBaseException ie)
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.TraceAndLogException(Exception e)
    at Microsoft.InfoCards.Diagnostics.InfoCardTrace.ThrowHelperError(Exception e)
    at Microsoft.InfoCards.InfoCardUIAgent.WaitForModeChange()
    at Microsoft.InfoCards.InfoCardUIAgent.SetRequest(ClientUIRequest request)
    at Microsoft.InfoCards.ClientUIRequest..ctor(Process callingProcess, WindowsIdentity callingIdentity, InfoCardUIAgent uiAgent, IntPtr rpcHandle, Stream inArgs, Stream outArgs, CallMode callMode, ExceptionList recoverableExceptions)
    at Microsoft.InfoCards.ManageRequest..ctor(Process callingProcess, WindowsIdentity callingIdentity, InfoCardUIAgent uiAgent, IntPtr rpcHandle, Stream inArgs, Stream outArgs)
    at Microsoft.InfoCards.RequestFactory.CreateClientRequestInstance(UIAgentMonitorHandle monitorHandle, String reqName, IntPtr rpcHandle, Stream inStream, Stream outStream)
    at Microsoft.InfoCards.RequestFactory.ProcessNewRequest(Int32 parentRequestHandle, IntPtr rpcHandle, IntPtr inArgs, IntPtr& outArgs)

    Thanks for your help
    Pedro Felix

  • mertkan65

    To check the version, look at the file properties of C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (right click file -> properties)

    Under the Version tab, you should see: 3.0.4506.30

    However, I just tried your scenario and I'm also getting the 2 errors in my Event Viewer:
    • A token could not be created. Identity provider requested for an unsupported authentication type.
    • There was a failure making a WS-Trust exchange with an external application. Could not retrieve token from identity provider.
    I'll inform the owner of this site and ask if they can take a look at this.

  • testorp

    Hello:

    I've just remove my Live STS cards and installed a new one (15:51 GMT), based on a personal identifier card. However, the same problems occurs when I try to signin in relay.labs.live.com.

    Pedro

  • mcdonaldn

    Hi Pedro,

    I just retried the scenario and it actually appears to be working. It appears the event logs you are getting are actually generated when you provided an incorrect username/password. Can you try generating a new managed card again and entering your password carefully and retry this scenario.

    The event log messages are definitely not user friendly and we're investigating why these messages are being generated.

    //Toland


  • DeonCadme

    Hello:

    Thanks for your reply. I've just checked my infocard.exe file version and is also 3.0.4506.30.

    Thanks
    Pedro Felix

  • preps

    Hello:

    I've just inspected the WS-Trust RST and RSTR message exchanged by CardSpace using Fiddler:

    -------- Response ---------
    <s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
    <a:Action s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action>
    <a:RelatesTo>urn:uuid:080de6af-d2ae-4680-bc3a-bf89a89f72fd</a:RelatesTo>
    </s:Header>
    <s:Body>
    <s:Fault>
    <s:Code>
    <s:Value>s:Sender</s:Value>
    <s:Subcode>
    <s:Value xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">a:InvalidSecurity</s:Value>
    </s:Subcode>
    </s:Code>
    <s:Reason>
    <s:Text xml:lang="en-US">An error occurred when verifying security for the message.</s:Text>
    </s:Reason>
    </s:Fault>
    </s:Body>
    </s:Envelope>


  • AlbertG

    I was wondering if there's anything special about your configuration (i.e. are you connected online via a proxy )

    //Toland


  • Seas Comander

    Hello:

    Thanks for your reply.
    I've tried it in three diferent network scenarios: at two university campus networks and at home, connected by a standard ISP.
    All the scenarios use transparent proxies (I presume!)

    Is there any log that I can use to see the exchanged WS-Trust messages

    Thanks for your help.

    Pedro Felix



  • KitWest

    Can you try deleting your existing managed cards from Live STS and then generate new cards and install them
  • Error when using the Live Labs STS