This message was deleted.
# citrix-wems
Slackbot
01/16/2023, 9:20 PMThis message was deleted.
m
Mike Streetz (O_P)
01/16/2023, 9:22 PM“Error while retrieving token groups list”
Mike Streetz (O_P)
01/16/2023, 9:24 PMwe tried this and increasing that timeout didn’t help: https://support.citrix.com/article/CTX232091/wem-agent-not-launching-error-while-retrieving-user-token-groups-list
j
James Kindon
01/16/2023, 9:44 PMthat was this https://jkindon.com/not-so-hidden-tax-citrix-wem/ and WEM could keep going, it just slowed down
m
Mike Streetz (O_P)
01/16/2023, 9:55 PMI think some of these users have token sizes over 12kb, it’s not working at all
Mike Streetz (O_P)
01/16/2023, 9:56 PMthey are nesting domain users in a ton of other groups, then those groups are nested, and then they have a trust with delegation with like 40 child domains…
Mike Streetz (O_P)
01/16/2023, 10:07 PMbut then they have max token size set to 64kb in the registry so I don’t know what’s going on anymore
Mike Streetz (O_P)
01/16/2023, 10:23 PMwe upped that timeout to 60 seconds and it works, it does the refresh within about 20s so not sure what that is
Mike Streetz (O_P)
01/16/2023, 10:29 PMit also doesn’t fix it 100%, so not sure if there’s an issue with the cache
j
James Kindon
01/17/2023, 4:21 AMmy issues were related to AD groups and assignment of apps to those groups - so different story on that one - yours sounds like lookup issues - could be GC issues etc - thats a lot of domains. Is that on or off?
m
Mike Streetz (O_P)
01/17/2023, 10:53 PMI'll check
5 Views