Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Azure Service Fabric: Errors on node when using RunAs User policy & non local admin

See original GitHub issue

Hi,

When using EventFlow on an on premise cluster and the <RunAsPolicy CodePackageRef="Code" UserRef="SqlUser" /> construct in the ApplicationManifest.xml; I get the following error.

The object is closed. at System.Fabric.Interop.Utility.WrapNativeSyncInvoke[TResult](Func1 func, String functionTag, String functionArgs) at System.Fabric.Interop.Utility.WrapNativeSyncInvoke(Action action, String functionTag, String functionArgs) at System.Fabric.Interop.Utility.RunInMTA(Action action) at System.Fabric.FabricClient.HealthClient.ReportHealth(HealthReport healthReport) at Microsoft.Diagnostics.EventFlow.ServiceFabric.ServiceFabricHealthReporter.ReportMessage(HealthState healthState, String description) at Microsoft.Diagnostics.EventFlow.DiagnosticPipelineFactory.ReportItemCreationFailedAndThrow(IHealthReporter healthReporter, String itemType, Exception e) at Microsoft.Diagnostics.EventFlow.DiagnosticPipelineFactory.ProcessSection[PipelineItemType,PipelineItemChildType](IConfigurationSection configurationSection, IHealthReporter healthReporter, IDictionary2 itemFactories, IDictionary`2 childFactories, String childSectionName) at Microsoft.Diagnostics.EventFlow.DiagnosticPipelineFactory.CreatePipeline(IConfiguration configuration, IHealthReporter healthReporter) at Program.Main() in C:\dev\Service\Program.cs:line 21

This translates to an error on the line:

using (diagnosticsPipeline = ServiceFabricDiagnosticPipelineFactory.CreatePipeline("AcmeService"))

This error does not appear if the account named in the RunAs policy is a member of the LocalAdministrators group on the node. This is not an ideal security group for our user though.

Can anyone help?

Thanks in advance.