After Upgrading from 8.11 to 8.12, Active Directory Integration Failing Due to Invalid AdRules Xml

Products

• Carbon Black App Control

Issue/Introduction

• When trying to log into the Console using an AD user, the following error message occurs:

  The user name or password you entered is incorrect. Enter a valid user and password, then try again.

• The AD Logs captured in "\Program Files (x86)\Bit9\Parity Server\AppControlAD.log" shows:

  ERROR ADHelper.ADMapping.ValidateXML - Exception = Name cannot begin with the '.' character, hexadecimal value 0x00. Line 1, position 40. 2026-05-02 ERROR ADHelper.ADMapping.LoadRuleSets - AdRules.xml is invalid. Rule-based mapping will not function correctly.
  
  ERROR ADHelper.ADMapping.ValidateXML - AdRules.xml is not Valid. 
  Error message = The 'version' attribute is not declared.

Environment

• App Control Server 8.12

Cause

• The legacy AD rules file (adrules.xml) is incompatible with the App Control version 8.12.

Resolution

This can be resolved with the following steps:

1. Stop App Control Server Service.
2. Delete ADRules.xml:
   \Program Files (x86)\Bit9\Parity Server\scripts\Adrules.xml
3. Start App Control Server Services
4. Confirm ADRules.xml file was recreated in \Program Files (x86)\Bit9\Parity Server\scripts\.
5. Re-map the User Roles following the steps in this KB.