FYI.
To save someone else 45 mins or more… Today suddenly my Active Directory connection started failing with the error:
Errors returned from IQService. Client authentication failed with error - The filename or extension is too long
While the docs say to check for this in the config:
"encrypted": "forestAdminPassword,IQServicePassword",
That was already there. A post in here suggests re-creating the connector… Way too much work if I don’t need to.
I found that simply going into the GUI and updating the password on the IQService section to “something-fake-and-do-not-care” and then setting it back to what it was fixed my issue. No need to create a whole new connector. I never changed the password on my account on the AD side.
My guess is some recent changes on the backend. I noticed that the encrypted password displayed in the config (via api) was a typical base64 looking payload. After I reset it and checked, it was a completely different structure with things like “KEY” and “SECRET” in there, with a ‘2_’ at the start rather than a ‘1:’, which matches the structure of some of the other secrets in the config. So they are definitely updating some of the encryption stuff in the background for key management. Hope this saves someone else some time.
Matt