32
March 19, 2017
March 19, 2017

How to generate a debug file

Solution

Steps to generate a debug file:

  1. You could turn on debugging via the nFront GPO but that enables debugging on all domain controllers.  So you probably want to turn on debugging on a single DC.  To do this you add the following registry value:

HKLM\Software\Policies\Altus\PassfiltProMPE (or just PassfiltPro)\debug, REG_DWORD (32-bit), value=1

  1. After adding the registry value, test a password change using ADUC locally on the DC or via a command window on the DC.  Again, use a password that meets Windows domain password policy rules but should fail the nFront rules.  The command window syntax to change a password is

net user <username> <password>

  1. Inspect the debug log file - c:\windows\system32\logfiles\nfront-password-filter-debug.txt.  It should show registered=1 near the top of the file. 

 

Here is an example of a good debug file:

--------------------------------------------------------------------------------

| nfront-password-filter-debug.txt

--------------------------------------------------------------------------------

nFront Password Filter -  Product Version 6.0.4

ppro-eng.dll - File Version 6.0.1

timestamp: 19:21:26:491  6-17-2015

--------------------------------------------------------------------------------

Username = test123

FullName =

 

Password change does NOT meet nFront Password Filter rules.

-------------------------------------------------------------

UTC timestamp yr/month/day hour:min:sec = 2015/6/18 2:21:26

*************************************************************

* nFront Password Filter Multiple Policy Edition            *

*************************************************************

Version Information

------------------------

evaluation = 0

registered = 1

 

registrationCode = <assigned registration code>

maintenance Code  = <expired maintenance code>

   Contract expires on 11/4/2015

 

nFront Password Filter version 6.0.4 Build 2013080801

 

 

**If you see registered=1 your registration code is valid.

 

Here is a debug file with a typo in the maintenance code:

--------------------------------------------------------------------------------

| nfront-password-filter-debug.txt

--------------------------------------------------------------------------------

nFront Password Filter -  Product Version 6.0.4

ppro-eng.dll - File Version 6.0.1

timestamp: 19:23:32:804  6-17-2015

--------------------------------------------------------------------------------

Username = test123

FullName =

 

Password change meets nFront Password Filter rules.

-------------------------------------------------------------

UTC timestamp yr/month/day hour:min:sec = 2015/6/18 2:23:32

*************************************************************

* nFront Password Filter Multiple Policy Edition            *

*************************************************************

Version Information

------------------------

evaluation = 0

registered = 1

 

registrationCode = <assigned registration code>

maintenance Code  = <maintenance code with typo>

 

*************************************************************

*          ANNUAL MAINTENANCE CODE IS INCORRECT             *

*         PLEASE CHECK FOR TYPOGRAPHICAL ERRORS             *

*                                                           *

*             PASSWORD FILTERING IS DISABLED.               *

*************************************************************

 

nFront Password Filter version 6.0.4 Build 2013080801

 

 

Here is a debug file with an expired maintenance code:

--------------------------------------------------------------------------------

| nfront-password-filter-debug.txt

--------------------------------------------------------------------------------

nFront Password Filter -  Product Version 6.0.4

ppro-eng.dll - File Version 6.0.1

timestamp: 19:27:38:382  6-17-2015

--------------------------------------------------------------------------------

Username = test123

FullName =

 

Password change meets nFront Password Filter rules.

-------------------------------------------------------------

UTC timestamp yr/month/day hour:min:sec = 2015/6/18 2:27:38

*************************************************************

* nFront Password Filter Multiple Policy Edition            *

*************************************************************

Version Information

------------------------

evaluation = 0

registered = 1

 

registrationCode = <assigned registration code>

maintenance Code  = <expired maintenance code>

   Contract expires on 11/4/2014

 

*************************************************************

* YOUR ANNUAL MAINTENANCE CONTRACT HAS EXPIRED AND DOES NOT *

* PERMIT YOU TO UPRADE TO THIS VERSION.                     *

*                                                           *

*             PASSWORD FILTERING IS DISABLED.               *

*************************************************************

 

nFront Password Filter version 6.0.4 Build 2013080801