Known issues
This section describes known issues found by the ImageVault team.
Installation as a sub-site is no longer supported
From ImageVault 5.14, installation as a sub-site is no longer supported. Read more
X-Frame-Options blocks ImageVault authentication
When opening ImageVault in an iframe, some authentication solutions that redirects the user to another website may cause the web browser to block the redirection. For a possible workaround, see the Redirect After Login article.
Note
If you are using Episerver, see the Refused to connect error article for a solution that uses the forementioned method.
Microsoft Entra ID id token expires after one hour
If you use Microsoft Entra ID as authentication platform, the id token received when logged in expires after 1 hour. When the id token expires the user is redirected to the Microsoft Entra ID login page and renews the id token. Normally this does not hinder the user experience but if the request is an ajax request made by the browser, the redirect is not triggered and results in spinners never ending or loading messages never disappears. To resolve this issue, reload the browser and the login redirect is performed.
An alternative workaround is to extend the lifetime of the id token issued by Microsoft Entra ID. This can be done by the Microsoft Entra ID administrator using a set of PowerShell scripts (namely the AzureAdPreview module.
First step (after installing the module) is to connect to the Microsoft Entra ID
Connect-AzureAD
Then, create a new Microsoft Entra ID policy that states the AccessTokenLifetime to ~1 day. The policy will not be assigned as default for the domain (-IsOrganizationDefault $false) but can instead be assigned to a specific Service principal
$policy = New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"23:59:59"}}') -DisplayName "MaxAccessTokenLifetimePolicy" -IsOrganizationDefault $false -Type "TokenLifetimePolicy"
Then we need to find the specific Service Principal that we have connected the ImageVault service to
$sp = get-azureadserviceprincipal -Filter "DisplayName eq 'my.imagevault.se'"
As the last step, we assign the new policy to the service principal
Add-AzureADServicePrincipalPolicy -Id $sp.ObjectId -RefObjectId $policy.Id
All new logins to the service principal will give an id token that won't expire until 24 hours have passed
More information about configurable token life times can be found in Microsoft Microsoft Entra ID documentation
Some LINQ queries throws InvalidQueryException
In some cases a LINQ query throws InvalidQueryExceptions when it detects a possibly bad performance query. The main purpose is to indicate limitations in the LINQ query provider and force the developer to rewrite the query.
Media thumbnails is not visible after upload if running as a sub-site of Episerver and using proxy providers
Fixed in ImageVault v5.5.
This issue only occurs if you have not specified serviceUri of the proxy membership/role providers.
Setting EPiServer property to required doesn't render correctly first time after site restart
Fixed in ImageVault.EPiServer.UI v5.4.
If you have a MediaReference or a MediaReferenceList property and are setting it to required, the first time after a site has restarted, the editor isn't rendered at all. The behavior is described in a forum post on world.episerver.com and is registered as a bug in Episerver.
Entity Framework sometimes causes transaction deadlocks
The ImageVault core service uses Entity Framework to handle most of its database reads and writes. The Entity Framework, however, contains a bug related to concurrency version checks that can cause transaction deadlocks. The bug has been confirmed by Microsoft and they have release a hot-fix as a remedy.
If you experience long delays and/or errors when saving organized media in ImageVault you can avoid this by:
- Installing the hotfix supplied by Microsoft on the server(s) hosting the ImageVault core service. Be sure to follow their installation instructions to avoid issues related to the install.
Bad Request when uploading media
If uploading media using the ImageVault UI fails and upon analyzing the underlying error it presents the message
The remote server returned an unexpected response: (400) Bad Request.
This error can indicate that the authentication ticket is too big for the HTTP header field. The ticket gets large when a user is member of many groups or if the group names are very large. A workaround is to use user that isn't member of a great number of groups (less than 20) or a role provider that filters out some of the groups.
Note
This is fixed in ImageVault 4.2. If you perform authentication manually without using any ImageVault components, make sure to use the new authentication method that utilizes the registerTicket call.
Installation - Fail to acquire a security provider from the issuer's certificate
This can occur when the installation tries to create a certificate. The cause is often that private key of the certificate used to issue the certificate is unaccessible.
To solve this, remove the ImageVault Default Root CA certificate from the LocalMachine/Trusted root certificate store and rerun the installation. The installation will install the issuing certificate if missing.
Only do this if you know what you are doing. Removing a trusted root certificate can result in side effects.
Multiple ImageVault UI sites on the same domain(site) (IV <= v4.3)
If multiple ImageVault UI sites that uses different Idp:s there will be problems regarding the authentication ticket. The UI uses a cookie for storing the ticket after authentication. If multiple ImageVault UI sites (or other sites that uses passive cookie based federated authentication) resides on the same site (same web domain address) these cookies can collide since the name and domain is the same. The solution is to change the name of the cookie so that they don't collide.
Changing the name of the authentication ticket is done in web.config for the ImageVault UI site by changing the following value. Just make sure that the cookie name is an unique name on the domain.
/configuration/microsoft.identityModel/service/federatedAuthentication/cookieHandler/@name
Federated Authentication Configuration (MSDN)
Windows authentication gives access denied (401.1)
If you have installed a local site that uses a mapping to the localhost name (using the hosts file for example) and are using windows authentication you might experience access denied when trying to login to the website. This is not a Epi/ImageVault problem, its windows/IIS specific. See more information and solution at MSDN.
How to remove failed upload media
Sometimes a file can be damaged or the storage plug-in system is not responding and the file get caught in the file upload queue. Files in the queue will be retried multiple times and if you want to remove them, permanent or temporarily, follow the following instructions
How to force reconversion of converted media
This is an instruction on how you can force a reconversion for a converted media, like if a conversion is flawed and a newer version has supplied a fix for that type of conversion; or if support for a new conversion is added and you need to clear the old conversions. Read the How to force reconversion of converted media walkthrough.
MediaConversions does not come in the same order as formats requested
If you request, using the API, multiple conversions at the same request, by supplying a list of formats, the resulting MediaConversion property on each MediaItem is not guaranteed to contain all requested formats and not in the same order as the supplied list.
This is fixed from version 4.4.20 and the consequences of that fix can be read in detail in the MediaConversions can contain null values article.
401 when accessing internal media
If using a mismatch of versions for core (v4.5.10 or later) and client you might get this problem.
Slow conversions for large Jpeg images
In some cases, conversion of large jpeg images are slow when using the LeadtoolsConverter. From version 5.2 a workaround exists where you can add the DotNetJpegConverter with a greater priority than the LeadtoolsConverter to force jpeg conversions to use this converter instead. To activate it, add the following converter to the MediaConverterTypes table.
ImageVault.Core.Conversion.DotNetJpegConverter,ImageVault.Core.Conversion