Advanced Search
Search Results
265 total results found
AWS051 - Rejected a Request Parameter
Agent error code #AWS051 indicates that AWS refused a value in the request. AWS returns InvalidParameterValue, InvalidParameter or MalformedInput in this situation. The credentials and the security group were both accepted. Something in the rule the agent t...
AWS100 - Failed to Describe Security Group Rules
Agent error code #AWS100 indicates that Knocknoc could not read the current rules on the security group. This read runs before any change is made to the group, so the grant stops here. More specific causes report their own codes: rejected credentials report #A...
AWS101 - Failed to Authorize a Security Group Rule
Agent error code #AWS101 indicates that the call adding a rule to the security group failed for a reason the agent could not attribute to a more specific cause. This is the operation that grants a user access. More specific causes report their own codes: rejec...
AWS102 - Failed to Revoke a Security Group Rule
Agent error code #AWS102 indicates that the call removing a rule from the security group failed. Access that should have been withdrawn may still be in place. More specific causes report their own codes: rejected credentials report #AWS001, a missing permissio...
ENTRA000 - Failed to Connect to Microsoft Graph
Agent error code #ENTRA000 indicates that the agent could not reach Microsoft Graph at https://graph.microsoft.com. The request failed before any authentication or Named Location operation could take place. This error is distinct from authentication failures ...
ENTRA001 - Authentication Failed
Agent error code #ENTRA001 indicates that the Microsoft identity platform rejected the credentials provided by the agent during the client-credentials token request. The login endpoint returned an invalid_client or equivalent error. This error is distinct fro...
ENTRA002 - Authorization Failed
Agent error code #ENTRA002 indicates that the agent authenticated to Entra ID successfully but Microsoft Graph rejected the Named Location request with HTTP 403 Forbidden. The app registration is missing the application permission required to read and write Co...
ENTRA003 - Microsoft Graph TLS/SSL Certificate Error
Agent error code #ENTRA003 indicates that the agent's TLS handshake with login.microsoftonline.com or graph.microsoft.com failed. The certificate presented by the endpoint could not be verified against the system trust store. This error is distinct from conn...
ENTRA004 - Microsoft Graph Connection Timed Out
Agent error code #ENTRA004 indicates that a request to login.microsoftonline.com or graph.microsoft.com did not complete within the agent's HTTP timeout (25 seconds). This error is distinct from connection failures (#ENTRA000), which mean the connection neve...
ENTRA005 - Microsoft Graph API Throttled
Agent error code #ENTRA005 indicates that Microsoft Graph rejected the request with HTTP 429 Too Many Requests. The agent has hit the per-tenant or per-app rate limit on the Conditional Access API. Microsoft Graph publishes its throttling thresholds at Microso...
ENTRA050 - Failed to Get Named Location
Agent error code #ENTRA050 indicates that the agent could not retrieve the configured Named Location from Microsoft Graph. The request reached Graph and authenticated successfully, but Graph returned an unexpected status (other than the 404 case covered by #EN...
ENTRA051 - Failed to Update Named Location
Agent error code #ENTRA051 indicates that the agent retrieved the Named Location successfully but the PATCH to update its ipRanges was rejected by Microsoft Graph. This is distinct from authentication failures (#ENTRA001) and authorization failures (#ENTRA002...
ENTRA052 - Named Location Not Found
Agent error code #ENTRA052 indicates that Microsoft Graph returned HTTP 404 for the configured Named Location ID. The Knocknoc backend points at a Named Location that no longer exists in the tenant. Common causes include: The Named Location was deleted in the ...
ENTRA053 - Named Location Is Not an IP-Based Location
Agent error code #ENTRA053 indicates that the configured Named Location exists, but its @odata.type is not #microsoft.graph.ipNamedLocation. Knocknoc only manages IP-based Named Locations. Country-based and unknown-region Named Locations are not supported. C...
ENTRA054 - Invalid or Unexpected Response from Microsoft Graph
Agent error code #ENTRA054 indicates that Microsoft Graph returned a 2xx status, but the response body did not match the expected schema. The agent could not decode the Named Location response or the OAuth token response. This error is rare. It usually points ...
FSTL000 - Failed to Connect to the Fastly API
Agent error code #FSTL000 indicates the agent could not reach the Fastly API. The connection was never established, so nothing was written. This is distinct from authentication failures (#FSTL001), authorization failures (#FSTL002), TLS errors (#FSTL003) and t...
FSTL001 - Authentication Failed
Agent error code #FSTL001 indicates Fastly rejected the API token in the agent's Fastly-Key header (HTTP 401). This is distinct from an authorization failure (#FSTL002), where the token is valid but cannot reach the service. Common causes include: The token h...
FSTL002 - Fastly Authorization Failed
Agent error code #FSTL002 indicates the API token authenticated but is not allowed to act on the configured service (HTTP 403). The Knoc wizard's Validate integration step reads the token's own record, so a read-only token is reported here rather than at the f...