One of my agents is throwing the following:
2017-09-21 15:37:07,850-04:00 [26] ERROR BoomerangHandler Could not sync
Newtonsoft.Json.JsonReaderException: Unexpected character encountered while parsing value: <. Path '', line 0, position 0.
at Newtonsoft.Json.JsonTextReader.ParseValue()
at Newtonsoft.Json.Serialization.JsonSerializerInternalReader.ReadForType(JsonReader reader, JsonContract contract, Boolean hasConverter)
at Newtonsoft.Json.Serialization.JsonSerializerInternalReader.Deserialize(JsonReader reader, Type objectType, Boolean checkAdditionalContent)
at Newtonsoft.Json.JsonSerializer.DeserializeInternal(JsonReader reader, Type objectType)
at Newtonsoft.Json.JsonConvert.DeserializeObject(String value, Type type, JsonSerializerSettings settings)
at Newtonsoft.Json.JsonConvert.DeserializeObject[T](String value, JsonSerializerSettings settings)
at EAEngine.Boomerang.BoomerangHandler.<Sync>d__34.MoveNext()
This particular machine seems to be problematic. I'm not gathering its asset info like I am my other clients, and I'm unable to execute any tasks on it. Yes, I have ensured the .NET requirements are met, yes, it has been moved to a non-default policy that includes endpoint protection, and yes, it has been rebooted since the move to another group. I have also uninstalled/reinstalled and run through toggling its groups with no avail either with multiple restarts in between. SEP was running on it previously, but I did have it uninstalled first. Also, I do have the firewall requirements met and am able to reach *.malwarebytes.com, *.mwbsys.com, *.mbamupdates.com, *.mb-cosmos.com over SSL/443. This client is running Windows 7 Pro with the latest and greatest MS patches...
Errors that succeed the aforementioned include:
...
2017-09-21 15:37:08,957-04:00 [22] ERROR TrayModule System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.
at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)
at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)
at EAEngine.UserModules.TrayModule.EnforceEndpointInterfacePolicy()
...
2017-09-21 15:37:16,461-04:00 [29] ERROR EAEngine Error posting to Nebula. Url:/api/v1/machine/results
System.AggregateException: One or more errors occurred. ---> System.Web.HttpException: HTTP Request failed to /api/v1/machine/results. Http Code: 400 Reason:Bad Request
Body Response: <?xml version="1.0" encoding="UTF-8"?>
<Error><Code>InvalidArgument</Code><Message>Unsupported Authorization Type</Message><ArgumentName>Authorization</ArgumentName><ArgumentValue>Bearer scrubbed</ArgumentValue><RequestId>scrubbed</RequestId><HostId>scrubbed=</HostId></Error>
at EAEngine.Http.EAWebClient.<EnsureSuccessStatusCode>d__21.MoveNext()
...
Thanks for any input or advice you can throw my way in the meantime...