Exception of type 'System.Net.InternalException' was thrown. -1073741428

[avin3sh]

My ASP.NET Core web app running inside Windows Container has suddenly started throwing the following exception when performing negotiate authentication. If I downgrade to 8.0.3, the issue disappears. Any suggestions on how do I go about debugging this ? Is the exception code really pointing STATUS_STACK_OVERFLOW winapi error ?

System.Net.InternalException: Exception of type 'System.Net.InternalException' was thrown. -1073741428
   at System.Net.SecurityStatusAdapterPal.GetSecurityStatusPalFromInterop(SECURITY_STATUS win32SecurityStatus, Boolean attachException)
   at System.Net.NegotiateAuthenticationPal.WindowsNegotiateAuthenticationPal.AcceptSecurityContext(SafeFreeCredentials credentialsHandle, SafeDeleteContext& securityContext, ContextFlags requestedContextFlags, ReadOnlySpan`1 incomingBlob, ChannelBinding channelBinding, Byte[]& resultBlob, Int32& resultBlobLength, ContextFlags& contextFlags)
   at System.Net.NegotiateAuthenticationPal.WindowsNegotiateAuthenticationPal.GetOutgoingBlob(ReadOnlySpan`1 incomingBlob, NegotiateAuthenticationStatusCode& statusCode)
   at System.Net.Security.NegotiateAuthentication.GetOutgoingBlob(ReadOnlySpan`1 incomingBlob, NegotiateAuthenticationStatusCode& statusCode)
   at System.Net.Security.NegotiateAuthentication.GetOutgoingBlob(String incomingBlob, NegotiateAuthenticationStatusCode& statusCode)
   at Microsoft.AspNetCore.Authentication.Negotiate.NegotiateState.GetOutgoingBlob(String incomingBlob, BlobErrorType& status, Exception& error)
   at Microsoft.AspNetCore.Authentication.Negotiate.NegotiateHandler.HandleRequestAsync()
   at Microsoft.AspNetCore.Authentication.Negotiate.NegotiateHandler.HandleRequestAsync()
   at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)
...

[filipnavara]

The error is ERROR_TRUSTED_DOMAIN_FAILURE or The trust relationship between the primary domain and the trusted domain failed.. I don't see it in the documentation of valid error values from AcceptSecurityContext but it may come from some installed SSPI provider.

[avin3sh]

Thank you. This helps. Looks like we are running into the long standing issue with gMSA Trust Relationship Issue on Windows Containers - microsoft/Windows-Containers#405