How to configure SharePoint HNSC with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
Could you please let me know how SharePoint HNSC can be configured with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
In normal path based site collections/web applications, reverse proxy configuration can be done using alternate access mappings with Public URL = "proxy URL", internal = "HNSC Share Point URL" so that share point sends response back
to Public URL = "proxy URL".
In Host Named Site Collections, alternate access mappings are not supported. Each HNSC is designed to have only one URL in each zone. Zone is one of the five zones(Default,Intranet,Internet,Custom,Extranet) with each of which only one alternate
URL is associated. This is what we are able to get using power shell command "Set-SPSiteUrl", but this will not help us to get the response back to proxy URL after a request sent to share point because we could not find any mechanism in share
point HNSC to respond to a different URL(proxy URL). Consequently, Share Point URLs are exposed to external users.
Below share point article in MSDN blog is symmetrical to what we are observing with Share Point 2013 and Proxy Server. It mentions that internal HNSC URLs can’t be hidden using any proxy server. If hiding the internal Share Point URLS is a requirement,
it suggests to use a web application instead of host named site collections.
Though I’m also observing the same behavior with Share Point 2013 HNSC, Could you please confirm my understanding is correct.
http://blogs.msdn.com/b/kaevans/archive/2012/03/27/what-every-sharepoint-admin-needs-to-know-about-host-named-site-collections.aspx
Excerpt from above article-
"Host Named Site Collections Only Use One Host Name
Continuing on the discussion on AAMs and host named site collections, you cannot use multiple host names to address a site collection in SharePoint 2010. Because host-named site collections have a single URL, they do not support alternate access mappings and
are always considered to be in the Default zone. This is important if you are using a reverse proxy to provide access to external users. Products like Unified Access Gateway 2010 allow external users to authenticate to your gateway and access a site
as http://uag.sharepoint.com and forward the call to http://portal.sharepoint.com. Remember that URL rewriting is not permitted. Further, a site collection can only respond to one host name. This means if you are using a reverse proxy, it must forward the
calls to the same URL. If your networking team has a policy against exposing internal URLs externally, you must instead use web applications and extend the web application using an alternate access mapping."<u5:p></u5:p>
Hi Satish,
You are right that only one URL is allowed for each zone of the host-name site collections in both SharePoint 2010 and SharePoint 2013.
It is by design that each host-name site collection only support one URL for each zone.
The article below is about RTM version of SharePoint, and it is the same for SharePoint 2013 with the latest CU.
https://support.microsoft.com/en-us/kb/2826457
So to make the URL of HNSC not exposed to external users is not supported, you need to use path-based sites instead.
Best regards.
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]
Similar Messages
-
Configuring Oracle Portal to Work with a Reverse Proxy Server
Hi,
I have an Oracle Portal 11g instance that works fine but I need to put behind a reverse proxy server.
I follow the instructions of chapter 6.6 of this link http://download.oracle.com/docs/cd/E15523_01/portal.1111/e10239/cg_advnc.htm#i1051122 with any problem, but when I tried to access to the portal/pls/portal page I get the following error:~
(WWC-00000)
;i=pls%2Forasso%2Forasso.wwsso_app_admin.fapp_process_login%3Fp_app_id%3D; Accept=text/html Accept-Charset=ISO-8859-1,utf-8;q=0.7,*;q=0.7 User-Agent=Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 Oracle HTTPClient Version 10h X-Oracle-Device.Class=pcbrowser X-Oracle-Device.Name=HTML40 X-Oracle-Device.Orientation=landscape X-Oracle-Device.MaxDocSize=0 X-Oracle-Device.Secure=false PROVIDER=90163575;i=2;n=PORTAL%20CONTENT%20AREA;o=0;R=0; PROVIDER=641081930;i=2;n=DESIGN_TIME_PG;o=0;R=0; PORTLET=6,2237;v=641081930;b=2214;t=700;T=;D=Portal%20Builder%20banner;]=2;A=521_2214_641081930;p=6_2237_6_1_1;i=0;Y=0;e=0;d=0;h=0;a=0;^=0;R=0;c=0;C=0;Z=0;I=5;q=http://hostname:7777/portal/page/portal?_mode=10&_cpage_id=1&_csite_id=6&_cstyle_id=1&_cstyle_site_id=6&_ccalledfrom=1&_cmode=3&_ctabstring=Welcome&_cdisplay_name=Portal%20Builder;V=0; PORTLET=606;v=90163575;b=20;t=15;T=;D=Welcome;]=3;A=606_tabset_90163575;p=606_tabset_90163575;i=0;Y=0;e=1;d=1;h=1;a=1;^=1;R=0;c=0;C=0;Z=0;V=11;n=_ts.rid;t=constant;v=606; n=_ts.tid;t=constant;v=13; n=_ts.pid;t=constant;v=1; n=_ts.sid;t=constant;v=6; n=_ts.tp;t=constant;v=; n=_ts.ts;t=constant;v=Welcome; n=_ts.stid;t=constant;v=1; n=_ts.ssid;t=constant;v=6; n=_ts.m;t=constant;v=3; n=_ts.pr;t=constant;v=; n=_ts.sc;t=constant;v=; TEMPLATE=1;c=text/html;
#portal-rewrite?a=2;i=6,2237/portal-rewrite#
#portal-rewrite?a=2;i=606/portal-rewrite#
Could anyone help me solving this problem.
This is a very critical situation.
Thanks,
Regards,
rjcThe solution for this problema was put the proxy server name and IP in the database hosts.
In Oracle portal it's essencial that database could resolve the name of all componentes, like portal mid-tier, web cache, sso, proxy server, etc.
Regards,
rjc -
Configure sharepoint 2013 with Microsoft exchange 2010
Hi,
I am want to configure SharePoint 2013 with Microsoft exchange 2010.
Please let me how can I integrate these server to Send/ Receive domain E-mails.
Thanks,
C MahoneFor email integration there really isn't anything special about Exchange 2010 vs. any other mail server. Check the links here on configuring Incoming and Outgoing mail in SharePoint:
http://technet.microsoft.com/en-us/library/ee956941(v=office.15).aspx
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem. -
I have a Symphonic 32' HDTV (Dolby Digital Plus). can someone help me figure out how to configure it optimally with my Mac Mini? the display and sound is off. Do I need drivers/software? I'm new to macs.
Hello, since nobdy else has replied...
Long shot, but...
Open Audio Midi Setup in Applications>Utilities, see the input & output options & KHz setting there. -
How to configure bt mail with icloud?
how to configure bt mail with icloud?
iCloud does not handle any mail systems except for its own. BT is not an iCloud mail system, so you can't.
-
Help with Apache Reverse Proxy configuration with SAP Portal and SAP Webgui
Dear Experts,
I have an issue configuring Apache to work with SAP Portal and ERP webgui. Accessing Portal through Reverse Proxy is working fine. But the problem arises when we try to open an iView ERP webgui transaction page from Portal with the Reverse Proxy. Have anyone implemented similar requirements and could advice on the configuration required on the Apache side? Thank youhi,
pls check the below links for reference:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/24396589-0a01-0010-3c8c-ab2e3acf6fe2
searchsap.techtarget.com/searchSAP/downloads/chapter-december.pdf
1)Learn to implement the reverse proxy filter and portal gateway in SAP Enterprise Portal 6.0 on Web Application Server 6.40.
https:/.../irj/sdn/nw-portalandcollaboration?rid=/webcontent/uuid/006efe7b-1b73-2910-c4ae-f45aa408da5b
.2 )Configuring the Portal for Your Reverse Proxy Filter Solution . ... This document describes the reverse proxy filter mechanism in SAP Enterprise ...
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/32ad9b90-0201-0010-3c8a-c900cd685f8f
3)have full reverse proxy functionality. Possibly. filter. requests. Internet ... Reverse proxy (optionally with authentication etc.) ...
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/c066c390-0201-0010-3cba-cd42dfbcc8be
Note:please reward points if solution found helpfull
Regards
Chandrakanth.k -
How to create sharepoint Group with read only permissions using powershell for entire site ?
How to create sharepoint Group with read only permissions using powershell for entire site (including subsites and top level site)
Hi
using (SPSite site = new SPSite(url))
using (SPWeb web = site.OpenWeb())
SPUserCollection users = Web.AllUsers;
SPUser owner = users[string.Format("{0}{1}", "Domain", "Owner Username")];
SPMember member = users[string.Format("{0}{1}", "Domain", "Default Member Username")];
SPGroupCollection groups = Web.SiteGroups;
string GroupName = “Super Exclusive”;//your group name
string GroupDescription = “Super exclusive group description.”;
groups.Add(GroupName, owner, member, GroupDescription);
SPGroup NewSPGroup = groups[GroupName];
SPRoleDefinition role = Web.RoleDefinitions["Read"];
SPRoleAssignment roleAssignment = new SPRoleAssignment(NewSPGroup);
roleAssignment.RoleDefinitionBindings.Add(role);
Web.RoleAssignments.Add(roleAssignment);
Web.Update();
Please 'propose
as answer' if it helped you, also 'vote
helpful' if you like this reply. -
Qosmio F60-L10 - How to configure tv tuner with integrated antenna?
good evening,
i have a notebook toshiba qosmio f60 ,i had read your answer about tv tuner.
my question is : how to configure tv tuner with integrated antenna? thanksHi 3171954,
I think Paolo30 is right. Qosmio F60 is equipped with internal DVB-T but in some cases you need an external antenna to pick up the low signal. In most cases only in large citys you dont need an external antenna. If you live on the fringe of the city, normally a cable is needed.
Anyway, do you mean an external antenna or external DVB-T receiver (USB stick)?
Normally Windows media center should recognize the internal DVB-T tuner. Is it listed in device manager? Did you update the driver? -
How to configure IIS webserver with weblogic so that I can
invoke servlets without the .wlforward extension
As per the documentation iisforward.dll is registered as a filter and .wlforward
has also been
included as a special file type. However this requires me to key-in ".wlforward"
after my servlet name.
What I want is something like this
http://iis/MyServlet
Please help me find a solution to this
Thanks,
RishiI am able to invoke the servlet without the wlforward extension now.
However, now I am required to add /weblogic before the servlet
name otherwise it does not execute the pathtrim property.
I have tried with the pathprepend thing also.
Can we get rid of the /weblogic part also. I just want to execute
my servlet as http://iis/myServlet.
Your help in this regard is greatly appreciated...
Thanks..
"Rishi" <[email protected]> wrote:
>
Thanks for the reply Kumar.
I did follow the instructions as given in the Weblogic documentation
The documentation said to add iisforward.dll as a filter service
and register .wlforward as a special
file type to be handled by iisproxy.dll. For this,
while configuring the IIS server in the Home Directory tab
I added an extension ".wlforward" and the executable as
iisproxy.dll. Is this the way it should have been done...
I also modified the iisproxy.ini file as per the documentation.
I have added the WLForwardPath property and set it to /weblogic.
My server works fine when I give the url as
http://iis/myServlet.wlforward
but it does not work for
http://iis/myServlet and this is the way i'd want it to work.
Please tell me if I am missing something on the configuration part
and if there is something special that needs to be done. I shall
be grateful to you.
Kumar Allamraju <[email protected]> wrote:
http://e-docs.bea.com/wls/docs61/adminguide/isapi.html#101184
Rishi wrote:
How to configure IIS webserver with weblogic so that I can
invoke servlets without the .wlforward extension
As per the documentation iisforward.dll is registered as a filter
and
.wlforward
has also been
included as a special file type. However this requires me to key-in".wlforward"
after my servlet name.
What I want is something like this
http://iis/MyServlet
Please help me find a solution to this
Thanks,
Rishi -
Reverse Proxy Configuration - Apache as an SSL reverse-proxy
Hi,
We have EP 6.0 SP 14 installed with SSL configured.
We are in need to open the application to internet.
For the same we have set up a reverse proxy server (Apache as SSL
Reverse Proxy).
Our requirement is to open the application to the internet with
web address https://abc.domain.com.
The issue is we are able to access the application from internet only when
https://abc.domain.com/irj/potal is typed.
(ie.) Mapping is working fine for
https://abc.domain.com/irj/portal to
our EP Portal address https://abc2.domain.com:50001/irj/portal
And not working for mapping https://abc.domain.com to our EP Portal
address https://abc2.domain.com:50001/irj/portal
We have been working on to resolve this issue for days together but have been really unsuccessful
Kindly help us in resolving the same asap.
Note : The references we used are:
1. SAP's document:
"Apache Reverse Proxy Configuration for J2ee 6.20 and 6.40 Web Applications"
2. Weblogs:
The Reverse Proxy Series -- Part 1: Introduction
The Reverse Proxy Series -- Part 3: Apache as a reverse-proxy
The Reverse Proxy Series -- Part 3.1: Apache as an SSL reverse-proxy
Regards,
venkat.Thanks much for the feedback. We're using the default settings on the HTTP rule we have set up for the portal on the ISA server. We'll be looking into the details of what the default rule settings are, however we did find a note in the Microsoft Knowledge base detailing with the ISA server screening high bits in URL strings for Outlook Web Access (OWA). This generates a similar error message. Here is the link to the detailed note on the Microsoft web site:
http://support.microsoft.com/?scid=kb;en-us;837865
Also,we are going to be applying the SP1 upgrade to the ISA server (released in March) to see if this might be some type of issue that may have been identified and corrected by the service pack. We'll see what happens with that.
One area where we can recreate the problem at will is when we set up the system landscape configuration. We can navigate to a system configuration object, however when we attempt to right click to edit the object we get the error. There are other circumstances where we get errors but that is one that occurs for sure. Anyone have any idea as to what might be special about that type of transaction??
Thanks again.
Rich -
How to configure the ESS portal in ehp 6 server?
Dear All,
Pls advice me how to configure the ESS portal in my client server?
I want to create new iviews ,pages,workset and link them all to R/3,with total configuration steps please.
Thanks and Regards,
Pradiphi pradeep ,
which version r u using wdjava or abap ? ......if ur using java you have to do all in home page framework and if you are using with launchpad from EHP5 better you can create it from launchpad by going to t -code LPD_CUST and select the ROLE:ESS and INSTANCE: MENU
REFER Below............
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e09b3304-07d8-2b10-dbbf-81335825454f?QuickLink=index&overridelayout=true&38388417774934
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/21eb036a-0a01-0010-25a3-b2224432640a?QuickLink=index&overridelayout=true&5003637159921
http://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=31476&bc=true
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/108c31e7-b6a7-2d10-3692-c1a9f7a5c4dc?overridelayout=true -
SAP reverse Proxy Server Configuration
Hi All,
We wanted to configure reverse proxy in our landscape, I will explain how we have through of implementing it.
The request over the internet will be recieved by Our EP Server AAA which will act as a reverse proxy server and the request will be mapped to the Production EP server BBB which will serve the request.
I have found few links on the internet explaining the concept of DMZ but still I dont have much clear Idea about this.
If anyone can share any relevant link on, how this can be implemented will be really great.
Thanks,
Sharib TasneemHi Sharib
Check the link below , may be useful
http://help.sap.com/saphelp_nwce10/helpdata/en/d8/00413549394a85b28bae68b715e6cb/content.htm
833960 - supported Application Gateway Configurations
1577357 - How To Change the URL Used to Access the Portal on NetWeaver 7.30
Regards
Pyari -
How to configure Adobe LiveCycle designer on my SAP Server?
Dear friends.
I have installed SAP ECC 6.0 and Adobe LiveCycle designer ES 8.2 on my computer.
Now I want to use Adobe LiveCycle designer in SAP by TCODE:SFP.
Please tell me how to configure Adobe LiveCycle designer on my SAP Server in details.Hi MSReddy,
You don't need to configure it on SAP server. It should be installed on you desktop only.
Install ADLC on your desktop and open SFP it should work. If its not showing you the layout it means you are using wrong version of ADLC. Use ADLC downloaded from SAP Service market place only.(service.sap.com), else it will create problems.
Regards,
Vaibhav -
How to setup CSS as reverse proxy server without cache server
Hi, question regarding CSS capabilities.
Is there a way to setup CSS (11000 series or 11500) to act as a reverse proxy server without caching server in place? Or is it possible for CSS to cache contents on its own?
And what is disk space on CSS used for?
Thank you.Thank you for clarification on disk usage on CSS. I have gone through sample config for reverse proxy caching
http://www.cisco.com/warp/customer/117/CSS_CEreverseproxy.html
Does this mean only way to have CSS to do reverse proxying is to have cache engine in conjunction with CSS?
Thank you again in advance. -
Reverse proxy server on top of load balancer
Hi ,
I have seen some customers with setup including Reverse Proxy Server on top of Load balancer with SSL accelerator configured with oracle apps 11i , my query is what is the use of configuring Reverse proxy server on top of Load balancer as load balancer can act as reverse proxy.
Thanks,
PuneethHi;
Pelase see Steven Chan blog entery
In-Depth: Load-Balancing E-Business Suite Environments
http://blogs.oracle.com/stevenChan/2006/06/indepth_loadbalancing_ebusines.html
Also see:
11i Forms LoadBalancing question
Load Balancing for EBS R12
Check notes, i belive those are should gives u some answer
Regard
Helios
Maybe you are looking for
-
How to get the content in embed swf file in Swf Loader on run time
How to get the content in embed swf file in Swf Loader on run time [Bindable] [Embed(source="assets/index.swf")] private var SWFSRC:Class; <mx:SWFLoader id="_swfloader" source="{SWFSRC}" />
-
I have a 1 TB IMac, 950 GB of my iMac HD have been eaten alive by my Video Recordings of family events using my canon vixia hf 100 HD recorder. I cannot use my computer now, due to lack of space on the hard drive. I now own two 2 tb external hard d
-
HT201328 how to unlock iphone without a computer?
how can i unlock my iphone 5s without a computer?
-
HI MY REQUIREMENT IS AS FOLLOWS Shopping carts created . When I go to sourcing cockpit I would like to fist display them as shooping carts insted of items. the display I am expecting ( as same as the screen appear to approver with Shopping cart no -
-
InDesign Content Manager 'Cannot open' error message
We are attempting to open InDesign version 2, 'indd' files, with version 3.0.1. We are getting the 'Cannot open xxxx.indd. Please upgrade your plugins to their latest versions, or upgrade to the latest version of Adobe InDesign'. We are able to use