SharePoint 2013 - Office Web Apps - Internal and External Use
I have successfully installed SharePoint 2013 and Office Web Apps on Azure VMs inside an Azure Virtual Network (IaaS model). Everyting is working well. However, my testing has shown that external users and internal users can't use Office Web Apps at the
same time.
Office Web Apps, installed on its own vm, accomodates an external and internal URL quite well. However, SharePoint 2013 appears to only allow one setting for WOPI Zone, either internal or external but not both. I've set the WOPI zone to Internal-HTTPS (Set-SPWOPIZone
–Zone “internal-https”). OWA works just fine if accessed from inside the Azure Virtual Network. However, if I try to access from outside the Virtual Network, from the Internet, Office Web Apps fails. The exact oppisite is also true. I can set WOPI Zone to
External-HTTPS and accessing from the Internet works fine, but accessing inside the Virtual Network fails.
Am I missing something? I, obviously, want Office Webs Apps to function properly for both internal and external users simultaneously.
I appreciate any help anyone can provide here.
Glenn
Hi Glenn,
To have both the use of Internet and Internal available to your end-users, you first need to configure AAM setting. Open Central Administration > Application Management > Configure alternate access mappings. Let's say there is an existing web application
named http://sharepoint and my end-users from local network are able to access it using the URL http://sharepoint (root site collection). Here you need to add the Internet URL by select the web application and click Edit Public URLs. Add the Internet domain
to the web application, e.g http://sharepoint.abc.com. You don't necessarily have to edit binding setting in IIS. Before continuing next steps, make sure you are able to access http://sharepoint.abc.com from the Internet while being able to access http://sharepoint
from local network (aka Internal).
On the machine where Office Web App (OWA) Server 2013 is installed, open PowerShell to add OWA module and use the following command to re-create a new OWA server farm if you've completed configuring it previously.
New-OfficeWebAppsFarm -InternalUrl "http://owa" -ExternalUrl "http://owa.abc.com" -EditingEnabled.
In this case, I'm not using SSL certificate to encrypt data over the Internet. You can use Internet-public IP of the OWA server like -ExternalUrl "http://198.xxx.xxx.xx". Add CertifcateName parameter if you want to use whether CA-issued certificate
or self-signed certificate.
On your SharePoint machine, you need to re-bind all WFE machines to WAC farm using the cmdlet New-SPWOPIBinding. Next, you need to set the WOPI zone for both internal and external.
Set-SPWOPIZone -zone "external-http"
Note: I'm not all using certificate in my guidance. But the steps to have it configured is just to add more parameter.
I've recently successfully deployed OWA multi-server farm for both internal and internet uses for two big clients. In real-world scenario, ideally OWA should be published through firewall (Forefront UAG, TMG, F5...etc). Please let me know if you still have
issues after following my steps. My email: [email protected]
Regards,
-T.s
Thuan Soldier
A 23-year-old man loving Microsoft technologies and making crazy ideas on business journey.
SharePoint Vietnam |
Blog | Twitter
Similar Messages
-
SharePoint 2013 Office Web App issue
We met an issue on Office Web App with SharePoint 2013.
Error message on the page:
Sorry, there was a problem and we can't open this document. If this happens again, try opening the Microsoft Word.
There is no related log in Windows Event viewer.
In SharePoint ULS log, related message as below:
08/12/2014 06:42:45.49 w3wp.exe (0x2C90) 0x2FE0 SharePoint Foundation Claims Authentication ahds8 Unexpected SPJsonWebSecurityBaseTokenHandler: Issuer name in token '00000003-0000-0ff1-ce00-000000000000@testrealm' doesn't match any of the registered issuer names for trusted sts 'collaboration metadata'. 7ba9aedb-4658-4a32-aaaa-20bcd0d52be6
08/12/2014 06:42:45.49 w3wp.exe (0x2C90) 0x2FE0 SharePoint Foundation Monitoring b4ly Medium Leaving Monitored Scope (Application Authentication Pipeline). Execution Time=7,5254676222816 7ba9aedb-4658-4a32-aaaa-20bcd0d52be6
08/12/2014 06:42:45.49 w3wp.exe (0x2C90) 0x2FE0 SharePoint Foundation Application Authentication ajezu Unexpected SPApplicationAuthenticationModule: Failed to authenticate request, unknown error. Exception details: System.IdentityModel.Tokens.SecurityTokenException: Issuer name is not registered at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityBaseTokenHandler.ValidateTokenIssuer(X509SecurityToken signingKey, String tokenIssuer) at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityBaseTokenHandler.ValidateToken(SecurityToken token) at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityTokenHandler.ValidateToken(SecurityToken token) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.TryExtractAndValidateToken(HttpContext httpContext, SPIncomingTokenContext& tokenContext) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.ConstructIC... 7ba9aedb-4658-4a32-aaaa-20bcd0d52be6
08/12/2014 06:42:45.49* w3wp.exe (0x2C90) 0x2FE0 SharePoint Foundation Application Authentication ajezu Unexpected ...laimsPrincipalAndSetThreadIdentity(HttpApplication httpApplication, HttpContext httpContext, SPFederationAuthenticationModule fam) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.AuthenticateRequest(Object sender, EventArgs e) 7ba9aedb-4658-4a32-aaaa-20bcd0d52be6
08/12/2014 06:42:45.49 w3wp.exe (0x2C90) 0x2FE0 SharePoint Foundation General 8nca Medium Application error when access /sites/111/_vti_bin/wopi.ashx, Error=Issuer name is not registered at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityBaseTokenHandler.ValidateTokenIssuer(X509SecurityToken signingKey, String tokenIssuer) at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityBaseTokenHandler.ValidateToken(SecurityToken token) at Microsoft.SharePoint.IdentityModel.SPJsonWebSecurityTokenHandler.ValidateToken(SecurityToken token) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.TryExtractAndValidateToken(HttpContext httpContext, SPIncomingTokenContext& tokenContext) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.ConstructIClaimsPrincipalAndSetThreadIdentity(HttpApplication httpApplication, HttpContext httpCont... 7ba9aedb-4658-4a32-aaaa-20bcd0d52be6
The farm is having 2 WFE. There is NLB setting up for them.
AAM has been set to Default.
OWA binding set to -AllowHttp, zone set to internal-http. AllowOAuthOverHttp set to true.
The strange thing is when days ago we finish the installation, we try the link http://{server_name}/somefolder/document.docx to do the test, it works fine.
But today we try the link http://{NLB_link}/somefolder/documnet.docx, above error occur.
We are not sure whether AAM setting cause this issue or some other reaone. But even we remove the AAM to use the Server Name in link, still above issue.
Any idea/comments would be appriciated.What is the default AAM? Is it the server_name, or the NLB_Link? Might want to try having the NLB_Link as the primary (default) AAM if you haven't already?
Not sure if you have seen the Troubleshooting steps here:
http://technet.microsoft.com/en-us/library/ff431687(v=office.15).aspx#tshoot
it discusses use of the PowerShell command:
New-OfficeWebAppHost (http://technet.microsoft.com/en-us/library/jj219459(v=office.15).aspx) which might be required for your NLB_Link.
Gavin. -
SharePoint 2013 - Office web apps intermittent issue
From past few weeks we are seeing issue while opening the documents from sites error message says “Sorry something went wrong + An unexpected error occur on the Server”. This happens with individual users accounts(Since it is
expected behavior with Service account for Office web Apps). After identifying on which server we are seeing the issue we are performing the
IIS reset on that effected Server and then issue will resolve but after a week or 10 days this is repeated again. If anyone has seen this issue in(SP2013+OWA) please share your inputs for permanent fix.
SubhashHi Cristian,
Below is the Log file. Please refer.
08/06/2014 11:41:09.73 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache air4a Monitorable Token Cache: Failed to get token from distributed cache for '0).w|s-1-5-21-2146773085-903363285-719344707-1611799'.(This
is expected during the process warm up or if data cache Initialization is getting done by some other thread). ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.73 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache air4b Monitorable Token Cache: Reverting to local cache to get the token for '0).w|s-1-5-21-2146773085-903363285-719344707-1611799'. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation Application Authentication aiv3c Exception System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Configuration.ConfigurationChannelFactory`1[Microsoft.SharePoint.IdentityServices.IApplicationSecurityTokenServiceContract],
cannot be used for communication because it is in the Faulted state. at System.ServiceModel.Channels.CommunicationObject.ThrowIfDisposed() at System.ServiceModel.ChannelFactory.EnsureOpened()
at System.ServiceModel.ChannelFactory`1.CreateChannel(EndpointAddress address, Uri via) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.GetInternalAppStsChannel() at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.<>c__DisplayClass2.<RequestSelfIssuedToken>b__0()
at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.RequestSelfIssuedToken(RequestApplicationSecurityToken rst)
StackTrace: at onetnative.dll: (sig=6aba1f5f-ccc4-4590-af00-b8ffe7fe99a0|2|onetnative.pdb, offset=28BE6) at onetnative.dll: (offset=152A9) ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation Unified Logging Service c91s Monitorable Watson bucket parameters: Microsoft SharePoint Foundation 4, ULSException14, 269cd32d "sharepoint foundation",
0f001144 "15.0.4420.0", b2c61fc4 "system.servicemodel", 0400766f "4.0.30319.0", 51d7762b "fri jul 05 18:43:07 2013", 000000e4 "000000e4", 00000063 "00000063", 96a3e724 "communicationobjectfaultedexception",
00215742 "aiv3c" ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation Application Authentication agmxo Exception System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Configuration.ConfigurationChannelFactory`1[Microsoft.SharePoint.IdentityServices.IApplicationSecurityTokenServiceContract],
cannot be used for communication because it is in the Faulted state. at System.ServiceModel.Channels.CommunicationObject.ThrowIfDisposed() at System.ServiceModel.ChannelFactory.EnsureOpened()
at System.ServiceModel.ChannelFactory`1.CreateChannel(EndpointAddress address, Uri via) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.GetInternalAppStsChannel() at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.<>c__DisplayClass2.<RequestSelfIssuedToken>b__0()
at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.RequestSelfIssuedToken(RequestApplicationSecurityToken rst)
at Microsoft.SharePoint.IdentityModel.OAuth2.SPOAuth2SecurityTokenManager.RequestRawLoopbackToken(OAuth2EndpointIdentity endpointIdentity, JsonWebSecurityToken onBehalfOf, String applicationContext) at Microsoft.SharePoint.IdentityModel.OAuth2.SPOAuth2SecurityTokenManager.IssueLoopbackTokenString(Uri
endpointAddress, SPIdentityContext identityContext, String applicationContext, DateTime& validTo) StackTrace: at onetnative.dll: (sig=6aba1f5f-ccc4-4590-af00-b8ffe7fe99a0|2|onetnative.pdb, offset=28BE6) at onetnative.dll: (offset=152A9) ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation Unified Logging Service c91s Monitorable Watson bucket parameters: Microsoft SharePoint Foundation 4, ULSException14, 269cd32d "sharepoint foundation",
0f001144 "15.0.4420.0", b2c61fc4 "system.servicemodel", 0400766f "4.0.30319.0", 51d7762b "fri jul 05 18:43:07 2013", 000000e4 "000000e4", 00000063 "00000063", 96a3e724 "communicationobjectfaultedexception",
0018c5ce "agmxo" ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation WOPI ajc39 Unexpected WOPIFrame - Unhandled exception: System.ServiceModel.CommunicationObjectFaultedException: The communication object, System.ServiceModel.Configuration.ConfigurationChannelFactory`1[Microsoft.SharePoint.IdentityServices.IApplicationSecurityTokenServiceContract],
cannot be used for communication because it is in the Faulted state. at System.ServiceModel.Channels.CommunicationObject.ThrowIfDisposed() at System.ServiceModel.ChannelFactory.EnsureOpened()
at System.ServiceModel.ChannelFactory`1.CreateChannel(EndpointAddress address, Uri via) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.GetInternalAppStsChannel() at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.<>c__DisplayClass2.<RequestSelfIssuedToken>b__0()
at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode) at Microsoft.SharePoint.IdentityServices.SPApplicationSecurityTokenServiceClient.RequestSelfIssuedToken(RequestApplicationSecurityToken rst)
at Microsoft.SharePoint.IdentityModel.OAuth2.SPOAuth2SecurityTokenManager.RequestRawLoopbackToken(OAuth2EndpointIdentity endpointIdentity, JsonWebSecurityToken onBehalfOf, String applicationContext) at Microsoft.SharePoint.IdentityModel.OAuth2.SPOAuth2SecurityTokenManager.IssueLoopbackTokenString(Uri
endpointAddress, SPIdentityContext identityContext, String applicationContext, DateTime& validTo) at Microsoft.SharePoint.IdentityModel.OAuth2.SPOAuth2SecurityTokenManager.IssueLoopbackTokenString(Uri endpointAddress, SPUser user,
String applicationContext, DateTime& validTo) at Microsoft.SharePoint.Utilities.SPWOPIHost.GetAccessToken(SPWeb web, Guid uniqueId, String proofKeyId, SPUrlZone zone, SPBasePermissions perms, Boolean hasEditLicense, Int64& ttl)
at Microsoft.SharePoint.Utilities.SPWOPIHost.GetAccessToken(SPFile file, String proofKeyId, SPUrlZone zone, Int64& ttl) at Microsoft.SharePoint.Utilities.SPWOPIHost.GetWOPITargetInternal(HttpContext httpContext, SPWeb web, Object&
spPrimeObject, SPWOPIAction& requestedAction, SPRegionalSettings spSettings, String& wopiAppUrl, String& wopiFavIconUrl, String& wopiAccessToken, Int64& wopiAccessTokenTtl, String& errorMessageToDisplay, String& redirectUrl)
at Microsoft.SharePoint.ApplicationPages.WOPIFrameHelper.OnLoadHelper(WOPIFrame frame) at Microsoft.SharePoint.ApplicationPages.WOPIFrameHelper.OnLoad(WOPIFrame frame) ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation General aat87 Monitorable An error has occurred on the server. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache ah24q Unexpected SPDistributedCachePointerWrapper::InitializeDataCacheFactory - No cache hosts are present in the farm. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache ah24w Unexpected Unexpected Exception in SPDistributedCachePointerWrapper::InitializeDataCacheFactory for usage 'DistributedViewStateCache'
- Exception 'System.InvalidOperationException: SPDistributedCachePointerWrapper::InitializeDataCacheFactory - No cache hosts present in the farm. at Microsoft.SharePoint.DistributedCaching.SPDistributedCachePointerWrapper.InitializeDataCacheFactory()'. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:09.78 w3wp.exe (0x1688) 0x4764 SharePoint Foundation General ajb4s Monitorable ViewStateLog: Failed to write to the velocity cache: Documents/Srikanth_excel test.xlsx&action=default ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:19.97 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache ah24q Unexpected SPDistributedCachePointerWrapper::InitializeDataCacheFactory - No cache hosts are present in the farm. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:19.97 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache ah24w Unexpected Unexpected Exception in SPDistributedCachePointerWrapper::InitializeDataCacheFactory for usage 'DistributedLogonTokenCache'
- Exception 'System.InvalidOperationException: SPDistributedCachePointerWrapper::InitializeDataCacheFactory - No cache hosts present in the farm. at Microsoft.SharePoint.DistributedCaching.SPDistributedCachePointerWrapper.InitializeDataCacheFactory()'. ccecab9c-73c6-e096-b4ac-251e2bb15206
08/06/2014 11:41:19.97 w3wp.exe (0x1688) 0x4764 SharePoint Foundation DistributedCache air4g Monitorable Token Cache: Failed to initialize SPDistributedSecurityTokenCache Exception: 'System.InvalidOperationException:
SPDistributedCachePointerWrapper::InitializeDataCacheFactory - No cache hosts present in the farm. at Microsoft.SharePoint.DistributedCaching.SPDistributedCachePointerWrapper.InitializeDataCacheFactory() at Microsoft.SharePoint.DistributedCaching.SPDistributedCache..ctor(String
name, TimeSpan timeToLive, SPDistributedCacheContainerType containerType, Boolean encryptData) at Microsoft.SharePoint.IdentityModel.SPDistributedSecurityTokenCache..ctor(String name, TimeSpan timeToLive, SPDistributedCacheContainerType
containerType, Boolean encrptyData, TimeSpan minimumTokenExpirationWindow) at Microsoft.SharePoint.IdentityModel.SPDistributedSecurityTokenCacheInitializer.Init(Object state)'. ccecab9c-73c6-e096-b4ac-251e2bb15206 -
Office Web Apps not working externally SharePoint 2013
In the production farm we have connected office web apps server which is FQDN server name ( xxx.xxx.corp.local) , we can open the sites internally without any issues, but when we open from externally office web apps asking for authentication and not working
properly.
Please help me how to make it work in external.
Thanks, Ram ChYou will need a public facing URL or IP address. Check below
You need to configure your OWA for internet
New-OfficeWebAppsFarm –InternalUrl "md1xxx95.jdaxx.corp.local" -ExternalUrl "http://198.xxx.xxx.xxx" -EditingEnabled
Set-SPWOPIZone –zone
“external-http”
Detailed steps in
http://social.technet.microsoft.com/wiki/contents/articles/19039.sharepoint-2013-how-to-enable-office-web-apps-to-work-in-both-internal-and-external-environments.aspx
Set-SPWOPIZone –zone “external-http”
Set-SPWOPIZone –zone “external-http”
If this helped you resolve your issue, please mark it Answered -
SharePoint 2013 SP1 and Office Web Apps SP1 not working using HTTP
Hi I had problems installing and configuring Office Web Apps 2013 SP1 integrated with SP 2013 SP1.
Do you know if there is any issue?
This is the error in the owa side:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 4/24/2014 10:04:54 PM
Event time (UTC): 4/24/2014 9:04:54 PM
Event ID: 86c0893b9e89427babde2c4e931e0a28
Event sequence: 17
Event occurrence: 2
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/2/ROOT/wv-1-130428459380785645
Trust level: Full
Application Virtual Path: /wv
Application Path: C:\Program Files\Microsoft Office Web Apps\WebWordViewer\
Machine name: SPS-OWAS01
Process information:
Process ID: 13696
Process name: w3wp.exe
Account name: NT AUTHORITY\NETWORK SERVICE
Exception information:
Exception type: HttpUnhandledException
Exception message: Exception of type 'System.Web.HttpUnhandledException' was thrown.
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.HttpContext.InvokeCancellableCallback(WaitCallback callback, Object state)
at System.Web.UI.Page.LegacyPageAsyncInfo.CallHandlersPossiblyUnderLock(Boolean onPageThread)
at System.Web.UI.Page.LegacyPageAsyncInfo.CallHandlers(Boolean onPageThread)
Unable to determine zone from request
at Microsoft.Office.OpenWebApplication.WopiOM.DecomposeWopiUrl(List`1 actionList, HttpRequest request, WopiAction currentAction, String extension, Boolean forceSsl)
at Microsoft.Office.Web.Apps.Environment.WacServer.WSUrlAdapter.ChangeActionInWacUrl(HttpRequest request, WacUrlApplication application, WacUrlAction currentAction, WacUrlAction targetAction)
at Microsoft.Office.Web.WordViewer.Controls.Application.RegisterApplicationInit()
at Microsoft.Office.Web.Common.AApplication.OnPreRender(EventArgs e)
at Microsoft.Office.Web.WordViewer.Controls.Application.OnPreRender(EventArgs e)
at System.Web.UI.Control.PreRenderRecursiveInternal()
at System.Web.UI.Control.AddedControl(Control control, Int32 index)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Page.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Request information:
Request URL:
http://sps-owas01/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&WOPISrc=http://sharepoint.internal/_vti_bin/wopi.ashx/files/8b568ecdf89c44d8afd4132bc0b82b32&sc=http://sharepoint.internal/SitePages/Home.aspx&wdEnableRoaming=1
Request path: /wv/wordviewerframe.aspx
User host address: 10.10.199.27
User:
Is authenticated: False
Authentication Type:
Thread account name: NT AUTHORITY\NETWORK SERVICE
Thread information:
Thread ID: 7
Thread account name: NT AUTHORITY\NETWORK SERVICE
Is impersonating: False
Stack trace: at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.HttpContext.InvokeCancellableCallback(WaitCallback callback, Object state)
at System.Web.UI.Page.LegacyPageAsyncInfo.CallHandlersPossiblyUnderLock(Boolean onPageThread)
at System.Web.UI.Page.LegacyPageAsyncInfo.CallHandlers(Boolean onPageThread)
Custom event details:
José Quinto Zamora SharePoint and Search Specialist MCITP and MCPD in SharePoint 2010
http://joSharePoint.comIt show me also this message:
<meta content="width=device-width" name="viewport" /><style></style>
Server Error in '/wv' Application.
Unable to determine zone from request
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: Microsoft.Office.OpenWebApplication.DiscoveryEntryNotFoundException: Unable to determine zone from request
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[DiscoveryEntryNotFoundException: Unable to determine zone from request]
Microsoft.Office.OpenWebApplication.WopiOM.DecomposeWopiUrl(List`1 actionList, HttpRequest request, WopiAction currentAction, String extension, Boolean forceSsl) +598
Microsoft.Office.Web.Apps.Environment.WacServer.WSUrlAdapter.ChangeActionInWacUrl(HttpRequest request, WacUrlApplication application, WacUrlAction currentAction, WacUrlAction targetAction) +161
Microsoft.Office.Web.WordViewer.Controls.Application.RegisterApplicationInit() +1766
Microsoft.Office.Web.Common.AApplication.OnPreRender(EventArgs e) +1531
Microsoft.Office.Web.WordViewer.Controls.Application.OnPreRender(EventArgs e) +17
System.Web.UI.Control.PreRenderRecursiveInternal() +113
System.Web.UI.Control.AddedControl(Control control, Int32 index) +12375740
System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +150
System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
System.Web.UI.Page.Render(HtmlTextWriter writer) +40
System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +150
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +5363
José Quinto Zamora SharePoint and Search Specialist MCITP and MCPD in SharePoint 2010
http://joSharePoint.com -
Sharepoitn 2013 - Office Web Apps Licensing
Dears,
I do have the license key with me for the office web apps 2013. The office web apps are working with our SharePoint 2013 portal without any issues. We were able to view the documents but couldn't edit the documents which are hosted in our portal.
How can i apply the license key for office web apps? do i need to execute any power shell commands? please advice.
thanks in advance,
Ammarthanks Steven for your reply and appreciate the same.
but i need to know where exactly i should pass the licensing value as a parameter or the exact way to apply the license.
when i was searching i found the below link:
http://blogs.msdn.com/b/microsoft_press/archive/2013/02/04/from-the-mvps-installing-office-web-apps.aspx
under licensing it was mentioned like below:
Licensing
So the Office web apps farm is up and running and you have enabled editing. There is though another step before your users will be able to actually edit documents with Office Web Apps; you need to license the users for editing.
This is achieved by running a series of PowerShell commands on the SharePoint 2013 Central Administration server:
Get-SPUserLicense
$x = New-SPUserLicenseMapping -SecurityGroup <ADsecuritygroup> –License OfficeWebAppsEdit
$x | Add-SPUserLicenseMapping
Enable-SPUserLicensing
Is that correct? is anyone executed the above command?
please advice.
thanks in advance,
Ammar -
Got errors when trying to open word document with Office Web App Server and customized WOPI host
I am configuring the Office Web App Server with our ASP.NET MVC WOPI host based on this example. https://code.msdn.microsoft.com/office/Building-an-Office-Web-f98650d6. While both the OWA server and WOPI server has been set up and I can use Excel and PowerPoint
app to open and edit xls and ppt file now, there are problems opening word documents no matter I enable or disable the editing function of OWA server.
When I open a word document while enabling editing I got this error:
If I disable editing I got this message:
I have tried several file so I thought it is not the files' problem. Also I didn't find any exception in the log of OWA server.Hi Gary Jiang,
Thanks for posting in MSDN forum.
This forum is for developers discussing issues about
apps for Office.
Based on the description, it seems that you got an issue when you deploy the code sample. If I understood clearly, I suggest that you contact the author of the code sample from the "Q and A" tab.
Also if you have the question about WOPI, I suggest that you get more effective response from
Office
Protocols forum.
Regards & Fei
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
Publish Sharepoint 2013 via Web Application Proxy and Kerberos Authentication
This is similar to
http://social.technet.microsoft.com/Forums/windowsserver/en-US/66c23aae-8774-4257-b9f9-b796e69b0318/action?threadDisplayName=publishing-sharepoint-2010-using-web-application-proxy
However I have tried his resolution to no avail.
I am trying to publish a SharePoint 2013 website via web application proxy. SharePoint 2013 is using negotiate (Kerberos) as its authentication provider. When trying to browse to the site externally via the WAP I get an http error 500 internal server error.
In the web application proxy's event viewer I find the following two entries every time I try to browse the site.
event ID 13019
level: warning
Web Application Proxy cannot retrieve a Kerberos ticket on behalf of the user because of the following general API error: No credentials are available in the security package
(0x8009030e).
Details:
Transaction ID: {5672be45-a4b8-0005-58ff-7256b8a4cf01}
Session ID: {5672be45-a4b8-0000-3909-7356b8a4cf01}
Published Application Name: sharepoint
Published Application ID: ****
Published Application External URL: https://sharepoint.domain.com
Published Backend URL: https://sharepoint.domain.com
User: [email protected]
User-Agent: Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 920) like Gecko
Device ID: <Not Applicable>
Token State: OK
Cookie State: NotFound
Client Request URL:
https://sharepoint.domain.com/home?authToken=****client-request-id=****
Backend Request URL: <Not Applicable>
Preauthentication Flow: PreAuthBrowser
Backend Server Authentication Mode: WIA
State Machine State: BackendRequestProcessing_Pending
Response Code to Client: <Not Applicable>
Response Message to Client: <Not Applicable>
Client Certificate Issuer: <Not Found>"
And
event ID 12027
level: error
Web Application Proxy encountered an unexpected error while processing the request.
Error: No credentials are available in the security package
(0x8009030e).
Details:
Transaction ID: ****
Session ID: ****
Published Application Name: Sharepoint
Published Application ID: ****
Published Application External URL: https://sharepoint.domain.com/
Published Backend URL: https://sharepoint.domain.com/
User: [email protected]
User-Agent: Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 920) like Gecko
Device ID: <Not Applicable>
Token State: OK
Cookie State: NotFound
Client Request URL:
https://gateway.dcsch.co.uk/home?authToken=****client-request-id=****
Backend Request URL: <Not Applicable>
Preauthentication Flow: PreAuthBrowser
Backend Server Authentication Mode: WIA
State Machine State: OuOfOrderFEHeadersWriting
Response Code to Client: 500
Response Message to Client: <Not Applicable>
Client Certificate Issuer: <Not Found>"
I have tried everything I have seen in many posts and the one linked above but cannot get this working. It does work fine internally.And within the next 10 minutes I found this
http://technet.microsoft.com/en-us/library/dn308246.aspx#Kerberos
Needed to set up delegation to ANY service in the Web application proxy -
Meeting Place Web Servers ( Internal and External )DNS and IP Addressing
For the Meetingplace 8.5 what will be the IP addresses of the Internal Web Server ( Internal IP's from the same subnet as of the CUCM) and for the External one interface from the internal network subnet ( CUCM subnet) and the other Public IP address?
How we will be mapping the DNS FQDN for these IP addresses?
Do we need to have one internal DNS server and the other place in the DMZ?Hi Ali,
You need two Web Server one Internal and one External. While configuring you internal web server you also add external if external particpants are allowed or not.
For internal web server you want to make sure it's on the same subnet so internal particpants can access that one. For external you need to make sure the IP configured on external one is either natted ip or public ip so that when they type the external domain name it resolves to this external server ip address.
Let me know if you have more questions.
HTH
Arun -
Application for both internal and external use
Hi,
I am looking to develop an application for a small company that will be an order tracking system. The app would need to be accessible externally over the web for customers to log in and check their order status, but also internally by the company staff to update statuses, enter comments etc.
Does anyone have any suggestions or best practices regarding security when pushing an app to the external world?
One thing I considered was having two apps, one for the internal usage and one for the external usage, both with separate parsing schemas. Then create everything under the internal schema and grant select up to the external schema. That way it ensures at the DB level that the application can only read from certain tables. Then anything which the external site does need to update, either do it through a staging table, or grant up the appropriate tables to have insert allowed. Then put triggers on the tables which will raise an exception if columns are updated from a user who isn't authenticated etc.
Does this all sound ok? Is it overkill? Anyone any other suggestions? I want to avoid having multiple databases or instances, simply because for the size of the company it doesn't warrant such complexity (or cost/resources). We won't be storing any "sensitive" data so to speak, but obviously need to protect against malicious intruders.
ThanksWhen looking to design your application in this scenario it is best to assume the worst and see what impact it has on your environment. There are several attack scenarios that immediately spring to mind
A problem in the Apex framework leads to running arbitrary SQL statements.
A problem in the code leads to running arbitrary SQL statements.
A problem in the code leads to cross-site scripting attacks.
Configuration problems mean Apex components are available to the Internet.
Obviously if cost is an issue there will always be a compromise in security so make sure you can do the the absolute best with the resources available to you. Separating the Internet side from the Internal side as much as you can is always a good idea.
Sony was recently fined in the UK for not doing enough to protect personal data, so you should have evidence to ensure you have done the absolute best you can.
Two things available over the internet currently to help you;
https://secure.recx.co.uk/ApexSecUI/ - ApexSec Security Scanner
http://www.enkitec.com/products/esert_cloud - eSert cloud
Both provide free credits to scan your application for security problems for free.
Edited by: Recx Ltd on Feb 6, 2013 12:12 PM -
Using office web apps with SharePoint 2013
Hi,
I would like to use office web apps in our SharePoint 2013 environment. I would like to know if OWA has to have a dedicated server or can I install it on the SharePoint 2013 app server.
SherazadWith SharePoint 2013, Office Web Apps cannot be installed on the SharePoint Server, it must be installed on its own server, not shared with any other IIS-based service (it essentially "takes over" IIS).
Trevor Seward
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
Office Web Apps Server 2013 issue
Dear All,
I am encounter problem when I try to open document from my browser. Prompt message will pop-out when it try to preview a document:
"sorry, there was a problem and we can't open this document. If this happens again, try opening the document in Microsoft word"
When I check in Event viewer, there is an error display:
"Could not contact WOPI End Point. Error details - 'Unauthorized url - http:bla.bla.bla....."
Kindly advise on how should I resolve this issue.
Application Note:
1. Windows OS: Windows Server 2012 R2
2. Office Web Server 2012 SP1
3. SharePoint Server 2013
Thank you.Verify if you have configured correctly by checking the following post
https://technet.microsoft.com/en-us/library/ff431687.aspx
In case everything is correct, Please check the following post for similar issue
https://social.technet.microsoft.com/Forums/sharepoint/en-US/f7be5f88-8c98-464e-8596-60956b5e98fd/sharepoint-2013-office-web-apps-problem-unable-to-openviewedit?forum=sharepointgeneral.
http://blogs.technet.com/b/justin_gao/archive/2014/12/19/troubleshooting-error-event-id-8115-when-you-install-office-web-apps-server-2013-on-windows-server-2012-r2.aspx
Note:Check with non Farmadmin account
Please Mark it as answer if this reply helps you in resolving the issue,It will help other users facing similar problem -
When opening any Microsoft documents ( docx, ppt etc) in SharePoint 2013,
Internet Explorer behavior : "Sorry, something went wrong" An unexpected error has occurred message and then nothing happens.
In Chrome : Pops (Microsoft Office needs your permission) message and on clicking RUN, it opens the document.
In Firefox : the documents opens, after asking which application do you want to use to open it.
The feature (Open Documents in Client Applications by Default) is not activate.
Why the MS documents are not working in IE 10?Hi,
According to your post, my understanding is that you failed to open Microsoft documents in SharePoint 2013.
I recommend to Run the following PowerShell in OWA Server :
Remove-OfficeWebAppsHost # To Remove any restriction
Or
New-OfficeWebAppsHost -Domain <String> # To allow specific domain Name
In addition, you can allow OAuth via HTTP using the following commands:
$config = (Get-SPSecurityTokenServiceConfig)
$config.AllowOAuthOverHttp = $true
$config.Update()
Here are two similar articles for you to take a look at:
http://blogs.msdn.com/b/fabdulwahab/archive/2013/10/30/office-web-apps-with-sharepoint-2013-issues.aspx
http://stevemannspath.blogspot.in/2013/03/sharepoint-2013-office-web-apps-issue.html
Best Regards,
Linda Li
Linda Li
TechNet Community Support -
Office web apps "Server error in '/wv' Application"
Hi, I successfully installed office web app for sharepoint 2013. However, when I tried to open documents, it shows the preview but once view/edit in browser, I got this error. What seems to be the problem?
Server error in '/wv' Application.
Unable to determine zone from requestHi ,
According to your description, my understanding is that you encountered the error “Server error in '/wv' Application. Unable to determine zone from request” when you open document using Office Web Apps.
Are you using https:// to access the Office Web Apps server? Is the default zone of your web application in Alternate Access Mappings using http:// ?
If so, you can change the default zone
of your web application in Alternate Access Mappings to use https:// .
Or set AllowOAuthOverHttp to true:
$config = (Get-SPSecurityTokenServiceConfig)
$config.AllowOAuthOverHttp = $true
$config.Update()
Reference:
http://social.technet.microsoft.com/Forums/office/en-US/de49617c-4b0a-4aa9-9877-8f085f48abc2/sharepoint-2013-sp1-and-office-web-apps-sp1-not-working-using-http?forum=sharepointadmin
http://social.technet.microsoft.com/Forums/sharepoint/en-US/f7be5f88-8c98-464e-8596-60956b5e98fd/sharepoint-2013-office-web-apps-problem-unable-to-openviewedit?forum=sharepointgeneral
Best Regards,
Eric
Eric Tao
TechNet Community Support -
Office web apps Server for Sharepoint 2013
Hello,
I used the following article to install office web apps server and hook it up to a test sharepoint server:
http://technet.microsoft.com/en-us/library/jj219455(v=office.15).aspx. The OWAS service was verified as working by loading:
https://owas.companyname.com/hosting/discovery
For the sharepoint configuration phase, the following commands were run on the sharepoint machine:
1) New-SPWOPIBinding -ServerName "owas.companyname.com" -- (owas.companyname.com) is the host name of the owas server)
2) Get-SPWOPIZone
3) Set-SPWOPIZone -zone "external-https"
However, office documents are still launching in the desktop office applications, not in the browser. Any ideas of what else I may need to do?
thanks,
SherazadHi ,
According to your description, my understanding is that you fail to configure Office Web Apps for your SharePoint 2013.
How about run Get-SPWOPIZone? If you can get a result, it says that your SharePoint have connected with Office Web Apps.
Then you can run below command to change the zone to internal-https.
Set-SPWOPIZone -zone "internal-https"
Reference:
http://technet.microsoft.com/en-us/library/ff431687(v=office.15).aspx
http://stevegoodyear.wordpress.com/sharepoint-2013-build-guide/office-web-apps-2013-server-install-and-configuration/
Thanks,
Eric
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]
Eric Tao
TechNet Community Support
Maybe you are looking for
-
How to install Apache Http server on Solaris sparc-32 bit systems
Hi Friends, I installed apache in windows platform, where we have direct .exe file to install apache on windows. I heard, in solaris different process of installation is that right...? will we get direct .bin executable file for apache like wls923_so
-
Shipping point in STO PO and RTV PO want to make mandatory
Hello, For Stock Transport purchase order of UB document type and Returns purchase order i what to make shipping mandatory. I have tried in field setting, however there is no such option to set. if you know any way to set the shipping mandatory pleas
-
How to grant or deny access to RDBMS based on ODBC ?
Hello , Is it possible to have a logon-trigger that c denies access to the database when trying to connect with ODBC? Erwin
-
How can i turn off all the mails that i recive when use any program form my iPad?
How can i turn off all the mails that i recive when use any program form my iPad?
-
HELP: cannot find class RDBMSRealm !!!
After setting the realmClass in weblogic.properties file: weblogic.security.realmClass=rdbmsrealm.RDBMSRealm weblogic.security.realm.cache.user.enable=true weblogic.security.realm.cache.group.enable=true weblogic.security.realm.cache.permission.enabl