SharePoint 2013 production environment
Hi,
I have to create a SP2013 production server .There would be only one site hosted in that SP2013 Production environment.
My Question's:
Is it fine to host WFE & DB on the single server.
If No, why i should create different servers for it.
Regards,
Purvish Shah
Hi,
The WFE and DB on the same server depends on Capacity Planning and Capacity management, Capacity planning will allow you to understand the business requirement (number of users, request per user, type of content management the environment
will be used for (static -- normal content or document management etc.) based on which you can design the environment to have DB in WFE or to have different server with WFE and DB. Please refer to the url below, it summarize on the SharePoint 2013 Capacity
Planning and Capacity Management
http://technet.microsoft.com/en-us/library/ff758645(v=office.15).aspx
http://technet.microsoft.com/en-us/library/ff758647(v=office.15).aspx
Hope it helps!!!
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. Thanks, Ajeet
Similar Messages
-
SharePoint 2013 dev environment as standalone with DC - PowerShell in Azure?
Hi,
I am looking for a PowerShell script that create based on a Visual Studio 2013 Azure image a dev environment in azure. I need a Standalone server with DC / SQL / SharePoint 2013 on one server.
Provide Microsoft a script for this requirement?
Regards,First off, Microsoft does not support SharePoint 2013 on a Domain Controller. Here are some scripting resources, however:
http://msdn.microsoft.com/en-us/library/windowsazure/dn385843.aspx
https://github.com/WindowsAzure/azure-sdk-tools-samples/wiki/Automated-Deployment-of-SharePoint-2013-with-Windows-Azure-PowerShell
http://blogs.msdn.com/b/windowsazure/archive/2013/05/24/automating-sharepoint-deployments-in-windows-azure-using-powershell.aspx
http://blog.appliedis.com/2013/04/29/automating-sharepoint-2013-installation-on-windows-azure-iaas/
http://absolute-sharepoint.com/2013/10/create-a-scripted-sharepoint-2013-development-environment-tutorial-part-1.html
Trevor Seward, MCC
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
Create a ready to use image for SharePoint 2013 development environment.
Hi
I have a requirement in which we are required to have an Image of the whole SharePoint 2013 environment, (ideally single server installation/standalone as I believe multi-tier would not be possible, or if possible suggest on that also), with all the installations
done- SQL server, SharePoint , language pack if any, App configured, search, service applications, etc etc. so that if at all required we would have that image in a server and provide that image to the developer, he would either mount it or run it and start
the SharePoint 2013 App development.
Please suggest on this.
Thanks in advance.Not for imaging purposes.
You could have an environment that is ready-to-go with the bits installed, but not configured. You would then have a post-imaging script that would configure the farm. In this process, you would also need to make sure SQL Server was aware of the server's
new name (see http://technet.microsoft.com/en-us/library/ms143799.aspx).
Trevor Seward
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
Share the same SharePoint 2013 development environment for multiple developers
Hi,
We need our developers(more than 2) to use the same ''SharePoint 2013 development server' for different application developments. Their work should not affect each others(like application pool reset etc.). How this can be achieved ?
Thanks,,Hi Kalai,
Please check the following similar post suggested that each developer could deploy his dll file to each separated web application bin folder by setting Visual Studio property "Assembly Deployment Target" to "Web Application".
http://social.technet.microsoft.com/Forums/sharepoint/en-US/7ee3858f-243c-4f43-a72d-3483ad1506f6/multiple-developers-debugging-on-different-web-apps-on-single-server?forum=sharepointgeneral
Thanks
Daniel Yang
TechNet Community Support -
SharePoint 2013 Development Environment for Devolopers
Hi All,
What is the system requirements for developing and deploying web-parts in SharePoint site for developers?
we are getting above error when trying to deploying web parts from local machine, our local machine configuration in win 7 with visual studio 2013.
Mani LHi,
This is a known bug that will be fixed in the future versions of the SharePoint Developer Tools.
As for now the workaround is to have the host mapped in the hosts file not to 127.0.0.1 but to your real IP address.
When you try to create a new SharePoint 2013 project or will change the URL of an existing project everything will work as expected.
Please mark the same as answer if it helps you. Thanks. -
How to check size of a sharepoint site of SharePoint 2013 cloud environment?
Hi
I have a subsite in sharePoint 2013 cloud envirornment. I wanted to check the size of that subsite. I can able to check the size of a site by opening that site in sharepoint designer. But size of a subsite is not there.
Please help me out.
Thanks in advance
YashYou can use storage metrics page.
Open site settings on the root site -> Storage metrics
[custom.development] -
SharePoint 2013 Hybrid Environment
Is it possible to have a SharePoint hybrid environment with My Sites on the cloud & team sites on premise?
None of the proposed solutions actually directly address the original question. I know you guys are trying to help, but marking these questions as answered when they're obviously not may help someone's points ratings, but it doesn't help the community. I
found this question marked and answered and got excited, only to find these links are the same ones I'd already found doing basic searches and which *don't* actually answer the original question of how to fully execute hybrid with on-prem team sites and O365
MySites. The Hybrid TechNet article has lots of information on general Hybrid setup and authentication scenarios, but never specifically addresses the MySites, and the MySite article has lots of info on setting up MySites but nothing about Hybrid.
What I've found:
Yes, you do have to set the on-prem MySite Settings to point to your O365 MySite host. And that's after you've done all of the ADFS/SSO configuration (best walkthrough I've found to date:
http://technet.microsoft.com/en-us/magazine/jj631606.aspx).
Issues we've found:
1. Task rollup from on-prem web apps doesn't seem to rollup to O365, which is an issue
2. Adding a Favorite to the Newsfeed from an on-prem web app attempts to go up to O365, but always says "We're setting up your MySite for the first time" and never seems to add anything to that O365 Newsfeed, which is another valuable tool that, if it doesn't
work in hybrid, makes it hard to recommend to customers.
Which makes me wonder if this specific hybrid integration is fully baked or fully supported at this time.
There needs to be some other category for these questions, such as "Suggestions Provided" and the question not marked as Answered until the original poster comes back and indicates the proposed solutions resolved their issue.
/soapbox -
SharePoint 2013 Dev Environment on a Laptop
Hi,
I'm new to SP and to VMs and I'm planning to buy a good laptop to do SP dev on it without needing to be connected to a server.
I guess I shoud have at leat 2 VMs (DC+SQL & SP) and It seems SP2013 memory requirements aren't modest.
Will I be OK with 16GB or is it much better to get the 32GB?
The rest of the relevant hardware is SSD-SATA 3 and i7-4600MQ (or HQ)
Many Thanks,
DDMore RAM the better. I have 32 GB and often wish for more. But 32 GB works well.
Consider adding one more small VM with IE, Office and SharePoint Designer. You could also access the VMs from software installed on the base laptop. You will get better performance (at least with IE) and a better user to server testing experience.
Mike Smith TechTrainingNotes.blogspot.com
Books:
SharePoint 2007 2010 Customization for the Site Owner,
SharePoint 2010 Security for the Site Owner -
Search is not working for only one site collection sharepoint 2010 production environment
did full crawling but it could not crawled particular this only site collection somehow.
when i search under Crawl log, it doesnt appear and throws message like
there are no urls in the system that match your request.
you can see following screenshot,
Thanks
Deepak patelHi Deepak,
Is this site collection url (e.g. FQDN url, or host named site collection url) different from other site collection?
If yes, please add the host named site collection in content source.
If not, and this site collection url are the same type/format with other site collection, please "reset index" if possible, and start a full crawl, let us know your resutls.
If issue still persists, please perform a query in search box, see if there is any related useful information from ULS log.
Thanks,
Daniel Yang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you
have feedback for TechNet Subscriber Support, contact [email protected]
Daniel Yang
TechNet Community Support -
Does ADFS work with SharePoint 2013 with WFEs SSL-offloaded to a F5 load balancer?
Currently we are implementing a SharePoint 2013 Production environment with 2 WFEs load-balanced by F5. SSL is offloaded to F5 and is currently working fine with Integrated Windows Authentication with NTLM. We would like to implement ADFS 3.0
later for Single Sign-on, and we are wondering if ADFS supports SSL offload.
Do we need to bind the certificate to the WFEs as well to use ADFS?
Thank you!Just got it confirmed that ADFS supports SSL offload. There is no direct communication between SharePoint and ADFS server during the authentication process. It is always the browser that's talking to ADFS server. We just need to do the following:
Configure SharePoint URLs in ADFS as replying parties with https.
Configure AAM in SharePoint to make sure internal URL is http and public URL is https. -
Install AD / SQL Server 2012 and SharePoint 2013 on a single server as Development Environment
Hi All,
I'm planning to prepare a SharePoint 2013 development environment. The current idea is to install Domain controller, SQL Server 2012 and SharePoint 2013 all on a single server. Even though this is for development purposes,
would there be any limitations specially when it comes to SP 2013 functionalities according to your experience?
Some articles i referred.
http://sharepoint-tutorial.net/post/2012/07/18/install-sharepoint-2013-domain-controller.aspx
http://social.technet.microsoft.com/Forums/en-US/f438c9a6-02e8-43d3-9963-7a0608f0b961/sharepoint2013-on-domain-controller
Thanks,
DilipHi
i understand this is a sandbox environment but you should be able to install everything.
http://sharepoint-tutorial.net/post/2012/07/18/install-sharepoint-2013-domain-controller.aspx
Hope this helps. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Development environment for SharePoint 2013
Hi,
We have requirement for one of the project. Team size would be approximately 30 resources. Development would be entirely for SharePoint 2013 Intranet solution. this will be OOTB Intranet application. We will be developing InfoPath forms and Nintex Workflows.
For such requirement we would like to setup local development environment by using either Virtual Machines.
Can anyone help me to identify that how many VM's would be required for the same? How many simultaneous users can use and work at a time? What other things I need to consider for infrastructure? How can i suggest the best possible solution for this.
Thanks in advance.
Abhijeet KhopadeHi,
According to your description, my understanding is that you want to set up the environment for SharePoint Development.
Here is a detailed article about configuring development environment:
Setting up a SharePoint 2013 Development Environment
For VM count, it depends on your project development requirements, for VM license and management ,if you are using Hyper-V, I suggest you can create posts in Hyper-V forum:
Hyper-V forum
Thanks
Best Regards
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected] -
Windows authentication failure on SharePoint 2013 zone
I am attempting to set up a Windows authentication zone in a SharePoint 2013 installation for use by the search crawler. The zone has been configured to use NTLM in order to eliminate Kerberos from the equation. The result of my
attempts to access the Windows authentication zone is a 403 error. Central Administration is working on the same server, and of course is using Windows authentication.
I know about the issue of using Windows authentication to localhost, and have configured the backconnectionhostnames entry in the registry. To prove that I can use Windows authentication using the intended host name for the SharePoint zone, I have
set up a test IIS site that binds to the host name used by the zone, and successfully authenticated using Windows authentication.
From monitoring the ULS logs it's obvious that I'm actually successfully completing Windows authentication, and getting a SharePoint claim, but from that point I'm being denied by SharePoint. I do know that my Windows credentials has site collection
administrator privileges. The most interesting failure in the ULS log appears to be:
SPApplicationAuthenticationModule: Authorization header doesn't contain Bearer, can't try to perform application authentication.
Another odd thing is that after the ULS indicates I have failed authentication, I'm redirected to /_layouts/AccessDenied.aspx instead of the login page defined in web.config. I have tried many things, including enabling Kernel-mode authentication.
Below is an excerpt from my ULS logs:
SPApplicationAuthenticationModule: There is no Authorization header, can't try to perform application authentication.
Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0
[Forced due to logging gap, cached @ 12/01/2014 15:48:32.53, Original Level: Verbose] Value for isAnonymousAllowed is : {0}
[Forced due to logging gap, Original Level: Verbose] Value for checkAuthenticationCookie is : {0}
Claims Windows Sign-In: Sending 401 for request 'https://crawler.my.host/' because the user is not authenticated and resource requires authentication.
[Forced due to logging gap, cached @ 12/01/2014 15:48:32.56, Original Level: VerboseEx] Sending HTTP response {0} - {1}:{2}.
[Forced due to logging gap, Original Level: Verbose] SPRequestModule.PreSendRequestHeaders
Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=5320.19544383434
Name=Timer Job SchedulingApproval
Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=16.4101862108173
Name=Timer Job SchedulingApproval
Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=14.9021733209109
Name=Timer Job SchedulingApproval
[Forced due to logging gap, cached @ 12/01/2014 15:48:32.95, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
[Forced due to logging gap, Original Level: VerboseEx] SPFederationAuthenticationModule.OnEndRequest: Start
SPFederationAuthenticationModule.OnEndRequest: User was being redirected to authenticate.
Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=17.2175513927049
Claims Windows Sign-In: Sending 401 for request 'https://crawler.my.host/' because the user is not authenticated and resource requires authentication.
Name=Request (GET:https://crawler.my.host:443/)
Micro Trace Tags: 0 nasq
Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=9.54646470431298
Name=Request (GET:https://crawler.my.host:443/)
SPTokenCache.ReadTokenXml: Successfully read token XML 'mydomain\myuser'.
Token Cache: Failed to get token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
Token Cache: Reverting to local cache to get the token for '0).w|s-0-0-0-0-0-0-1234'.
Token Cache: Entry missing for user 'mydomain\myuser'.
Token Cache: Failed to get token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
Token Cache: Reverting to local cache to get the token for '0).w|s-0-0-0-0-0-0-1234'.
Claims Windows Sign-In: User 'mydomain\myuser' for request url 'https://crawler.my.host/' does not have a cached SessionSecurityToken.
[Forced due to logging gap, cached @ 12/01/2014 15:48:33.24, Original Level: VerboseEx] We are in claims windows only mode for for request url '{0}'.
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
[Forced due to logging gap, cached @ 12/01/2014 15:48:33.71, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
SPSecurityContext: Added JsonWebSecurityTokenHandler to trust channel factory
SPSecurityContext: Replaced WSTrustRequestSerializer with SPTrust13RequestSerializer
SPSecurityContext: The SecurityTokenServiceBehavior is attached to the TrustChannel.
SecurityTokenServiceSendRequest: RemoteAddress: 'http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'Microsoft.IdentityModel.Protocols.WSTrust.IWSTrustChannelContract' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue'
MessageId: 'urn:uuid:f175f6ef-a93d-4efe-9173-1fba74b1eed2'
SecurityTokenServiceReceiveRequest: LocalAddress: 'http://servername:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue' MessageId:
'urn:uuid:f175f6ef-a93d-4efe-9173-1fba74b1eed2'
Entering monitored scope (ExecuteSecurityTokenServiceOperationServer). Parent No
STS Call: Issuing new security token.
SPSecurityTokenServiceManager!EnsureSharePointLogonRequestClaims: Found primary sid claim. Value: 's-0-0-0-0-0-0-1234'.
Using claim provider 'System' for operation because it is default and it is visible.
Excluding claim provider 'AD' for operation because it is not default and .
Using claim provider 'AllUsers' for operation because it is default and it is visible.
Excluding claim provider 'Forms' for operation because it is not default and .
Using claim provider 'User Profile Claim Provider' for operation because it is default and it is visible.
STS Call Claims Windows: Setting cookie lifetime to: Microsoft.IdentityModel.Protocols.WSTrust.Lifetime
STS Call Claims Windows: Successfully requested sign-in claim identity for user 'mydomain\myuser'.
STS Call: Successfully issued new security token.
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationServer). Execution Time=13.187150880908
[Forced due to logging gap, cached @ 12/01/2014 15:48:34.87, Original Level: Verbose] The SecurityTokenServiceHeaderInfo including the correlation ID was added.
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue). Execution Time=719.713539011243
[Forced due to logging gap, cached @ 12/01/2014 15:48:35.60, Original Level: Verbose] ____{0}={1}
Claims Windows Sign-In: Siginging in the the user 'mydomain\myuser' for request url 'https://crawler.my.host/'.
Updating X.509 certificate validation policy
[Forced due to logging gap, cached @ 12/01/2014 15:48:36.26, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
Adding X.509 certificate thumbprint '493E6806F4178EDD685BE5EA0AAF79ED30FB4A90' to root authority trust
SPLocalLoginProvider: Initializing and creating S2S Claim Mappings
SPLocalLoginProvider: Initialized S2S Claim Mappings.
[Forced due to logging gap, cached @ 12/01/2014 15:48:36.37, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
[Forced due to logging gap, Original Level: Verbose] Deserializing the type named {0} and with id {1}.
[Forced due to logging gap, cached @ 12/01/2014 15:48:37.17, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
[Forced due to logging gap, Original Level: Verbose] Deserializing the type named {0} and with id {1}.
[Forced due to logging gap, cached @ 12/01/2014 15:48:37.96, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
[Forced due to logging gap, Original Level: VerboseEx] SPFederationAuthenticationModule.OnSessionSecurityTokenCreated: Start
[Forced due to logging gap, cached @ 12/01/2014 15:48:38.10, Original Level: VerboseEx] SPSam.SetPrincipalFromSessionToken: End
[Forced due to logging gap, Original Level: Verbose] Looking up {0} site {1} in the farm {2}
Token Cache: Failed to add token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
Token Cache: Reverting to local cache to Add the token for '0).w|s-0-0-0-0-0-0-1234'.
Token Cache: Successfully added token to cache for '0).w|s-0-0-0-0-0-0-1234'.
SPTokenCache.ReadTokenXml: Successfully read token XML '0).w|s-0-0-0-0-0-0-1234,0#.w|mydomain\myuser,123456789012345,True,dpoRtB/hPcjVrEaJtqVWxhY8Pbfm++oHwWQ5TCB9jBlLx5n2Ky5OqGXM7ntfLB0kqIJNDUkeQrl4wL7xW2m4r0rV1TiOUf+e2mpHq8WOgN67puRViZbCxCkwmmxUpE/1OVNcDFXRCh26tvVFieK99LKZn8BJUtmP8RqxtwtwqBolNjCyZ3rfSSmtFyM3pdWjphdj312R9Lcp9/EhTpvvV1J2lFCig901ZGaPo7zOw3pFyXl1eDs+gF2Bcbc7/mMZw67/gEccsFaekBVH1TK0d9qqr6P/ISeEgzhlK4DChV94ntsw8m8Pb255yTL8WrbTykMFV3jC7R2MvqCmiKGK+g==,https://crawler.my.host/'.
Claims Windows Sign-In: Not writing a cookie for request 'https://crawler.my.host/'.
Claims Windows Sign-In: Successfully signed-in the the user 'mydomain\myuser' for request url 'https://crawler.my.host/'.
Updating header 'LOGON_USER' with value '0#.w|mydomain\myuser' for the request url 'https://crawler.my.host/'.
Leaving Monitored Scope (SPClaimsCounterScope). Execution Time=4957.74267399907
SPApplicationAuthenticationModule: Authorization header doesn't contain Bearer, can't try to perform application authentication.
Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|mydomain\myuser, ClaimsCount=27
Leaving Monitored Scope (PostAuthenticateRequestHandler). Execution Time=31.2877754016223
Micro Trace Tags: 0 nasq,69 air4a,1 air4b,22 air4a,0 air4b,1641 aeayb,732 b4ly,654 erv2,58 erv3,1814 air36,0 air37,42 b4ly,5 agb9s,39 b4ly
Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=5101.04328902137
SPFederationAuthenticationModule.OnEndRequest: User was being redirected to authenticate.
[Forced due to logging gap, cached @ 12/01/2014 15:48:38.24, Original Level: Verbose] {0}
[Forced due to logging gap, Original Level: VerboseEx] SPRequestParameters: AppPrincipal={0}, UserName={1}, UserKye={2}, RoleCount={3}, Roles={4}
Site=/
[Forced due to logging gap, cached @ 12/01/2014 15:48:38.37, Original Level: Verbose] {0}
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
[Forced due to logging gap, cached @ 12/01/2014 15:48:38.40, Original Level: VerboseEx] No SPAggregateResourceTally associated with thread.
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
[Forced due to logging gap, cached @ 12/01/2014 15:48:38.48, Original Level: VerboseEx] No SPAggregateResourceTally associated with thread.
[Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
Access Denied for /. StackTrace: at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context) at Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnEndRequest(Object sender,
EventArgs eventArgs) at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error) at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb) at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest
wr, HttpContext context) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr
rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr
nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
Leaving Monitored Scope (SPFederationAuthenticationModule.OnEndRequest). Execution Time=351.625416079418
Entering monitored scope (Request (GET:https://crawler.my.host:443/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fcrawler%2Emy%2Ehost)). Parent No
I'm extending an existing claims based web application. The way I'm testing authentication is by attempting to log in to the Windows authentication zone using the browser and an account with site collection administrator privileges. I've also
tried using the intended crawler service account, but that also fails authentication.
With regard to the default zone issue, I've already experimented with using both the default zone and another zone, but neither works.
BTW, I already have this working in a SharePoint 2013 development environment, and a similar configuration has been in a SharePoint 2010 production environment for over a year, which makes this a particularly maddening problem.
I have enabled Failed Request Tracing, and get a 401.1, 401.2, then a 403 (which says it was caused by the 401.2). I'm not sure of the significance, but the 403 trace shows the module for the 401.2 to be UrlAuthorizationModule, while the module for
the 403 error is FederatedAuthentication.
Per my ULS trace included in my original post, it appears that I'm actually getting a SharePoint claim. -
Is it possible to publish reports to SharePoint if SQL Server 2012 reporting service is on native mode?
How to do it?
I have SharePoint 2013 and SQL Server 2012. I have created cube and reports with its data tools. This is single server environment.
This is what I have done:
A) I can successfully see from SQL Server installation tool that "Reporting Service-SharePoint" and "Reporting Services Add-in for SharePoint Products" are checked.
B) I don't see Reporting Services under the Manage Service Application of the SharePoint Central Admin.
c) When I choose report from reporting service project and I click deploy, it asks Reporting Services Login, but it does not accept admin logins. Server path should be valid.
I got idea from following instruction that I should register and start the Reporting Services SharePoint service
http://msdn.microsoft.com/en-us/library/jj219068.aspx
C) I tried to run command Install-SPRSService, but it was not recognized cmdlet command.
D) I see from Reporting Service Configuration Manager that Reporting Server Mode is Native. Report Service Status is Started.
Kenny_IHi Kenny_I,
Since the release of SQL Server 2012, Reporting Services SharePoint Integrated mode has been changed from a Windows Service to be a SharePoint Shared Service. In this way, Reporting Services Configuration Manager no longer supports Reporting Services SharePoint
mode, and all the configurations of SharePoint mode is completed using SharePoint Central Administration.
In SSRS 2008 R2 or lower version, only one report server (either native mode or SharePoint integrated mode) can be active at one time in one SSRS instance. In SSRS 2012, the report server that runs in SharePoint integrated mode and the report server that
runs in Native mode work separately at the same time in one SSRS 2012 instance. So, in this issue, you don’t need to care about the report server that runs in native mode when you work with the report server that runs in SharePoint mode.
First, please install SQL Server 2012 SP1 which introduces more BI features.
For the issue you encounter when running the commands to register the Reporting Services SharePoint Service, it may occur if you run the commands in the Windows Powershell instead of the SharePoint Management Shell. Please launch the SharePoint Management
Shell by clicking Start-> All Promgrams -> Microsoft SharePoint 2013 Products -> SharePoint 2013 Management Shell. Then, please continue the steps in the following document or blog to create a Reporting Services Service Application:
Install Reporting Services SharePoint Mode for SharePoint 2013
Installing and configuring SQL Reporting services on SharePoint 2013
After a SSRS Service Application is created properly, to deploy the project to the SharePoint integrated mode report server, please see the project property settings in the following document:
Project Property Pages Dialog Box
Regards,
Mike Yin
If you have any feedback on our support, please click
here
Mike Yin
TechNet Community Support -
Hybrid Search not working from SharePoint 2013 Online to SharePoint On-premise
Hi,
I have setup a SharePoint 2013 Hybrid environment setup with the following –
Windows Server 2012 R2
SharePoint Server 2013 with April 2014 CU
SQL Server 2014
ADFS 3.0 using SSO with Web proxy and DirSync
SharePoint 2013 Online tenant on Office 365 Enterprise Subscription
I have configured the Hybrid following the article
http://technet.microsoft.com/en-us/library/jj838715(v=office.15).aspx and configured Hybrid Search. The hybrid environment was working fine including Search both ways initially
but after upgrade to April CU 2014 (along with upgrade to SQL 2014 from SQL 2012), now search from SharePoint online to SharePoint in-Premise is not working anymore.
I am still able login with the federated IDs in both the environments and get results from SharePoint Online in SharePoint in-Premise environment.
I have already tried most of the troubleshooting steps mentioned at
http://technet.microsoft.com/en-us/library/dn518363(v=office.15).aspx
Now every time, we perform a search in our SharePoint Online site, which is configured to show hybrid results from SharePoint in-premise, we don’t get results from in-premise and instead we see the following error logged in SharePoint
In-premise Web Server –
Error - An exception occurred when trying to issue security token: Exception of type 'System.ArgumentException' was thrown. Parameter name: value.
And ULS log shows the following – Even though the message seems apparent that there could be duplicate users in user profile Application, but that’s not the case. There are just 2 unique users added there.
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Portal Server
User Profiles ae0sx
Unexpected Error trying to search in the UPA. The exception message is 'System.ArgumentException: Exception of type 'System.ArgumentException' was thrown. Parameter name: value at Microsoft.SharePoint.Administration.Claims.SPIdentityProviders.GetIdentityProviderType(String
value) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.SearchUsingNameIdOrThrow(UserProfileManager upManager, String nameId, String nameIdIssuer) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager
upManager, IEnumerable`1 identityClaims)' 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (Executing the user mapping operation in GetMappedIdentityClaim()). Execution Time=1.4449 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Portal Server
User Profiles ae0su High The set of claims
could not be mapped to a single user identity. Exception Exception of type 'System.ArgumentException' was thrown. Parameter name: value has occured. 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (Inside SPIdentityClaimMapperOperations.GetClaimFromExternalMapper(); calling the registered SPIdentityClaimMapper). Execution Time=1.5596
4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Claims Authentication ae0tc
High The registered mappered failed to resolve to one identity claim. Exception: System.InvalidOperationException: Exception of type 'System.ArgumentException' was thrown. Parameter name: value ---> System.ArgumentException:
Exception of type 'System.ArgumentException' was thrown. Parameter name: value at Microsoft.SharePoint.Administration.Claims.SPIdentityProviders.GetIdentityProviderType(String value) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.SearchUsingNameIdOrThrow(UserProfileManager
upManager, String nameId, String nameIdIssuer) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager, IEnumerable`1 identityClaims)
--- End of inner exception stack trace --- at Microsoft... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1C88)
0x2494 SharePoint Foundation Claims Authentication
ae0tc High ....Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager
upManager, IEnumerable`1 identityClaims) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.<>c__DisplayClass2.<GetMappedIdentityClaim>b__0() at Microsoft.SharePoint.SPSecurity.<>c__DisplayClass5.<RunWithElevatedPrivileges>b__3()
at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode) at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback secureCode, Object param) at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated
secureCode) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetMappedIdentityClaim(Uri context, IEnumerable`1 identityClaims) ...
4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Claims Authentication af3zp
Unexpected STS Call Claims Saml: Problem getting output claims identity. Exception: 'System.InvalidOperationException: Exception of type 'System.ArgumentException' was thrown. Parameter name: value ---> System.ArgumentException:
Exception of type 'System.ArgumentException' was thrown. Parameter name: value at Microsoft.SharePoint.Administration.Claims.SPIdentityProviders.GetIdentityProviderType(String value) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.SearchUsingNameIdOrThrow(UserProfileManager
upManager, String nameId, String nameIdIssuer) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager, IEnumerable`1 identityClaims) ---
End of inner exception stack trace --- at Microsoft.O... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint
Foundation Claims Authentication fo1t
Monitorable STS Call: Failed to issue new security token. Exception: System.InvalidOperationException: Exception of type 'System.ArgumentException' was thrown. Parameter name: value ---> System.ArgumentException:
Exception of type 'System.ArgumentException' was thrown. Parameter name: value at Microsoft.SharePoint.Administration.Claims.SPIdentityProviders.GetIdentityProviderType(String value) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.SearchUsingNameIdOrThrow(UserProfileManager
upManager, String nameId, String nameIdIssuer) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager, IEnumerable`1 identityClaims)
--- End of inner exception stack trace --- at Microsoft.Office.Server.Secu... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1C88)
0x2494 SharePoint Foundation Claims Authentication
fo1t Monitorable ...rity.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager, IEnumerable`1
identityClaims) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.<>c__DisplayClass2.<GetMappedIdentityClaim>b__0() at Microsoft.SharePoint.SPSecurity.<>c__DisplayClass5.<RunWithElevatedPrivileges>b__3()
at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode) at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback secureCode, Object param) at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated
secureCode) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetMappedIdentityClaim(Uri context, IEnumerable`1 identityClaims) at Microsoft.ShareP... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1C88)
0x2494 SharePoint Foundation Claims Authentication
fo1t Monitorable ...oint.IdentityModel.SPIdentityClaimMapperOperations.GetClaimFromExternalMapper(Uri contextUri, List`1 claims)
at Microsoft.SharePoint.IdentityModel.SPIdentityClaimMapperOperations.ResolveUserIdentityClaim(Uri contextUri, ClaimCollection inputClaims) at Microsoft.SharePoint.IdentityModel.SPIdentityClaimMapperOperations.GetIdentityClaim(Uri contextUri,
ClaimCollection inputClaims, SPCallingIdentityType callerType) at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetLogonIdentityClaim(SPRequestInfo requestInfo, IClaimsIdentity inputIdentity, IClaimsIdentity outputIdentity,
SPCallingIdentityType callerType) at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.EnsureSharePointClaims(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity, SPCallingIdentityTy... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1C88)
0x2494 SharePoint Foundation Claims Authentication
fo1t Monitorable ...pe callerType) at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.AugmentOutputIdentityForRequest(SPRequestInfo
requestInfo, IClaimsIdentity outputIdentity) at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.GetOutputClaimsIdentity(IClaimsPrincipal principal, RequestSecurityToken request, Scope scope) at Microsoft.IdentityModel.SecurityTokenService.SecurityTokenService.Issue(IClaimsPrincipal
principal, RequestSecurityToken request) at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.Issue(IClaimsPrincipal principal, RequestSecurityToken request)
4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (SPSecurityTokenService.Issue). Execution Time=6.3185 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=12774004 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Execution Time=6.3185 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nasq Verbose
Entering monitored scope (CleanUpSecurityTokenServiceOperation). Parent ExecuteSecurityTokenServiceOperationServer 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (CleanUpSecurityTokenServiceOperation). Execution Time=0.0282 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=14832078 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Execution Time=0.0282 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring b4ly Medium
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationServer). Execution Time=7.2841 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____WebPart Events Offsets=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____User Address= 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____=00000000-0000-0000-0000-000000000000 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Log Correlation Id=4c8b979c-f112-d050-9764-c445282f9184 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Service Calls=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Claims Counter=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Critical Events=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____ULS Large Gap= 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Execution Time=7.2841 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Current SharePoint Operations=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____SPRequest Objects=2 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Distributed Cache=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____SQL Query Count=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Current User= 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Request Management= 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Monitoring nass Verbose
____Page Checkout Level=Published 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Logging Correlation Data 77a3 Verbose
Ending correlation. Transfer to 4c8b979c-f112-d050-9764-c834ee4cf36d 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Unified Logging Service cn4g Verbose
Trace level override is turned off. 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1C88) 0x2494 SharePoint Foundation
Logging Correlation Data 77a3 Verbose
Ending correlation. 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nasq Verbose
Entering monitored scope (CleanUpSecurityTokenServiceOperation). Parent ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (CleanUpSecurityTokenServiceOperation). Execution Time=0.0257 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____Execution Time=0.0257 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=2377140 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue). Execution Time=13.2855 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____Execution Time=13.2855 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=0 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Claims Authentication fsq7
High SPSecurityContext: Request for security token failed with exception: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Exception of type 'System.ArgumentException' was thrown. Parameter name:
value (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.InvalidOperationException: Exception of type 'System.ArgumentException' was thrown. Parameter name: value ----> System.ArgumentException:
Exception of type 'System.ArgumentException' was thrown. Parameter name: value at Microsoft.SharePoint.Administration.Claims.SPIdentityProviders.GetIdentityProviderType(String value) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.SearchUsingNameIdOrThrow(UserProfileManager
upManager, ... 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1EEC)
0x26BC SharePoint Foundation Claims Authentication
fsq7 High ...String nameId, String nameIdIssuer) at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager
upManager, IEnumerable`1 identityClaims) --- End of inner ExceptionDetail stack trace --- at Microsoft.Office.Server.Security.UserProfileIdentityClaimMapper.GetSingleUserProfileFromClaimsList(UserProfileManager upManager,
IEnumerable`1 identityClaims) at Microsoft.Office.Server.Security.UserProfileI...). 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Claims Authentication 8306
Critical An exception occurred when trying to issue security token: Exception of type 'System.ArgumentException' was thrown. Parameter name: value. 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring b4ly Verbose
Leaving Monitored Scope ([S2S] Getting token from STS and setting Thread Identity). Execution Time=16.83 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____Execution Time=16.83 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=7084490 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring b4ly Medium
Leaving Monitored Scope (Application Authentication Pipeline). Execution Time=20.6415 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____Execution Time=20.6415 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Monitoring nass Verbose
____CPU Cycles=14789795 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
Application Authentication ajezs High SPApplicationAuthenticationModule:
Error authenticating request, Error details { Header: {0}, Body: {1} }. Available parameters: 3001000;reason="There has been an error authenticating the request.";category="invalid_client" {"error_description":"Exception
of type 'System.ArgumentException' was thrown.\u000d\u000aParameter name: value"} . 4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59 w3wp.exe (0x1EEC) 0x26BC SharePoint Foundation
General
8nca Medium Application error when access /_vti_bin/sites.asmx, Error=Exception of type 'System.ArgumentException' was thrown.
Parameter name: value at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.ReadResponse(Message response) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse&
rstr) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst) at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken
onBehalfOf, SecurityToken actAs, SecurityToken delegateTo, SPRequestSecurityTokenProperties properties) at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationAuthentication(Uri context, SecurityToken onBe...
4c8b979c-f112-d050-9764-c834ee4cf36d
06/04/2014 12:58:41.59* w3wp.exe (0x1EEC)
0x26BC SharePoint Foundation General
8nca Medium ...halfOf)
at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.<>c__DisplayClass4.<GetLocallyIssuedToken>b__3() at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode)
at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.ConstructIClaimsPrincipalAndSetThreadIdentity(HttpApplication httpApplication, HttpContext httpContext, SPFederationAuthenticationModule fam) at Microsoft.SharePoint.IdentityModel.SPApplicationAuthenticationModule.AuthenticateRequest(Object
sender, EventArgs e) at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
4c8b979c-f112-d050-9764-c834ee4cf36d
Any ideas?
Anupam ShrivastavaI am experiencing the same issue. Don't have the answer yet about what's wrong exactly. And my SSO works fine too.
I know precisely what makes the SharePoint throw the ArgumentException, but I can't yet figure out how to influence this behavior. I will respond back if I find out, but I hope the following will create an "aha moment" for someone.
So the SP Online issues an OAuth request to the on-prem SharePoint. If verbose logging is on for the Claims category, you may see how it reads these claims. One of them is this:
Claim['nii':'urn:federation:microsoftonline']
Using this claim and the nameid claim the profile mapping logic then reports the following immediately before the error (Set User Profiles to verbose to see this):
Creating encoded sid for nameid '100300008b29cb02' and nameidissuer 'urn:federation:microsoftonline'
Inspecting this logic with Reflector, I can see that it then attempts to infer the identity provider type from the nameidissuer, and throws the exception, because "federation" is not what it expects. It expects either "windows", "trusted" or "forms" for
the provider type.
So the user's actions to lead to this error were as follows:
1. I connect to the Office 365 portal, and get redirected to my ADFS server (same domain for the ADFS server, on-prem SharePoint, and the user accounts).
2. I log on, and from the SP Online portal I issue my search query using a result source configured as per the Hybrid TechNet guidance.
So thanks in advance for any suggestions, on what it could be.
Maybe you are looking for
-
Filled form is blank when sent to email address
trying to get a form to send to my email address. It working fine and i must have deleted something accidentaly. Here is the link to my site page http://www.owendawsonpga.com/contactformprocess_original_db.html html page <!DOCTYPE html PUBLIC "-//W3C
-
Ok i had the wont load problem and thought it was resolved last night with katrinas help. i couldnt figure why it began to work again but thought everything i had done from advice in this forum did it. it turns out that whn i load itunes with a disk
-
Solaris 10 Support for Gigabyte GA-MA78G-DS3H Motherboard
Dear sirs, I have been trying to get Solaris 10 to run properly on a Gigabyte GA-MA78G-DS3H Motherboard. The Solaris 10 operating system installed ok, but I have no network support. This is due to the standard and update drivers not working for this
-
Kodak hero 5.1 not finding my laptop to scan to
Hi my kodak hero 5.1 is printing from my new lap top but when I go to scan it is only giving me the option to scan to a USB-connected computer - usually if I press the > key it gave me the option of scanning to my laptop (it was already on there) pl
-
Hi all, I am experiencing Segfaults if I try to view an applet with appletviewer. I went on moving to lib32-jdk from AUR, where applets suddenly work, but I cannot execute eclipse from either eclipse or eclipse-bin (from AUR) package anmore. Eclipse