Wsit: Modify the URL of the security token service at runtime

I've managed to modify the url of my webservice endpoint at runtime used by a client application with the BindingProvider.ENDPOINT_ADDRESS_PROPERTY. Is it also possible to modify the url of the security token service?

Check this article
http://blogs.technet.com/b/sykhad-msft/archive/2012/02/25/sharepoint-2010-nailing-the-error-quot-the-security-token-service-is-unavailable-quot.aspx
and similar thread
https://social.technet.microsoft.com/Forums/office/en-US/78cd4366-b11b-4300-93a4-4135d55f561f/error-8306-an-exception-occurred-when-trying-to-issue-security-token-please-help?forum=sharepointgeneralprevious
though it is SharePoint 2010 but will work similar in sps 2013 also

Similar Messages

Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service. This is apparent when executing a search, accessing
the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site. I've looked at the certificate assigned to that site and everything appears to be in order.
It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
What I’ve tried so far:
I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config. Both appear to be configured correctly such that the root CAs can be validated.
Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause. I’ve also verified the service accounts reporting the error, do have access to the configuration database.
Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
MS Tech note.
So far nothing has worked. Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
Log Name: Application
Source: Microsoft-SharePoint Products-SharePoint Foundation
Date: 2/20/2015 11:19:41 AM
Event ID: 8311
Task Category: Topology
Level: Error
Keywords:
User: <SP SERVICE ACCOUNT>
Computer: <SHAREPOINTSERVER>
Description:
An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
<EventID>8311</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>13</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
<EventRecordID>1611121</EventRecordID>
<Correlation />
<Execution ProcessID="10212" ThreadID="10328" />
<Channel>Application</Channel>
<Computer><SHAREPOINTSERVER></Computer>
<Security UserID="<SP SERVICE ACCOUNT>" />
</System>
<EventData>
<Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
<Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
<Data Name="string2"><STS CERT THUMBPRINT></Data>
<Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
</Data>
</EventData>
</Event>

Hi Darren,
This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
$rootCert = (Get-SPCertificateAuthority).RootCertificate
New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
After running the above commands, perform an IISReset on all servers in the farm.
More information:
http://support.microsoft.com/kb/2545744
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

The Security Token Service is not available -- SP Server on Windows 7

I just installed SharePoint Server 2010 on a Windows 7 workstation with the aim of setting up a development environment.
Installed all the prerequisites, then SP, everything seemed to go smoothly.
However, the Health Analyzer is warning my that "the Security Token Service is not available". It says that the "Administrator should try to restart the Security Token Service"
I looked under Services for my computer and also looked in IIS, did not see any thing that referenced security tokens. Where would I find the security token service?
Thanks.

No.
In Central Admin>Application Management>Manage Service Applications I see the
Security Token Service Application is running. But the health analyzer is still saying that
The Security Token Service is not available.
Any advice on resolving this would be greatly appreciated.

The Security Token Service is not available error on dedicated Distributed Cache server

I have an error on a dedicated Distributed Cache server stating that the Security Token Service is not available. I was under the impression that when Distributed Cache was running on a dedicated server that the only service that should be enabled
is Distributed Cache.
The token service is working as expected on all other servers but this one. Does this service need to be started or should I just ignore this error message?
Jennifer Knight (MCITP, MCPD)

as per my little experience with 2013, if STS is working fine on Web server then I am sure that sharepoint will be fine...Distributed cache stores the ST issued by STS. NO need to worry about this error.
Login
Token Cache
DistributedLogonTokenCache
This
cache stores the security token issued by a Secure Token Service for use by any web server in the server farm. Any web server that receives a request for resources can access the security token from the cache, authenticate the user, and provide access to the
resources requested.
I would say check the ULS logs and get more details about the error why its not working on that server.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

The Security Token Service is not available.

hi,
1. service check failed--
http://localhost:port/SecurityTokenServiceApplication/securitytoken.svc
Gettng Error message
2. while provision it again..
Get-SPServiceApplication | ?{$_ -match "Security"}
$sts.Status (result got -online)
$sts.Provision()
----Successful...
3.Event at Event viewer,..
WebHost failed to process a request.
Sender Information: System.ServiceModel.Activation.HostedHttpRequestAsyncResult/31626309
Exception: System.Web.HttpException: The service '/SecurityTokenServiceApplication/securitytoken.svc' does not exist. ---> System.ServiceModel.EndpointNotFoundException: The service '/SecurityTokenServiceApplication/securitytoken.svc' does not exist.
at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath)
at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.HandleRequest()
at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.BeginRequest()
--- End of inner exception stack trace ---
at System.ServiceModel.AsyncResult.End[TAsyncResult](IAsyncResult result)
at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.End(IAsyncResult result)
Process Name: w3wp
Process ID: 5752
---------------------And-----------------------------
Event 8306
An exception occurred when trying to issue security token: The requested service, 'http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc'
could not be activated. See the server's diagnostic trace logs for more information..
Please help----------------
Prasad kambar

Check this article
http://blogs.technet.com/b/sykhad-msft/archive/2012/02/25/sharepoint-2010-nailing-the-error-quot-the-security-token-service-is-unavailable-quot.aspx
and similar thread
https://social.technet.microsoft.com/Forums/office/en-US/78cd4366-b11b-4300-93a4-4135d55f561f/error-8306-an-exception-occurred-when-trying-to-issue-security-token-please-help?forum=sharepointgeneralprevious
though it is SharePoint 2010 but will work similar in sps 2013 also

Ie 11 fails with 'IE Security detected that the URL and the configuration link to not match

HI,
I Have a user that is using IE 11 and is getting the following error:
IE Security detected that the URL and the configuration link to not match. Please use the URL as configured. Is and IP based URL. On IE 10 we get a similar message, but as soon as we add it to our trusted site and switch to compatibility
mode the issue goes away.
For example http://10.10.10.180/xxx/iafwebsite_810/
What would be causing this issue?
Any help would be appreciated.
Thanks,
Trish
Trish Leppa

Hi,
It seems that this URL doesn't meet security level. Thus, as long as you add this URL to Trusted sites zone, this issue is fixed.
Thanks!
Andy Altmann
TechNet Community Support

Firefox opens when I click on a hyperlink in an e-mail in my Outlook 2003 program, but does not go to the URL in the link. It used to work before I re-installed my MS XP Pro 64 bit OS. Help!

At first, after I re-installed the OS, nothing would happen when I clicked on an e-mail hyperlink. So I went to Folder Options in Control Panel and associated Firefox with the E-mail file type. Firefox then opened when I clicked on a hyperlink in an e-mail, but just opens to the Firefox start page ("Blank page"). Firefox does not open the URL in the hyperlink. I need guidance as to how to restore this function which worked perfectly before I had to re-install the OS due to a corrupted program installer. I have run the MS Office Detect and Repair function twice--both times indicating that everything is fine--but it does not make a difference in fixing the Firefox function.
NEW: An attempt to click on the link in Security Center to go to Microsoft Update brings up an error message that reads: "The requested lookup key was not found in any active activation context." I have no idea what this means, but I suspect it is related to the lack of ability to open Firefox to a link URL.
See the uploaded screen print(JPEG) below.
UPDATE: PROBLEM SOLVED!! Searched on error message on line, solution fixed problem. THANKS ANYWAY

# Yes, if you go to accounts.firefox.org, sign out, you will now be signed out.
# Sign back in, and you will be asked to save the password you entered.
# This will save the password and autocomplete if you have this option turned on.
I am not exactly sure why the menu did not detect the password change or if it was stored incorrectly after you changed it? But after storing the correct password you can manage any duplicate passwords in the password manager.[[Password manager - Remember, delete and change saved passwords in Firefox]]

How do I change the URL to the Remote Web Access server in Windows Server 2012?

Hallo!
I have set up a Remote Dexktop Service using the "Quick" deployment method in Server Manager and everything is working greate internally, but I cannot start an app published in Remote Web Access from outside our network.
The problem is that it wants to start the using the internal URL, for example, server.domain.local, instead of the external one, for example remote.server.com.
I therefore want to know how I can change the default URL for the Remote Web Access server and all the Remote Web Apps in Windows Server 2012?
I have allready looked in Server Manager and I can change some of the deployment settings in server manager, but there is no way to alter the URL of the Remote Web Access server. See below images:
Pressing the internal URL only results in opening the internal URL.
This was very simple to do in Windows Server 2008 R2 using the tsconfig tool, but it does not seam to be any way of solving this in server manager.
A possible sollution would be to alter the registry someware in HKLM->Software->Microsoft->Windows NT->Terminal Services. But this can easaly lead to problems due to wrong format, etc. and is probably not supported.
Is there a simpler and supported way?

That option can be used to connect to any machine that you want. The error message indicates that the client machine cannot resolve the name "server.domain.local" to an IP address that it can connect to.
You have several options for configuring that tab on the RDweb site. You can even remove it entirely.
Customization of RD Web Site
RD Web provides a number of customization options for the RD Web interface, including the ability to control default Gateway server settings and redirection settings. These settings
are controlled by editing the web.config file located in %SYSTEMROOT%\Web\RDWeb\Pages.
Displaying Local Help
To display local help for users instead of the web-based help, edit the LocalHelp value and change the value from false to true.

<add key="LocalHelp" value="false" />
When this value is changed, a user that clicks on Help in the upper right corner of the RD Web login page will open the local help file instead of web-based help.
Hiding the Connect to a Remote PC Tab
The RDWeb page
Connect to a Remote PC tab can be hidden from users to prevent connections to any servers through RD Web other than the servers configured in a collection. By default, this setting is set to true and the
Remote Desktops tab is displayed. To hide the tab, set the value to false.

<add key="ShowDesktops" value="true" />
When the value is set to false, a user will not see the Connect to a Remote PC tab when logged on to the RD Web page
RD Gateway Settings
If the Connect to a Remote PC tab is enabled, an administrator can configure RD Web to use a Gateway server when connecting to remote computers. To specify a gateway, edit the below
value with the name of the RD Gateway server:

<add key="DefaultTSGateway" value="" />
The default authentication method for the RD Gateway server can also be configured by editing the following section of the web.config:

<add key="GatewayCredentialsSource" value="0" />
Devices and Resources
By default, only Printers and Clipboard are redirected on connections made using the Connect to a Remote PC tab. If the user clicks the
Options << button, the redirection settings for a specific connection can be modified
To configure each specified redirection option to be enabled or disabled by default, edit the following section in the web.config file:

<add key="xPrinterRedirection" value="true" />
<add key="xClipboard" value="true" />
<add key="xDriveRedirection" value="false" />
<add key="xPnPRedirection" value="false" />
<add key="xPortRedirection" value="false" />
LAN Experience Defaults
Windows Server 2012 RD Web Access can display a new user selectable option for optimizing the connection for a LAN experience. This option is displayed at the bottom of the RD Web
page and can be controlled by the administrator using the following section of the web.config file:

<add key="ShowOptimizeExperience" value="false" />
<add key="OptimizeExperienceState" value="false" />
This value is set to false by default, but when changed to true, the following checkbox will display at the bottom of the webpage. The LAN experience
checkbox can also be set as enabled by default.
Each setting can also be modified using the IIS Manager user interface:
Don Geddes - SR Support Escalation Engineer - Remote Desktop Services - Printing and Imaging

Why is it that now, when I click on a link for a website I've saved, it does NOT show the URL in the address bar? I can't drag it to an email to share the link.

Why is it that in these newer versions of Firefox (I have 21.0), when I open a link that I've saved, it does NOT display the URL in the address bar any more?
I can't drag and drop the link into an email, and I can't see the actual web address I'm connected to for reference OR for security purposes. Why was this changed?
It becomes necessary to reveal the properties of the URL link I've saved, using the Windows "Properties", then copying and pasting the URL into the Firefox address bar, before I can do anything with it.

No changes have been made and no problem with extensions has interfered with the URL appearing in Firefox before. Only with the last few new versions of Firefox has this cropped up. Also, the link opens correctly - it just doesn't display the URL in the address bar, instead it just reads (in gray) "Search or enter address." How could another extension interfere if Firefox is the sole program associated with .htm, .html files?

[svn:bz-trunk] 17772: Update the url in the tests to use a relative path instead of the default localhost : 8400 so that the tests can pass on appservers other than the default Tomcat .

Revision: 17772
Revision: 17772
Author:   [email protected]
Date:     2010-09-20 15:02:50 -0700 (Mon, 20 Sep 2010)
Log Message:
Update the url in the tests to use a relative path instead of the default localhost:8400 so that the tests can pass on appservers other than the default Tomcat.
Modified Paths:
    blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/EnforceEndpointValidation/Enforc eEndpointValidationFalseTest/Remoting_NetConnectionTest.mxml
    blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/EnforceEndpointValidation/Enforc eEndpointValidationTrueTest/Remoting_NetConnectionTest.mxml

Revision: 17772
Revision: 17772
Author:   [email protected]
Date:     2010-09-20 15:02:50 -0700 (Mon, 20 Sep 2010)
Log Message:
Update the url in the tests to use a relative path instead of the default localhost:8400 so that the tests can pass on appservers other than the default Tomcat.
Modified Paths:
    blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/EnforceEndpointValidation/Enforc eEndpointValidationFalseTest/Remoting_NetConnectionTest.mxml
    blazeds/trunk/qa/apps/qa-regress/testsuites/config/tests/EnforceEndpointValidation/Enforc eEndpointValidationTrueTest/Remoting_NetConnectionTest.mxml

The address bar is not displaying the URL of the page

When I open a tab, I cannot see the URL of the opened page in it. If I enter a new address and press enter, I go to the page. The URL displays the entered URL, but doesn't change for the new pages that load.
Also, the back/forward buttons do not work. I'm guessing it's related to the address bar issue.

Found it! The "Redirect Remover" extension was causing the problem! Thanks for your help :)

How to get the URL of the window which is opened as a dialog

Hi All,
I am working on BPM Worklist and in BPM Worklist we have created a Custom ADF Application.
What BPM Worklist does is :- it shows the task associated to the user and when user double click on the task , it opens the custom ADF Page created by us.And it opens the ADF Page in the modal dialog.Since i do not have any control on the parent page which is the BPM Worklist page.
I need to check whether the url contains the _ADFvDlg , if it contains then i need to put some logic and then executes something.
Is there any way to find out the Url of the dialog window of the BPM Worklist using ADF not using javascript ?
Regards,
Shah

Hi Frank,
I have used the method which u have said in phaseListener
System.out.println("GOT URL"+((HttpServletRequest) facesContext.getCurrentInstance().getExternalContext().getRequest()).getRequestURL());
System.out.println("GOT URI"+((HttpServletRequest) facesContext.getCurrentInstance().getExternalContext().getRequest()).getRequestURI());
but no help, it gives me the same url of both the pages(parent and dialog one).
Say if i use the javascript and anyhow get the windowId of the dialog and pass it to the server onPageLoad then it can be helpful.
But how to do that as well.?
I mean how will i call the javascript and return url to the server and do the validations on PageLoad.
Please suggest!!
Regards,
Shah

I'd like to save the URLs of the group of pages tabbed in one particular FF window to be reloaded en masse when I use FF again some time in the future

I have a lot of browser tabs currently and I will not have finished using them by the time I next reboot, shutting down Firefox. On the other hand there are too many to fit neatly in one FF window so I've opened a 2nd window and moved a bunch over. Now I want to know how I can make sure FF will remember all the tab URLs when I start it again - and how I can be sure it will load them up in separate windows as presently. Because I have a feeling it will just dump them all in the one window. But there's too many to make that useful! On Opera you can save a 'session' with a particular selection of tabbed URLs, under a particular name, and then reload that session later. You can even start up several past sessions as separate windows at the same time. In that way you can select which groups of previous tabs you want to recall when. I'd like that in Firefox but I can't see anything to create it. :) What will happen for instance when I close the two current windows before rebooting? I suspect I will lose the record of the URLs in the window that is closed first, and only those of the 2nd to be recalled will come back when re-starting it. Basically there needs to be a "Save Group of Tabs" option on the File menu near "Save Page As...". On the other hand maybe this facility already exists and I just don't know how to find it?

Take a look at [https://addons.mozilla.org/en-US/firefox/search/?q=Session&cat=all&lver=any&pid=1&sort=&pp=20&lup=&advanced= these extensions at AMO] for those features.

How do I find out the URL of the page a document was downloaded from?

I downloaded a PDF several months ago; I can see it in my downloads history. When I right click it there, I see the link to the PDF itself, but I need to know the actual page it came from.
I've checked my History, but cannot identify the page.
Is there a definitive way of determining the URL of the page that linked to the document?

Open the Download Manager window and select that file.
Copy and paste this code in the Code field in the Error Console and click the Evaluate button.
*Firefox/Tools > Web Development > Error Console
The code adds a tooltip to the area with the file type icon at the left hand side of each entry in the DM window and shows a tooltip when you hover that area.<br />
It only works for entries that are currently visible in the DM and not for new entries that are added by downloading files and only as long as the DM window is kept open, so you need to rerun the code in the Error Console to get a tooltip.
<pre><nowiki>const Cc=Components.classes, Ci=Components.interfaces;
var enumerator=Cc["@mozilla.org/appshell/window-mediator;1"].getService(Ci.nsIWindowMediator).getEnumerator(null);
while(enumerator.hasMoreElements()){var win=enumerator.getNext();
if(win.location=="chrome://mozapps/content/downloads/downloads.xul"){
var i,r,R,C='';
r=win.document.getElementById("downloadView").getElementsByTagName("richlistitem");
for(i=0;R=r[i];i++){
var fP=R.getAttribute("path");
var fU=R.getAttribute("uri");
var sT=parseInt(R.getAttribute("startTime"));
var eT=parseInt(R.getAttribute("endTime"));
var cB=parseInt(R.getAttribute("currBytes"));
var mB=parseInt(R.getAttribute("maxBytes"));
var rU=R.hasAttribute("referrer")?R.getAttribute("referrer"):"<no referrer>";
var sD=cB/(eT-sT);
var tT=[];
tT.push("FILE: "+fP);
tT.push("URI: "+fU);
tT.push("REF: "+rU);
tT.push("");
tT.push("Total Time: "+((eT-sT)/1E3)+" sec.");
tT.push("Curr Bytes: "+cB+" bytes"+((cB==mB)?" (OK)":"(part)"));
tT.push("Max Bytes: "+mB+" bytes");
tT.push("Download speed: "+sD.toFixed(3)+" KB/sec");
R.setAttribute("tooltiptext",tT.join("\n"));
if(R.getAttribute("selected")=="true"){C=tT;}
if(C)prompt(C.join("\n"),C);
</nowiki></pre>

Why can't I see the URL in the address bar when I click on a hyperling, as opposed to typing in a URL? I send a lot of links, but if I can't copy and paste them from your address bar I'll have to abandon Firefox and use another browser.

I just gave you the details. When I click on a hyperlink, the URL of the site/page is not in the address box at the top of the page.

Type '''about:config''' in the Location (address) bar and press the "Enter" key. When you see a warning, click '''I'll be careful, I promise!''' button.
-> In the '''Filter bar''', type '''browser.urlbar.formatting.enabled'''
* Right click the preference '''browser.urlbar.formatting.enabled''' and click '''Toggle'''
* The value is now set to '''False'''
-> In the '''Filter bar''', type '''browser.urlbar.trimURLs'''
* Right click the preference '''browser.urlbar.trimURLs''' and click '''Toggle'''
* The value is now set to '''False'''
-> Close the '''about:config''' tab and then Restart Firefox.
Check and tell if its working.

Wsit: Modify the URL of the security token service at runtime

Similar Messages

Maybe you are looking for