[MOSS] Search zoekt niet op bepaalde webtoepassing

Pagina: 1
Acties:
  • 224 views sinds 30-01-2008
  • Reageer

  • VivaAtloni
  • Registratie: April 2000
  • Laatst online: 11-02 18:55
Ik heb op de MOSS 2007 server op mijn werk een drietal webtoepassingen gemaakt. 1 default http://test1.xxx.nl, 1 http://test2.xxx.nl en 1 beveiligde https://test3.xxx.nl.
Nu heb ik de searchengine ingesteld dat alle drie de webtoepassingen (drie siteverzamelingen) worden doorzocht. Dit gaat prima alleen geeft hij in de log de volgende foutmelding bij de beveiligde site https://test3.xxx.nl:
De toegang is geweigerd. Controleer of de standaardaccount voor toegang tot inhoud toegang heeft tot deze inhoud of voeg een verkenningsregel toe om deze inhoud te verkennen. (Dit item is verwijderd omdat het niet is gevonden of omdat het verkenningsproces de toegang tot dit item is geweigerd.)

Ik kan dus ook in de search niets vinden van de betreffende site. De administrator login werkt overigens gewoon voor elke site, dus het is vreemd dat ik geen toegang krijg. Iemand een idee??

24x sf175s + gw5000-dt op oost


Verwijderd

Bij mij werkt de search helemaal niet meer na het koppelen van SSL op de sharepoint omgeving...

  • Glorix Jim
  • Registratie: Februari 2000
  • Laatst online: 03-02 15:05
Bekend probleem! (waarom gebruikt iedereen trouwens een nederlandse versie van SharePoint :'( )

Hier een de oplossing :

To come straight to the point, I had problems using the contextual search scopes from Office SharePoint Search (also known as This Site : <SiteName> and This List : <List Name> scopes). Problems being that I didn't get any searchresults. I did get search results however when I used the All Sites scope.
So far I didn't mention that the site was using SSL and during the creation we choose that the site was using SSL. This implies that the site can only be accessed using the SSL port (and host-header). This is the point where (our) shit hits the fan.. So I created an alternate access mapping to make the site accessible from within our network and created a searchscope using this address. When I used this scope I received the searchresults I wanted. Unfortunatly the "This Site" scope didn't work and not wanting to create a custom searchscope for each individual site I tracked the problem down to the SSL thingie.

So I performed the following steps to fix this problem :

1. Deleted the webapplication leaving only the content databases
2. Created a new webapplication using the local address as default zone
3. Added an alternate access mapping in the extranet zone of the newly made webapplication
4. Added the SSL certificate in IIS and modified the hostheader.
5. IISRESET

And voila.. my OTB contextual searchscopes were working! :)

UPDATE 5 SEPT 2007

Below is a more detailed overview of the steps to make it all work by Glenn :

1. Obtain a wildcard SSL Certificate for your external domain name and install it. E.g. if your external domain name is MyBusiness.com then you would need an SSL certificate for *.MyBusiness.com
2. Install Sharepoint 3.0 in side by side configuration with the existing version 2.0 as per the document at this link: http://www.microsoft.com/...65F1E99F5B&displaylang=en
3. Configure sharepoint/SBS to enable the search feature on the farm (this may require a little googling as I can't remember where I found this).
4. Create a CNAME DNS entry on your DNS server, in 'Forward Lookup Zones/MyInternalDomain' for what will be your internal access url; e.g. http://sharepoint would require a CNAME entry of 'sharepoint', pointing to the appropriate Host record.
5. Create a CNAME DNS entry on your DNS Server, in 'Forward Lookup Zones/MyDomain.com' for what will be your public access url; e.g. https://share.mydomain.com would require a CNAME entry of 'share' pointing to the same Host record as in step 4. Don't forget to add a similar record to your ISP's DNS listings if you use an ISP for your public DNS record hosting.
6. Create your Web Application in Central Administration using your internal url; e.g. http://sharepoint on a NEW virtual server (i.e. DON'T use the existing 'Default' instance) but DO put it on port 80 (if thats what you want) as long as you enter 'sharepoint' (or whatever you used in step 4.) as the Host Header. Don't forget to run 'iisreset /noforce' on your web server after creating the Web Application in Central Administration. Do use NTLM authentication - I haven't tried Kerberos and don't know how this would be done.
7. Extend your Web Application to a NEW virtual server, also running on port 80. Once again - do use NTLM authentication. Enter the Host Header as per your chosen external url in step 5. E.g. share.mydomain.com Do choose 'Use SSL'. Yes, I know I am skipping some other settings here, but they are relatively self explanatory.
8. Once this is created, switch to IIS and you will see that your new external website is there, but it will likely be stopped with some nasty error message. Don't worry, just bring up the website's properties and make sure that SSL the port is set to 443, also check that the Host header value is set properly (it is blank on our machine when I do this - but it should be whatever you entered in step 7.).
9. Also, while in the website's properties, assign the wildcard certificate that you obtained in step 1. to this website. The website will still be stopped at this stage. Thats OK, we aren't ready to start it yet.
10. Set the SSL host header on your external website by doing the following:
1. Start a command prompt and change directories to C:\Inetpub\AdminScripts
2. enter the following 'cscript adsutil.vbs set w3svc/websiteID/SecureBindings :443:HostHeaderName' where websiteID is the Id number of the website as listed in IIS and HostHeaderName is the same host header that you entered into the properties for the website in IIS in step 8. and 7.
11. While your in the command prompt hit F3 to repeat what you just ran and change it so that you have 'cscript adsutil.vbs set w3svc/websiteID/AccessSSL TRUE' and run it. Note that this is optional - all it does is force people to connect using https.
12. You should be able to right click the website now and select 'Start' and it should do so without error.
13. In Central Administration, under Operations>Alternate Access Mappings make sure that you have two mappings present:

Default Zone:
Internal URL: http://sharepoint
Public URL: http://sharepoint

Internet Zone:
Internal URL: https://share.MyBusiness.com
Public URL: https://share.MyBusiness.com
14. Browse to one of your site collections from a machine on your network using your internal URL E.g. http://sharepoint/site1/home. You should be able to access it without any log in prompts and search etc. should be working.
15. Hop on an external machine and browse to your external URL. E.g. https://share.MyBusiness.com/site1/home. You should be presented with a log in dialogue. Enter your credentials and you should be in. Check that the site is secured with SSL (the little padlock should be showing) and that the search feature is working etc.

thats it (well - thats all I know so far...).

Please note that I haven't tested this much beyond this so there may be things that I have wrong yet which I haven't found. No doubt if anyone else reads this they will spot something.