Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 0 down vote favorite

I have a subsite with unique permissions. Users do not have access to the root, site.

This site has jquery ajax people search which performs a search.asmx. This fails.

even if the path to the _vti_bin/search.asmx

The query result returned is ERROR_NO_AUTHORIZATION

Users can navigate to the _vti_bin/search.asmx

It works if they are added to he visitor group of root site, but I do not want this.

If I add username and password to the ajax request it works again, but is not the solution.

share|improve this question

1 Answer

up vote 0 down vote

Access to any Web Service in SharePoint must be authenticated (even if you expose your site for Anonymous users), therefore accessing services address is also. Not sure what does "acceptable" means for you, but you might be creating a security breach as search by default it is enforcing Security trimming.

Kerberos could alleviate your need for authentication, as I imagine currently you are running NTLM.

share|improve this answer
Hi thanks for the reply. http://<homesite><subsite>/_vti_bin/search.asmx loads fine for the user. It appears processing the request still requires root access. We are using Kerberos. – ben Jul 23 '12 at 14:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.