Tag Info

Hot answers tagged

5

When you have several different websites routing to the same IP/port then the only way IIS knows where they should go is using the host header (the site address) Incoming Host Header Send to Web Application 192.168.0.1 : 80 websiteA.com A 192.168.0.1 : 80 websiteB.com B However if you're using SSL then The SSL certificiate is ...


4

Just to add what punchingInApepper already stated. SNI is a wonderful thing and is available in IIS 8.0. It has been around for some time like punchingInApepper stated but I have runned into some issues with SNI and multi-webapplication farms which I have not seen documented before so a bit of a warning; WebDAV (open with file explorer) will not function ...


4

Yes, you need to ensure your published URLS for your farm are setup to use HTTP as the traffic from your Netscaler to the farm will be in HTTP. This only matters for the published URLS as these are the URLS the Netscaler will use. Don't worry about the traffic between various servers in your farm as it doesn't make a difference from a SSL offload ...


3

Actually, The reason you can't use one IP was a fault of IIS. There is an extension of TLS that allows a hostname to be specified. This has been around for years and is supported by all major browsers. The good news is that the latest version of IIS that comes with Windows Server 2012 supports this. So if you are running IIS 8, then good news, you can use ...


3

The AutoSPInstaller (http://autospinstaller.codeplex.com/) was actually creating self-signed certificates on the server that the WAC did not trust. So we had to manually create the certs and a CA so that the trust would work properly. This corrected our issue.


3

you dont need to extend the web app rather you have to update the IIS bindings. On the WFE servers, Add the Binding for the SSL & attach the certs. Now update the Https entry into the AAM via Central Admin. check this guide: http://blogs.msdn.com/b/sowmyancs/archive/2010/02/12/how-to-enable-ssl-on-a-sharepoint-web-application.aspx


3

You cannot use a wildcard certificate as you have two different domain names. Instead, you need to use a SAN (also called UCC) certificate which can have multiple domain names attached to it. I'm not endorsing this vendor, but take a look at http://www.thawte.com/ssl/san-uc-ssl-certificates/index.html as an example of what you need to purchase.


2

Add the HTTPS version of the URL to the Alternate Access Maps in Central Administration. Even though it isn't actually reaching SharePoint with HTTPS, search needs to know that having HTTPS in the URL is valid for that content.


2

SharePoint maintains it's own store of trusted root certificate authorities for use with it's own token service. Check out the technet blog post for more details: http://blogs.technet.com/b/speschka/archive/2010/02/13/root-of-certificate-chain-not-trusted-error-with-claims-authentication.aspx Open the SharePoint Management Shell to run the PowerShell ...


2

Either use the methods in this link to turn on error messages, or you should be able to log on to the physical server to see the detailed error messages.


2

A single SP farm vs virtualizing many SP farms? A single SP farm can handle multiple SSL sites, as long as they're on unique IPs. A separate farm per site would be a waste of resources. SharePoint is designed to handle multiple. As far as maintainable, that would depend on your site collections and content databases and anticipate database sizes. Also, ...


2

Well, at last I found out what is happening. What I didn't know is that this Datapower was terminating SSL requests and forwarding in HTTP. The idea found here. Off-box termination of SSL is when a proxy server terminates an SSL request and then forwards the request to a Web server by using HTTP. I asked to the colleague that manages the Datapower and ...


2

Do you have the AAMs set up for the My Site Host?


2

Have you done anything specificly for SharePoint performance optimization? Object cache In SharePoint you should adjust the object and output cache. During stress load your \SharePoint Publishing Cache\Cache hit ratio should preferably be above 90% For object cache default is 100 mb. Adjust it up in 100 mb increments while measuring hit ratio and at the ...


2

Once you have your site in IIS, when you apply your SSL certificate to it, this applies to the entire site. Please read the instructions here: http://www.harbar.net/articles/ssl.aspx especially if you are using SSL for multiple sites. I found this to be invaluable when setting up SSL the first time with SharePoint.


2

The behavior is normal as the AAM doesn't know about your redirect, therefore the Workflow engine is not able to populate the proper Url. You should either use a Reverse'Proxy (e.g. ForeFront TMG, ISA 2006 ) that could automatically change your HTTP to HTTPS or Extend the Web Application to use HTTPS too. Besides you can make also enable the "Configure ...


2

It could easily explainable by the concept of "Application Extension" in SharePoint, which is simply a mechanism that creates a new Web Application (it could be the same Host header too, but different Protocol, HTTP vs. HTTPS - with the purpose of offerring different authentication mechanism to different targeted people, e.g. Intranet vs. Extranet, Employees ...


2

No, this will not work if you only do that. If you make all of the configuration changes in IIS (on all of the WFE servers) to add the new binding to the IIS site, but without telling SharePoint about it then you'll get a SharePoint monster which sometimes will kind of work. Depending on how you navigate to the first page it'll show that using the https ...


2

You just have to set up the calendar sync with the appropriate web address using HTTPS. The error is telling you it's trying to connect to http://oldname.com/sites/abc/develop which isn't the URL you want configured. As a fallback, it is attempting to pull the calendar from http://prodname.com/sites/abc/develop, but that's hitting your HTTP Redirect in IIS. ...


2

So you're saying you've got name.net as well as name.com as SANs within your certificate? For your canonical names you need *.name.net as a subject alternative name if you wish to use an unlimited number of canonical names. ADFS fully supports wildcard certificates if you create them with valid subject alternative names.


2

as ryan stated but there is a vital part missing for ssl! you need to add dns record for ssl aswell as adding the host header! start -> admin tools -> dns when the app loads, go into the server or add it in, expand "forward lookup zones" , expand the domain e.g. mydomain.com if you click on the domain name, you will see to the righ some folders and files ...


2

SSL offloading will still meet the "use SSL for SPS 2013" train of thought. Whether SSL offloading is a risk in your environment is dependent on a number of things that only you can make the call on. The traffic between the client and the load balancer will be secure and the traffic between the load balancer and the web front ends will not be. Client PC ...


2

I've been doing a great deal of research into this the past couple days as I'm in a similar situation. The evidence looks pretty strong that WebClient, the Windows service that is used by software to connect to a WebDAV resource does not support SNI. A SharePoint MVP echoed my suspicions that this is the case on another thread on the MSDN forums. At this ...


2

I also tried to disable it on the server but in the end I solved it by using another method. What's curious is that the timeouts took 90 seconds instead of the 15 seconds that is the timeout specified for requesting the revocation status of the certificate. Activate the CAPI2 log in event viewer to enable logging for the actual validation requests that are ...


2

Your IIS SSL configuration is not right, you are mixing client certificates with SSL server certificates. You want to use SSL Server certificates for the site, not client certificates. Disable client certificates, and configure correct SSL certificate in IIS web site bindings. Review the article for details here.


1

Try to add the site to the Trusted Sites or Intranet Sites, via the Internet Explorer Options.


1

We managed to resolve this issue. As it turned out, this is a common issue with firefox and SSL offloading on Cisco loadbalancers. Admin increased header buffers and now it works properly.


1

Can't you get an internal cert made for ourwebserver and use that? You can also use redirects so that the old url's still work but will redirect to the correct new url. I've done this before using an httpmodule. I also redirected them to a page which says they are using an "old link" and show them the new link and have a javascript thing that ...


1

URL rewriting is not supported and certainly a not best practice with SharePoint 2010. Why using URL rewriting and not standard AAM and extending Web Applications?


1

Can I assume when you say claims you actually mean Claims with Active Directory as user data store, where from your problem, right? If NOT, then you should have no issues as it all handled automatically by the claims - meaning that is all in your connection of the provider! If domainOne and domainTWO also are related to 2 AD domains, bi-directional trust ...



Only top voted, non community-wiki answers of a minimum length are eligible