There are two SharePoint 2013 farms - Production and Development. We have an AD account which runs a couple of WCF services. If I login with that account to any computer (tried a couple)/or open IE with it, it can open Production web sites fine, but every time it tries to open Development it gets the following error:
The website cannot display the page
This error (HTTP 500 Internal Server Error) means that the website you are visiting had a server problem which prevented the webpage from displaying.
Any other users do not get this error message and can open Development sites just fine. Permissions are in place as well. I've tried re-provisioning Token service, recreated web applications, played around with web.configs etc.
ULS logs show the following:
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation Claims Authentication fsq6 High SPSecurityContext: Get trust client failed with exception: System.IO.FileLoadException: Could not load file or assembly 'Microsoft.IdentityModel.Extensions, Version=2.0.0.0, Culture=neutral, PublicKeyToken=69c3241e6f0468ca' or one of its dependencies. Either a required impersonation level was not provided, or the provided impersonation level is invalid. (Exception from HRESULT: 0x80070542) File name: 'Microsoft.IdentityModel.Extensions, Version=2.0.0.0, Culture=neutral, PublicKeyToken=69c3241e6f0468ca' ---> System.Runtime.InteropServices.COMException (0x80070542): Either a required impersonation level was not provided, or the provided impersonation level is invalid. (Exception from HRESULT: 0x80070542) at Microsoft.SharePoint.SPSecurityContext.GetTrustChannel() at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo, SPRequestSecurityTokenProperties properties) a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation Claims Authentication 8305 Critical An exception occurred when trying to establish endpoint for context: Could not load file or assembly 'Microsoft.IdentityModel.Extensions, Version=2.0.0.0, Culture=neutral, PublicKeyToken=69c3241e6f0468ca' or one of its dependencies. Either a required impersonation level was not provided, or the provided impersonation level is invalid. (Exception from HRESULT: 0x80070542). a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General 8nca Medium Application error when access /businessappsdev/MedicalEvidence/_vti_bin/Lists.asmx, Error=Either a required impersonation level was not provided, or the provided impersonation level is invalid. (Exception from HRESULT: 0x80070542) a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation Authentication Authorization agb9s Medium Non-OAuth request. IsAuthenticated=True, UserIdentityName=, ClaimsCount=0 a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General 8ofb High The following error occured while trying to read the common properties of the application with id: c4e60b63-b021-4272-9716-2cf06ab62797: System.UnauthorizedAccessException: Attempted to perform an unauthorized operation. at System.Security.Principal.Win32.LsaOpenPolicy(String systemName, PolicyRights rights) at System.Security.Principal.NTAccount.TranslateToSids(IdentityReferenceCollection sourceAccounts, Boolean& someFailed) at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess) at System.Security.Principal.NTAccount.Translate(Type targetType) at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKeyClaim(IClaimsIdentity claimsIdentity, SPClaim loginClaim) at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(IClaimsIdentity claimsIdentity, String encodedIdentityClaimSuffix) at Microsoft.SharePoint.Administration.Claims.SPClaimProviderManager.GetProviderUserKey(String encodedIdentityClaimSuffix) at Microsoft.SharePoint.Utilities.SPUtility.GetBinaryUserIDFromFullName(UTF8Encoding encoding, String fullName) at Microsoft.SharePoint.Administration.SPPolicyCollection.get_PolicyCache() at Microsoft.SharePoint.Administration.SPNativeConfigurationProvider.GetCommonApplicationProperties(Guid applicationId, Int32 currentZone, Boolean& recycleBinEnabled, Int32& newIndicatorCutOff, Boolean& presenceEnabled, Boolean& syndicationEnabled, Boolean& multipleAppDomainsEnabled, Object& securityPolicyCache, Object& zoneUrls, Object& appDomains, Object& officialFileNames, Int32& queryResultMax, Int32& listscopesMax, Int32& queryLookupFieldsMax, Boolean& clientObjectModelRequiresUseRemoteAPIsPermission) a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General 8e2s Medium Unknown SPRequest error occurred. More information: 0x80070005 a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General aix9j High SPRequest.PreInitServer: UserPrincipalName=, AppPrincipalName= ,bstrAbsoluteRequestUrl=http://collaborationdev/businessappsdev/MedicalEvidence/_vti_bin/Lists.asmx ,bstrServerRelativeUrl=/businessappsdev/MedicalEvidence ,lZone=0 ,gApplicationId=c4e60b63-b021-4272-9716-2cf06ab62797 ,gSiteId=c4453da2-1e02-4696-8047-d2bb8c7b64d6 ,gDatabaseId=846b95f1-8794-40a9-811a-76511e0299bf ,bstrDatabaseServer=dev-spsql-01 ,bstrDatabaseName=SharePointCollaborationDev ,bstrDatabaseUsername=<null> ,bstrDatabasePassword=<null> ,fHostHeaderIsSiteName=False ,bstrAppHostHeaderRedirectDomain=<null> ,fAppWebRequest=False ,bstrAppDomain=dev.partnershipapps.int ,bstrRequestAppWebDomainId=<null> ,bstrAppSiteDomainPrefix=<null> ,iDatabaseVersionMajor=15 ,iDatabaseVersionMinor=0 ,iDatabaseVersionBuild=160 ,iDatabaseVersionRevision=0 a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General ai1wu Medium System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace: at Microsoft.SharePoint.SPSite.PreinitializeServer(SPRequest request) at Microsoft.SharePoint.SPWeb.InitializeSPRequest() at Microsoft.SharePoint.SPWeb.EnsureSPRequest() at Microsoft.SharePoint.WebControls.SPControl.EnsureSPWebRequest(SPWeb web) at Microsoft.SharePoint.WebControls.SPControl.SPWebEnsureSPControl(HttpContext context) at Microsoft.SharePoint.ApplicationRuntime.SoapApplication.HandleError(HttpApplication app, Boolean tryUseRedirect) at Microsoft.SharePoint.ApplicationRuntime.SPRequestModule.ErrorAppHandler(Object oSender, EventArgs ea) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Web.HttpApplication.RaiseOnError() at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error) at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb) at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus) at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags) a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
09/16/2016 15:53:52.98 w3wp.exe (0x3364) 0x23D0 SharePoint Foundation General ftd0 Medium Access Denied. Exception: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)), StackTrace: at Microsoft.SharePoint.Library.SPRequestInternalClass.PreInitServer(String bstrAbsoluteRequestUrl, String bstrServerRelativeUrl, Int32 lZone, Guid gApplicationId, Guid gSiteId, Guid gDatabaseId, String bstrDatabaseServer, String bstrDatabaseName, String bstrDatabaseUsername, String bstrDatabasePassword, Boolean fHostHeaderIsSiteName, String bstrAppHostHeaderRedirectDomain, Boolean fAppWebRequest, String bstrAppDomain, String bstrRequestAppWebDomainId, String bstrAppSiteDomainPrefix, Int32 iDatabaseVersionMajor, Int32 iDatabaseVersionMinor, Int32 iDatabaseVersionBuild, Int32 iDatabaseVersionRevision) at Microsoft.SharePoint.Library.SPRequest.PreInitServer(String bstrAbsoluteRequestUrl, String bstrServerRelativeUrl, Int32 lZone, Guid gApplicationId, Guid gSiteId, Guid gDatabaseId, String bstrDatabaseServer, String bstrDatabaseName, String bstrDatabaseUsername, String bstrDatabasePassword, Boolean fHostHeaderIsSiteName, String bstrAppHostHeaderRedirectDomain, Boolean fAppWebRequest, String bstrAppDomain, String bstrRequestAppWebDomainId, String bstrAppSiteDomainPrefix, Int32 iDatabaseVersionMajor, Int32 iDatabaseVersionMinor, Int32 iDatabaseVersionBuild, Int32 iDatabaseVersionRevision). a25aa49d-2a7c-8092-ca9b-c59a2ccea2c4
This line worries me the most:
IsAuthenticated=True, UserIdentityName=, ClaimsCount=0
As it usually shows information like UserIdentityName
and ClaimsCount
for other users.
Windows Event Viewer log this error every time that accounts tries to open a site/page in SharePoint:
Claims Authentication
An exception occurred when trying to establish endpoint for context: Could not load file or assembly 'Microsoft.IdentityModel.Extensions, Version=2.0.0.0, Culture=neutral, PublicKeyToken=69c3241e6f0468ca' or one of its dependencies. Either a required impersonation level was not provided, or the provided impersonation level is invalid. (Exception from HRESULT: 0x80070542).
Does anyone have a clue of what has gone wrong?