4

We just built a new SP 2013 farm. For some reason when I access the sites, I see I am sometimes logged in as one of our service accounts (sp_crawl). If I refresh the browser, it switches to my normal AD account. I haven't determined a pattern, it seems rather random. Sometimes it opens as me, other times the crawl account. Sometimes it takes multiple refreshes before it switches. My coworker also saw the crawl account, but even more concerning was she saw my name too.

Any ideas?

We are using standard http and Kerberos and have UPS set up and synced.

Edit: I looked in the web app user policy and none of the entries have "Account operates as System" checked.

Pertaining to the duplicate question, I did reset my browser and checked windows credential manager (it has nothing in it). However, my coworker was having the same issue.

  • I called Microsoft and the engineer determined the problem was being caused by Kerberos. He said the SPNs were probably not set up correctly. Once I switched the site to NTLM, the problem went away. I don't have the option to post this as the answer for some reason... – steveareeno Apr 3 '14 at 16:00
  • This problem was resolved. I was able to get SP to work with Kerberos. It turns out there was a problem with our load balancer. When I edited my local host file and pointed it to a WFE, bypassing the load balancer, the problem disappeared! – steveareeno Apr 15 '14 at 1:43
  • The problem was our F5 load balancer. It required configuration changes to work with Kerberos/SharePoint 2013. From F5's documentation: If the OneConnect feature is used with a SharePoint web application that is configured for Kerberos authentication, AND the SharePoint servers are using Windows 2012 or 2012 R2 (or if using Windows 2008 R2, the AuthPersistNonNTLM value is set to true), clients may experience issues with authentication after deploying the iApp template for either SharePoint 2010 or 2013. They have instructions in their documentation on how to solve the problem – steveareeno Apr 24 '14 at 1:58
2

To be honest this sounds a lot like the same issue I've seen in our own environment, and once again at a client. But these two are a minority of cases.

Here's additional info:

If I keep the Distributed Cache disabled the issue is gone. That's not a recommended approach however.

This post about the Logon Token Cache looks interesting to follow up on: http://blogs.msdn.com/b/besidethepoint/archive/2013/03/27/appfabric-caching-and-sharepoint-1.aspx

Did you, in your environment, modify any of the values of Get-SPSecurityTokenServiceConfig such as lifetimes?

  • I had some errors in the ULS about Distributed Cache, but I ran use-cachecluster, checked the health, and everything looked good with it. I don't recall the errors now. I didn't mess with Get-SPSecurityTokenServiceConfig. I'll check your links. – steveareeno Mar 26 '14 at 20:57
  • I stopped the Distributed Cache on the 2 WFEs. I see if the problem goes away and get to you. Thanks! – steveareeno Mar 26 '14 at 21:13
  • OK, I have been in the site for about 20 minutes clicking all around and it seems like the problem is gone since I stopped the Distributed Cache. I'll make this as the answer and post later what I did to resolve it. Thanks again Steven! – steveareeno Mar 26 '14 at 21:37
  • I wouldn't say stopping the DC is a definite solution. Other things such as the Newsfeed rely on it. See it as a temporary fix. – Steven Van de Craen Mar 27 '14 at 11:01
  • After restarting the DC cluster yesterday, the problem seemed to have gone away. However, the problem just came back this morning. – steveareeno Mar 27 '14 at 12:45
0

There is a feature in SharePoint 2013 called MDS (minimal download strategy), try to turn this off in site settings -> site features. Then, check if the issue persists and give your feedback.

  • This seems very unrelated given how MDS works (partial reloading of pages etc) – Robert Lindgren Mar 27 '14 at 6:38
  • yes, but it is related to the inbuilt javascript and for some reason which I am not aware of resolves the issue atleast for me. – variable Mar 27 '14 at 6:39
  • I did shut down MDS on one site due to problems with editing and saving list views. I think my problem pointed more to the DC, however, but I'll keep this in mind. – steveareeno Mar 27 '14 at 12:20
  • Are you using any ajax thing on the site page which is causing problem? – variable Mar 27 '14 at 12:21
  • Some sites do have jquery, but most don't. The problem even occurred while using OOB pages like editing a list view – steveareeno Mar 27 '14 at 12:30

Not the answer you're looking for? Browse other questions tagged or ask your own question.