[isalist] Re: Publishing Sharepoint
- From: Jim Harrison <Jim@xxxxxxxxxxxx>
- To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 17 Nov 2008 21:35:41 -0800
http://www.ISAserver.org
-------------------------------------------------------
..and Q2?
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of William T. Holmes
Sent: Monday, November 17, 2008 8:30 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
Hello,
I created the rules using ISA 2006's Sharepoint Site Publishing Rule Wizard. On
the sharepoint server I have installed SSL using a SAN Certificate which
includes both the internal and external site names.
Three rules were created by the Publishing Wizard Sharepoint, MySite, and SSP.
I can access the sharepoint site but the MySite link is missing. This may be
purely a sharepoint problem and not an ISA problem. When connecting directly
to the sharepoint site the MySite link exists. If I manually go to valid URLs
on the published sites I am able to connect. That is to say if I go to
mysite.mydomain.com/personal/myname I am able to connect.
Thanks
Bill
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Monday, November 17, 2008 7:50 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
We still don't have all the details of the rules, so a specific answer is
near-impossible.
Q1 - were all of the rules created using the SP publishing weirdzard? If not,
do it now; do not pass 'GO', do not collect $300
Q2 - what are in the ISA logs for these failed requests? If you get an auth
popup, it's likely that the auth delegation is incorrect in one or more of the
rules
Jim
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of William T Holmes
Sent: Monday, November 17, 2008 9:18 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
Hello,
So I have re-done all of this to use SSL end to end. Now that we have that out
of the way can anyone answer my original question?
I have three publishing rules that were created by the ISA-2006 Sharepoint Site
Publishing Rule Wizard.
They are:
sharepoint.mydomain.com
mysite.mydomain.com
sharepointSSP.mydomain.com
They are all using SSL to SSL bridging with NTLM Authentication Delegation.
When I connect to the sharepoint server internally everything is good. MySite
works.
However when I connect to the published sites through ISA server The mysite
link does not show up. In addition If I go directly to
https://mysite.mydomain.com I receive an authentication error. The site
indicates my logon name which has access and can access the site when
connecting internally.
Thanks
Bill
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Greg Mulholland
Sent: Thursday, November 13, 2008 3:30 PM
To: ISA Mailing List
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
In general we would recommend when you are publishing websites that require
authentication or dont live in (my favourite new term) 'sacrificial dmz' that
you would use SSL. I know what this means for you when using sharepoint, ive
been there. How many websites are you publishing? What sort of authentication
do you use?
btw If you do look at SSL factor in the cost of certificates, otherwise it will
just be a pain for end users.
________________________________________
From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
William T Holmes [wth1@xxxxxxxxxxx]
Sent: Friday, 14 November 2008 12:44 AM
To: ISA Mailing List
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
Hi,
Can you be more specific regarding the audit statement? I have multiple
SharePoint sites running on a single server. I am using host headers to
distinguish the sites. In order to have SSL on the Sharepoint server I will
either have to add additioanl or use alternate ports for the SSL connections.
If this is what's necessary I will do so but I would prefer not to.
Thanks
Bill
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Thomas W Shinder
Sent: Thursday, November 13, 2008 8:35 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Publishing Sharepoint
http://www.ISAserver.org
-------------------------------------------------------
Use SSL to SSL bridging. You fail the security audit with SSL to HTTP.
HTH,
Tom
____________________________________________
TOM SHINDER | Sr. Consultant/Technical Writer
206.443.1117 | SHINDER@xxxxxxxxxxxxxxx
5701 Sixth Avenue South | Seattle, WA 98108
PROWESS | WWW.PROWESSCORP.COM
____________________________________________
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of
> William T Holmes
> Sent: Thursday, November 13, 2008 6:39 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Hi,
>
> Can anyone offer any suggestions for this issue?
>
> Thanks
>
> Bill
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of
> William T Holmes
> Sent: Wednesday, November 05, 2008 10:45 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Publishing Sharepoint
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Hello,
>
> I am attempting to publish sharepoint with some success. However I am running
> into
> some problems. I am unable to publish my mysite virtual server. In addition
> the mysite
> link which appears if I connect to the sharepoint server directly does not
> appear when
> connecting through the published link.
>
> I have configured the Alternate Access Mappings for the sharepoint sites
> within
> sharepoint. I am only using SSL from the client to ISA and not from ISA to the
> sharepoint server.
>
> The sharepoint server is serving three sites. sharepoint.mydomain.com,
> mysite.mydomain.com and sharepointSSP.mydomain.com. These are all configured
> to
> use Port 80 with host headers. Sharepoint works as expected when connecting
> internally.
>
> I have created three publishing rules one for each of these internalsites. The
> publishing rules were created with the sharepoint publishing wizard.
>
> When connecting to mysite.myexternaldomainname.com I get the following error
>
>
> Go back to site
> Error
>
>
> An unexpected error has occurred.
> Troubleshoot issues with Windows SharePoint Services.
>
>
> This is ISA Server 2006, Sharepoint 2007.
>
> I would appreciate any pointers.
>
> Thanks
>
> Bill
>
>
>
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to
listadmin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
