[isalist] Re: Publishing Sharepoint

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 18 Nov 2008 06:31:27 -0600

http://www.ISAserver.org
-------------------------------------------------------

Per se

____________________________________________
TOM SHINDER   |   Sr. Consultant/Technical Writer 
206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx

5701 Sixth Avenue South   |   Seattle, WA 98108  
PROWESS   |   WWW.PROWESSCORP.COM
____________________________________________


> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> William T. Holmes
> Sent: Tuesday, November 18, 2008 6:28 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Hi,
> 
> I get the auth when I initially connect to the site and I successfully log 
> on. So the
> answer to question 2 is I am not getting an error per say. I am getting a 
> different view
> of my sharepoint site in that the MySite link does not show up in the 
> published
> version.
> 
> To clarify I was previously unable to connect mysite when I was attempting to 
> use
> host headers to distinguish my different sharepoint sites. After I configured
> sharepoint to use separate ip addresses for each site and configured SSL for 
> each site
> I am able to connect.
> 
> The only "problem" I am having is the mysite link not showing up when 
> connecting to
> the sharepoint sites that are published with ISA.
> 
> Bill
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> Jim Harrison
> Sent: Tuesday, November 18, 2008 12:36 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> ..and Q2?
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> William T. Holmes
> Sent: Monday, November 17, 2008 8:30 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Hello,
> 
> I created the rules using ISA 2006's Sharepoint Site Publishing Rule Wizard. 
> On the
> sharepoint server I have installed SSL using a SAN Certificate which includes 
> both the
> internal and external site names.
> 
> Three rules were created by the Publishing Wizard Sharepoint, MySite, and 
> SSP. I can
> access the sharepoint site but the MySite link is missing. This may be purely 
> a
> sharepoint problem and not an ISA problem.  When connecting directly to the
> sharepoint site the MySite link exists. If I manually go to valid URLs on the 
> published
> sites I am able to connect. That is to say if I go to
> mysite.mydomain.com/personal/myname I am able to connect.
> 
> Thanks
> 
> Bill
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> Jim Harrison
> Sent: Monday, November 17, 2008 7:50 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> We still don't have all the details of the rules, so a specific answer is 
> near-impossible.
> Q1 - were all of the rules created using the SP publishing weirdzard?  If 
> not, do it now;
> do not pass 'GO', do not collect $300
> Q2 - what are in the ISA logs for these failed requests?  If you get an auth 
> popup, it's
> likely that the auth delegation is incorrect in one or more of the rules
> 
> Jim
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> William T Holmes
> Sent: Monday, November 17, 2008 9:18 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Hello,
> 
> So I have re-done all of this to use SSL end to end. Now that we have that 
> out of the
> way can anyone answer my original question?
> 
> I have three publishing rules that were created by the ISA-2006 Sharepoint 
> Site
> Publishing Rule Wizard.
> 
> They are:
> 
> sharepoint.mydomain.com
> mysite.mydomain.com
> sharepointSSP.mydomain.com
> 
> They are all using SSL to SSL bridging with NTLM Authentication Delegation.
> 
> When I connect to the sharepoint server internally everything is good. MySite 
> works.
> 
> However when I connect to the published sites through ISA server The mysite 
> link
> does not show up. In addition If I go directly to https://mysite.mydomain.com 
> I receive
> an authentication error. The site indicates my logon name which has access 
> and can
> access the site when connecting internally.
> 
> Thanks
> 
> Bill
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> Greg Mulholland
> Sent: Thursday, November 13, 2008 3:30 PM
> To: ISA Mailing List
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> In general we would recommend when you are publishing websites that require
> authentication or dont live in (my favourite new term) 'sacrificial dmz' that 
> you would
> use SSL. I know what this means for you when using sharepoint, ive been 
> there. How
> many websites are you publishing? What sort of authentication do you use?
> 
> btw If you do look at SSL factor in the cost of certificates, otherwise it 
> will just be a
> pain for end users.
> 
> ________________________________________
> From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On Behalf 
> Of William
> T Holmes [wth1@xxxxxxxxxxx]
> Sent: Friday, 14 November 2008 12:44 AM
> To: ISA Mailing List
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Hi,
> 
> Can you be more specific regarding the audit statement?  I have multiple 
> SharePoint
> sites running on a single server. I am using host headers to distinguish the 
> sites. In
> order to have SSL on the Sharepoint server I will either have to add 
> additioanl or use
> alternate ports for the SSL connections. If this is what's necessary I will 
> do so but I
> would prefer not to.
> 
> Thanks
> 
> Bill
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> Behalf Of
> Thomas W Shinder
> Sent: Thursday, November 13, 2008 8:35 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Publishing Sharepoint
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Use SSL to SSL bridging. You fail the security audit with SSL to HTTP.
> 
> HTH,
> Tom
> 
> ____________________________________________
> TOM SHINDER   |   Sr. Consultant/Technical Writer
> 206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx
> 
> 5701 Sixth Avenue South   |   Seattle, WA 98108
> PROWESS   |   WWW.PROWESSCORP.COM
> ____________________________________________
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> > Behalf
> Of
> > William T Holmes
> > Sent: Thursday, November 13, 2008 6:39 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Publishing Sharepoint
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Hi,
> >
> > Can anyone offer any suggestions for this issue?
> >
> > Thanks
> >
> > Bill
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
> > Behalf
> Of
> > William T Holmes
> > Sent: Wednesday, November 05, 2008 10:45 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Publishing Sharepoint
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Hello,
> >
> > I am attempting to publish sharepoint with some success. However I am 
> > running into
> > some problems. I am unable to publish my mysite virtual server. In addition 
> > the
> mysite
> > link which appears if I connect to the sharepoint server directly does not 
> > appear
> when
> > connecting through the published link.
> >
> > I have configured the Alternate Access Mappings for the sharepoint sites 
> > within
> > sharepoint. I am only using SSL from the client to ISA and not from ISA to 
> > the
> > sharepoint server.
> >
> > The sharepoint server is serving three sites. sharepoint.mydomain.com,
> > mysite.mydomain.com and sharepointSSP.mydomain.com. These are all configured
> to
> > use Port 80 with host headers. Sharepoint works as expected when connecting
> > internally.
> >
> > I have created three publishing rules one for each of these internalsites. 
> > The
> > publishing rules were created with the sharepoint publishing wizard.
> >
> > When connecting to mysite.myexternaldomainname.com I get the following error
> >
> >
> >  Go back to site
> > Error
> >
> >
> > An unexpected error has occurred.
> > Troubleshoot issues with Windows SharePoint Services.
> >
> >
> > This is ISA Server 2006, Sharepoint 2007.
> >
> > I would appreciate any pointers.
> >
> > Thanks
> >
> > Bill
> >
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to 
> listadmin@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: