SharePoint Geek » IIS

Host Header On SSL Sites

stewart — Thu, 24 Jun 2010 17:18:00 +0000

This is an update to our previous post (Enable Host Headers On An SSL/HTTPS Site). Which used the following command to enable host headers on SSL sites:

cscript.exe adsutil.vbs set /w3svc//SecureBindings ":443:"

I ran into some issues with using SecureBindings with the Sharepoint Central Administration sites so I thought I would post some of the other commands that I used:

To find out what bindings are on a site use the following command:

cscript.exe adsutil.vbs get w3svc//securebindings

To remove the host header from an SSL site use the following command:

cscript.exe adsutil.vbs set /w3svc//SecureBindings ":443:"

Tags: IIS, ssl

Delete An Extended Web Application

stewart — Thu, 27 May 2010 17:07:00 +0000

Extended web applications are not listed in the web application list and cannot be deleted using the Delete Web Application link in Central Administration.

Use the following steps to delete extended web applications:

Start Central Administration
Go to Application Management
Click Remove SharePoint from IIS Web Site to get a page with a form similar to the following.
Select the web application that the extended web app was extended from
Select which extention/zone to delete
Select whether to keep or delete the IIS Web site
Finally click OK

Tags: Central Administration, extended web application, IIS, MOSS, web application, Windows SharePoint Services Web Application, wss

IIS Admin Error: Handle Is Invalid – Permissions SSL Certificate MachineKeys

stewart — Wed, 05 May 2010 18:32:18 +0000

Well, I’ve been trying to setup the External Collaboration Toolkit. All of the instructions tell how to do it as a standalone SharePoint install, but I am trying to get it setup in a SharePoint farm. One of the steps in the instructions is to setup ADAM to act as the authentication for external users. The communications with ADAM need to be SSL encrypted. So, I set it up the way the instructions say and went through the portion that ensures that the UserID that runs the ADAM service has access to the SSL Certificates.

That’s when I must have went wrong. Somehow, I removed access to the SSL Certificates from the service that runs the IIS Admin service. So, when I rebooted, IIS would not start. The only thing that was in the event log was:

Handle is invalid

Real helpful, huh?

Luckily, I was able to find Microsoft KB Article #278381. The basic thing is that I needed to reset the security on the SSL Certificates. Below is an explaination:

The MachineKeys are at the following location:
All Users Profile\Application Data\Microsoft\Crypto\RSA

The following settings are the default permissions for the MachineKeys folder:

Administrator	(Full Control)	This folder only
Everyone	(Special)	This folder, subfolders, and files
SYSTEM	(Full Control)	This folder, subfolders, and files

To view the special permissions for the Everyone group, right-click the MachineKeys folder, click Advanced on the Security tab, and then click View/Edit. The permissions consist of the following permissions:

List Folder/Read Data
Read Attributes
Read Extended Attributes
Create Files/Write Data
Create Folders/Append Data
Write Attributes
Write Extended Attributes
Read Permissions

Select the Reset Permissions on all Child objects and enable propagation of inheritable permissions check box.

Tags: adam, External Collaboration Tool-Kit, IIS, ssl

Enable Host Headers On An SSL/HTTPS Site

stewart — Fri, 26 Feb 2010 16:11:27 +0000

The other day we came across an issue where a user inadvertently inserted a “https” in the URL of a SharePoint site. The resulting page that was displayed was the Central Administration site.

The only site that is secured with SSL on our SharePoint servers is the Central Admin site. The Central Admin site also has a host header. So, I thought that all traffic on port 443 would require the correct host header for Central Admin to respond.

I was wrong.

I was able to find a script on Microsoft TechNet that will enable host headers for SSL sites. Run the following from the commandline:

cscript.exe adsutil.vbs set /w3svc//SecureBindings ":443:"

Where <host header> is the host header for the Web site and is the site’s unique identifier.

You will find the adsutil.vbs file in several places but you should probably use the one located at C:\Inetpub\AdminScripts.

IIS 6.0

IIS 7.0

Tags: Central Administration, IIS, Sharepoint, ssl, wss

Add Office 2007 MimeTypes To IIS Metabase

admin — Mon, 08 Feb 2010 11:00:46 +0000

If you have trouble downloading Office 2007 documents from IIS you may have to add their MimeTypes to the site.

You could do it for the individual extensions by following the steps below:

Select [HTTP Headers] tab from the website properties
Select [Mime Types]
Enter the new extension and the appropriate mime type

To apply the mimetypes globally, you can stop IIS and edit the metabase XML file

C:\WINDOWS\system32\inetsrv\MetaBase.xml

Using a text editor, search for the


 element and append the following lines to the MimeMap attribute:
.docm,application/vnd.ms-word.document.macroEnabled.12
.docx,application/vnd.openxmlformats-officedocument.wordprocessingml.document
.dotm,application/vnd.ms-word.template.macroEnabled.12
.dotx,application/vnd.openxmlformats-officedocument.wordprocessingml.template
.potm,application/vnd.ms-powerpoint.template.macroEnabled.12
.potx,application/vnd.openxmlformats-officedocument.presentationml.template
.ppam,application/vnd.ms-powerpoint.addin.macroEnabled.12
.ppsm,application/vnd.ms-powerpoint.slideshow.macroEnabled.12
.ppsx,application/vnd.openxmlformats-officedocument.presentationml.slideshow
.pptm,application/vnd.ms-powerpoint.presentation.macroEnabled.12
.pptx,application/vnd.openxmlformats-officedocument.presentationml.presentation
.xlam,application/vnd.ms-excel.addin.macroEnabled.12
.xlsb,application/vnd.ms-excel.sheet.binary.macroEnabled.12
.xlsm,application/vnd.ms-excel.sheet.macroEnabled.12
.xlsx,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
.xltm,application/vnd.ms-excel.template.macroEnabled.12
.xltx,application/vnd.openxmlformats-officedocument.spreadsheetml.template


	Tags: IIS, Metabase, MimeType


	Related posts
	
	No related posts.

A Script To Recycle App Pools In IIS

admin — Fri, 05 Feb 2010 14:43:43 +0000

Did you know that there is a script that was shipped with Windows 2003 SP2 that allows you to recycle your IIS Application Pools.

Below is the command that you use from the command line:

Description: list IIS application pools and associated worker process
             Recycle application pools.

Syntax: IIsApp.vbs [{ /a  | /p
 } [/r] ]

Parameters:

Value              Description
/a    Specify an application pool by name. Surround
                    with quotes if it contains spaces.
                   If used alone without an accompanying action,
                   IIsApp.vbs will report PIDs of currently running
                   w3wp.exe processes serving pool .
/p
           Specify a process by process ID. If used alone
                   without an accompanying action, IIsApp.vbs will
                   report the AppPoolId of the w3wp process specified
                   by
. When a PID is specified with /r, that PI
                   is mapped to an application pool and the action is
                   taken upon the application pool. If a PID is given
                   for a web garden, i.e. an application pool served
                   by more than one w3wp, then all w3wp's for that
                   application pool will be acted upon.
/r                 Recycles the application pool.

DEFAULT: no switches will print out the PID and AppPoolId.

Examples:

IIsApp
IIsApp /p 2368
IIsApp /a DefaultAppPool /r
IIsApp /p 2368 /r

Tags: application pools, IIS, Windows Server

Sharepoint And Alternate Access Paths

stewart — Tue, 05 Jan 2010 18:10:00 +0000

I have been wanting to setup a non-www host header for our external websites and found that there are 2 steps to get this working:

Setup an Alternate Access Mapping in the default zone that specifies the domain without the “www”.
Manually add the host header to the IIS properties of the website.

Tags: alternate access mappings, IIS, MOSS, Sharepoint, wss

Stop Windows SharePoint Services Web Application

stewart — Wed, 04 Nov 2009 20:24:05 +0000

!!!*** NEVER, NEVER, NEVER, NEVER EVER STOP WINDOWS SHAREPOINT SERVICES WEB APPLICATION ***!!!

The Windows SharePoint Services Web Application is what identifies your server as a SharePoint Web Front-End. If you stop this “service” it will remove all SharePoint websites and the directories from which they are served.

So, unless you know exactly what you are doing, DO NOT STOP THE WINDOWS SHAREPOINT SERVICES WEB APPLICATION!!!

Tags: Central Administration, IIS, Sharepoint, sharepoint services, Windows SharePoint Services Web Application, wss