Event ID 8311, certificate validation errors : SharePoint

שלום חברים,

היום נתקלתי ב-Error  לאחר שבדקתי את ה-Event Viewer כחלק מבדיקות תשתית שאני מבצע אצל לקוחותיי.

ה-Error מתריע על בעיית Certificate :

Log Name       :  Application

Source           :  Microsoft-SharePoint Products-SharePoint Foundation

Event ID         :  8311

Task Category:  Topology

Level              :  Error

Description      : 

An operation failed because the following certificate has validation errors:\n\n Subject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US \n Issuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: 7884622F8B008E7AFAAFD3DDF98BE8AC69D4F952\n\n

Errors:\n\n The root of the certificate chain is not a trusted root authority.

בד"כ הבעיה נובעת ממחיקת ה- "local" trust relationship של החווה מהגדרות ה-Security ב-Central Admin . (Central Administration > Security > Manage Trust)

נראה כי ה-root certificate חסר ב- SharePoint certificate store . כתוצאה מכך claims authentication בחווה לא עובד כראוי. כדי לפתור את הבעיה צריך לייצא את ה-certificate  מה- Certificate Store בשרת ולהוסיף אותו ל-SharePoint Certificate Store.    רצוי להשתמש ב"טביעת האצבע" של התעודה שנמצא ב-Event Log, הייצוא מבוצע ע"י פקודת PowerShell  :

$rootCert = (Get-SPCertificateAuthority).RootCertificate

New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert

אחרי הרצת הפקודה יש לבצע IISRESET.

לי זה פתר את הבעיה.. מקווה שגם לכם J

בהצלחה,

רון נס.

============================================================================================================================================================================================================================================================

Hello friends,

Today I found an Error after I checked the Event Viewer as Part of Health Check that I do on my Customers SharePoint Environment

The Error alerts on Certificate problem:

Log Name: Application

Source: Microsoft-SharePoint Products-SharePoint Foundation

Event ID: 8311

Task Category: Topology

Level: Error

Description:

An operation failed because the following certificate has validation errors: \ n \ n Subject Name: CN = SharePoint Security Token Service, OU = SharePoint, O = Microsoft, C = US \ n Issuer Name: CN = SharePoint Root Authority, OU = SharePoint, O = Microsoft, C = US \ nThumbprint: 7884622F8B008E7AFAAFD3DDF98BE8AC69D4F952 \ n \ n

Errors: \ n \ n The root of the certificate chain is not a trusted root authority.

Usually the problem is due to deletion off of the "local" farm trust relationship of the Security settings in Central Admin. (Central Administration> Security> Manage Trust)

It seems that the root certificate is missing in SharePoint certificate store. As a result, farm claims authentication does not work properly. To solve the problem you need to export the certificate from the Certificate Store on the server and add it to SharePoint Certificate Store. Use the certificate thumb print that found in the Event Log, the export is done by PowerShell command:

$rootCert = (Get-SPCertificateAuthority).RootCertificate

New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert

After running the command you must do IISRESET.

For me it solved the problem... hope for you too J  

Good luck,

Ron Ness.

SharePoint 2010 Event ID 6482 : "Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance"

שלום חברים,

היום נתקלתי בתקלה חוזרת ב-Event Log שחזרה על עצמה בכל דקה.

התקלה : Event ID 6482

תוכן :

Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (GUID).

Reason: An update conflict has occurred, and you must re-try this action. The object SearchDataAccessServiceInstance was updated by domain\user, in the OWSTIMER (5040) process, on machine (server name). View the tracing log for more information about the conflict.

Technical Support Details:
Microsoft.SharePoint.Administration.SPUpdatedConcurrencyException: An update conflict has occurred, and you must re-try this action. The object SearchDataAccessServiceInstance was updated by domain\user, in the OWSTIMER (5040) process, on machine (server name). View the tracing log for more information about the conflict.

 

מסתבר שזה קורה כאשר יש תוכן של מערכת קבצים במטמון שרתי FE שהוא חדש יותר מהתוכן של מסד הנתונים. זה יכול לקרות אם לאחרונה בוצע שדרוג למערכת או התאוששות.

פתרון:
צריך לנקות את קבצי ה-Cache  בכל שרתי ה-FE.
להלן הצעדים לביצוע פעולה זו:
1. עצור את שירות "שעון העצר" של Windows SharePoint Services (SPTimerV4)
2. נווט אל תיקיית המטמון , בWindows Server 2008 R2, מטמון התצורה הוא במיקום הבא:
כונן: \ Programdata \ Microsoft \ SharePoint \ Config, אתר את התיקייה שיש בה את הקובץ "Cache.ini"
(הערה: תיקיית Application Data עשויה להיות מוסתרת כדי להציג את התיקייה המוסתרת, יש לשנות את אפשרויות התיקייה כנדרש.)
3. גבה את קובץ Cache.ini.
4. מחק את כל קבצי ה- XML בתיקיית GUID. התיקייה תתמלא מחדש בקבצי XML כאשר השירות - SPTimerV4 יופעל מחדש.
5. שים לב, כאשר אתה מרוקן את מטמון התצורה בתיקיית GUID, ודא שאתה לא מוחק את התיקייה ואת קובץ GUID Cache.ini שנמצא בתיקיית GUID.
6. לחץ פעמיים על קובץ Cache.ini.
7. בתפריט עריכה, לחץ על בחר הכל. בתפריט עריכה, לחץ על מחק. רשום 1, ולאחר מכן לחץ על שמור בתפריט הקובץ. בתפריט הקובץ, לחץ על יציאה.
8. הפעל את שירות "שעון העצר" של Windows SharePoint Services (SPTimerV4)
9. שים לב למטמון מערכת, הקבצים נוצרים מחדש לאחר ביצוע הליך זה. ודא שאתה מבצע הליך זה בכל השרתים בחוות השרתים.
10. ודא שהקובץ בתיקיית Cache.ini GUID מכיל כעת הערך שלו קודם. לדוגמה, ודא כי הערך של קובץ Cache.ini לא 1.

בהצלחה !

רון נס.

========================================================================================================================================================================================================================================

 Hello Friends,
Today I encountered the error persists Event Log on repeated every minute.

The event viewer had an error occurring every minute – Event ID 6482 which states:

Application Server Administration job failed for service instance Microsoft.Office.Server.Search.Administration.SearchServiceInstance (GUID).

Reason: An update conflict has occurred, and you must re-try this action. The object SearchDataAccessServiceInstance was updated by domain\user, in the OWSTIMER (5040) process, on machine (server name). View the tracing log for more information about the conflict.

Technical Support Details:
Microsoft.SharePoint.Administration.SPUpdatedConcurrencyException: An update conflict has occurred, and you must re-try this action. The object SearchDataAccessServiceInstance was updated by domain\user, in the OWSTIMER (5040) process, on machine (server name). View the tracing log for more information about the conflict.

Turns out that this happens when Some contents of the file system cache on the FE servers is newer than the contents of the configuration database. This could happen if you’ve recently been through a system upgrade or recovery.

Resolution:

The file system cache on all FE’s on which the timer service is running needs to be cleared.

Below is the step by step for doing this:

1. Stop the Windows SharePoint Services Timer service
2. Navigate to the cache folder
   In Windows Server 2008 R2, the configuration cache is in the following location:
   Drive:\ProgramData\Microsoft\SharePoint\Config , Locate the folder that has the file "Cache.ini"
   (Note: The Application Data folder may be hidden. To view the hidden folder, change the folder options as required)
3. Back up the Cache.ini file.
4. Delete all the XML configuration files in the GUID folder. Do this so that you can verify that the GUID folder is replaced by new XML configuration files when the cache is rebuilt.
5. Note when you empty the configuration cache in the GUID folder, make sure that you do not delete the GUID folder and the Cache.ini file that is located in the GUID folder.
6. Double-click the Cache.ini file.
7. On the Edit menu, click Select All. On the Edit menu, click Delete. Type 1, and then click Save on the File menu. On the File menu, click Exit.
8. Start the Windows SharePoint Services Timer service (SPTimerV4)
9. Note the file system cache is re-created after you perform this procedure. Make sure that you perform this procedure on all servers in the server farm.
10. Make sure that the Cache.ini file in the GUID folder now contains its previous value. For example, make sure that the value of the Cache.ini file is not 1.

Good Luck J

Ron Ness.

Event ID 7000 : SharePoint 2010 Administration service failed to start

שלום חברים,

היום התקנתי Comulatvie Update בחווה של הלקוח שלי וכשהרצתי את ה-Configuration Wizard קיבלתי בסוף התהליך Faild. ה-Configuration Wizard לא הצליח להרים בחזרה את ה- SPAdminV4 - SharePoint 2010 Administration Service.

 

ביצעתי את הפעולות הבאות :

 

ערכתי את הערכים הבאים ב- Registry : (אם הם לא קיימים יש להוסיף אותם)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

הוסף/ ערוך את הערך  DWORD ServicesPipeTimeout ל-  60000 (60 seconds)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

 הוסף/ ערוך את הערך  String  WaitToKillServiceTimeout ל-  120000 (120 seconds)

ביצעתי Reset למכונה והרץ מחדש את ה-Configuration Wizard.

 חשוב לבצע Reset לשרת !

הכל עבר בהצלחה.

בהצלחה !

רון נס.

============================================================================================================================================================================================================================================================

Hello Friends,

Today I installed Comulatvie Update on my client's farm and when I ran the Configuration Wizard at the end of the process It Faild. The Configuration Wizard is not able to upload the - SPAdminV4 - SharePoint 2010 Administration Service.

I did the following:

I made the following entries on Registry: (If they do not exist have to add them)

HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control

Add / Edit  ServicesPipeTimeout DWORD value to 60000 (60 seconds)

HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control

  Add / Edit the value String WaitToKillServiceTimeout to 120000 (120 seconds)

I've reset the machine and re-run the Configuration Wizard.

It is important to restart the server!

Everything was successful.

Good Luck :)

Ron Ness.

Event ID 6644 : Event manager error: Could not load file or assembly - Remove orphan evet handlers in SharePoint lists

שלום חברים,

הלקוח שלי ביצע מיגרציה לסביבת SharePoint 2010 מ- Moss 2007. לאחר המיגרציה (בוצעה לפני כחצי שנה) הופיע לעיתים קרובות ה-Error הבא ב- Event Log :

זה נובע בעיקר מחוסר ידיעה/תשומת לב לכל ה-DLL הרלוונטים ל- SharePoint(כולל של רכיבים שהוספו לחווה).

המשמעות של השגיאה היא, EventReceiver שהיה מקושר לרשימה לא רץ (לא קיים DLL ב-GAC) .

הפתרון הוא לבטל את הרישום של ה-Event לרשימה.

כתבתי Script ב- PowerShell , הרצתי אותו והבעיה שלי נפתרה.

מצ"ב ה-Script, תהנו :

# Get All SiteCollections

$siteCollection = Get-SPSite

 foreach ($site in $siteCollection)

 {

             <# Unmark the line below if you want to see the siteCollection Path each iteration

                   Write-Host "Site Collection Pathe :  " $site -foregroundcolor green #>

           

            #Check if there is a subsites under the SiteCollecyion if isn't write "The SubSite Doesn't Exist"

            if ($site.AllWebs.count -gt 0)

            {

              foreach($web in $site.AllWebs)

              {

              <# Unmark the line below if you want to see the SubSite Path each iteration

                   Write-Host "SubSite Pathe :  " $web -foregroundcolor Yellow#>

                         foreach ($list in $web.Lists)

                         {         

                              # Colelction of EventReceivers of the list

                               $ev = $list.EventReceivers

                                      

                             # Check if there is an EventReceivers

                               if ($ev.count -gt 0)

                               {

                                   

                       <# Unmark the line below if you want to see the List Name and the number of the EventReceivers

                             Write-Host "List Name :  " $list.Title -foregroundcolor Gray  

                            Write-Host "Number of eventRecivers in List :  " -foregroundcolor Gray -nonewline; Write-Host                             $ev.count -foregroundcolor Blue#>

                                               

                                    # Get the Curent EventReceiver

                                    foreach ($myev in $ev)

                                                {                      

                                     

                                                  if($myev.assembly -eq 'Write here the EventReceiver Assembly')

                                                   {

                                                            Write-Host "Site Collection Pathe :  " $site -foregroundcolor green

                                                            Write-Host "SubSite Pathe :  " $web -foregroundcolor Yellow

                                                            Write-Host "List Name :  " $list.Title -foregroundcolor Gray

                                                            Write-Host $myev.assembly -foregroundcolor cyan

                                                            $myev.delete()

                                                  }        

                                                }

                                       }

                         }

              }

            }

            else

            {

                        Write-Host "Site Collection Pathe :  " $site -foregroundcolor green

                        Write-Host "No SubSites" -foregroundcolor red

            }          

 }

בהצלחה !

רון נס.

============================================================================================================================================================================================================================================================

Hello Friends,

Befor 6 Months ,My client migrate his  Moss 2007 environment to SharePoint 2010 environment. After The Migration some Errors appeared frequently on the Event Log:

This is mainly due to lack of knowledge / attention to the relevant DLLs to SharePoint (including the components were added to the farm).

The Meaning of the error is the EventReceiver was linked to the list but was not running (there is no DLL in the GAC(.

The solution is to unregister the Event from the list.

I wrote a script inPowerShell, ran it, and my problem was solved.

Here is the script, enjoy:

# Get All SiteCollections

$siteCollection = Get-SPSite

 foreach ($site in $siteCollection)

 {

             <# Unmark the line below if you want to see the siteCollection Path each iteration

                   Write-Host "Site Collection Pathe :  " $site -foregroundcolor green #>

           

            #Check if there is a subsites under the SiteCollecyion if isn't write "The SubSite Doesn't Exist"

            if ($site.AllWebs.count -gt 0)

            {

              foreach($web in $site.AllWebs)

              {

              <# Unmark the line below if you want to see the SubSite Path each iteration

                   Write-Host "SubSite Pathe :  " $web -foregroundcolor Yellow#>

                         foreach ($list in $web.Lists)

                         {         

                              # Colelction of EventReceivers of the list

                               $ev = $list.EventReceivers

                                      

                             # Check if there is an EventReceivers

                               if ($ev.count -gt 0)

                               {

                                   

                       <# Unmark the line below if you want to see the List Name and the number of the EventReceivers

                             Write-Host "List Name :  " $list.Title -foregroundcolor Gray  

                            Write-Host "Number of eventRecivers in List :  " -foregroundcolor Gray -nonewline; Write-Host                             $ev.count -foregroundcolor Blue#>

                                               

                                    # Get the Curent EventReceiver

                                    foreach ($myev in $ev)

                                                {                      

                                     

                                                  if($myev.assembly -eq 'Write here the EventReceiver Assembly')

                                                   {

                                                            Write-Host "Site Collection Pathe :  " $site -foregroundcolor green

                                                            Write-Host "SubSite Pathe :  " $web -foregroundcolor Yellow

                                                            Write-Host "List Name :  " $list.Title -foregroundcolor Gray

                                                            Write-Host $myev.assembly -foregroundcolor cyan

                                                            $myev.delete()

                                                  }        

                                                }

                                       }

                         }

              }

            }

            else

            {

                        Write-Host "Site Collection Pathe :  " $site -foregroundcolor green

                        Write-Host "No SubSites" -foregroundcolor red

            }          

 }

 Good Luck :)

Ron Ness.