SSP Admin Site - cannot access
I built from scratch a brand new MOSS 2007 small farm install on Windows Server 2003 Standard SP2 with SQL 2005 Standard SP3 for the database on the same server.The basic MOSS install completes. I can launch Central Admin (CA) with no problem. Created the SSP in its own Web App and Application pool and also put the MySites into a separate Web App - and this all seemed to go fine. I added the host headers used for the SSP site into DNS and tested pings to that address. I also added the ssp url into the IE Trust Zone.However, when I try to get to the /ssp/admin site, it prompts me to log in, doesn't accept the credentials, and ends up with a "You are not authorized to view this page" message.I am logged into the server as the user that installed MOSS when launching Central Admin (CA). I also verified that this installation user is located in the following places:CA > Operations > Farm AdministratorsCA > Application Management > Site Collection Administrators > (SSP site collection)CA > Application Management > Policy for Web Applications > (SSP web application) > Full ControlI even created a new SSP and repeated the above steps, but still get the same results with trying to access the admin site on the new SSP. Many IIS resets and reboots later, still no luck getting to the SSP Admin site.Any help would be greatly appreciated.Thanks
April 15th, 2010 10:08pm

Two steps forward, one step back...Looks like the AAM's are ok (i.e. There are url's set up that match those that I'm using to get the ssp admin site).I disabled the loopback check by applying the DisableLoopbackCheck registry key noted in the thread above (http://social.msdn.microsoft.com/Forums/en-US/sharepointadmin/thread/89fad63c-159c-4701-9b39-d840b00c3f9f) and rebooted.When I went to ssp admin page, I got an aspx error page:Server Error in '/' Application.Runtime ErrorDetails: To enable the details of this specific error message to be viewable on the local server machine, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "RemoteOnly". To enable the details to be viewable on remote machines, please set "mode" to "Off".<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="RemoteOnly"/> </system.web></configuration> Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="On" defaultRedirect="mycustompage.htm"/> </system.web></configuration>Also, there is an ASP.NET 2.0.50727.0 warning in the Application Logs with Event ID 1309 that indicates that the account under which the ssp application pool is running doesn't have permissions to an ASP.NET temp directory:Exception information: Exception type: HttpException Exception message: The current identity (COMPANYDOMAIN\SSPaccount) does not have write access to 'C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files'.So, for the purposes of testing, I added the SSPaccount referenced in the error message to the Server Operators group (since this group had write permissions to the "Temporary ASP.NET Files" folder). The account was already a member of Backup Operators, Domain Users, IIS_WPG, and WSS_WPG group.I stopped and started the App Pools, and did an iisreset for good measure. And now I can get to the SSP admin site!However, I don't want to make this account a member of the Server Operators group for security purposes if I don't have to.Is there official documentation on the least privileges I can give this account? Necessary group memberships?Thanks
Free Windows Admin Tool Kit Click here and download it now
April 16th, 2010 8:12am

Try running the SharePoint configuration wizard again. It is possible that permissions are messed up and running the config wizard again should refresh the proper permissions needed to access the SSP.Eli Van Eenwyk Visit my blog @ http://developsharepoint.spaces.live.com
April 17th, 2010 6:49am

Eli is correct but dont disconnect from the farm and psconfigui will reset the permissions or from a command line > psconfig -cmd secureresources, my aologies I didnt read the entire post ... Cheers, -Ivan Ivan Sanders My LinkedIn Profile, My Blog, @iasanders.
Free Windows Admin Tool Kit Click here and download it now
April 18th, 2010 12:20pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics