Not able to view documents on Sharepoint
- We are using WSS 3.0 and published Shaprepoint 2007 (Backword Application) as the application type. Some of the documents work fine for me but on majority of the documents i receive an error that Illegal Path. On the web mon the error says like this
Request failed, the URL contains an illegal path. Trunk: oneshield; Secure=1; Application Name: Intranet; Application Type: SharePoint2007; Rule: Default rule; Source IP: 39.0.0.12; Method: GET; URL: /coreeng/Shared%20Documents/DAP/Core%20Release_4.017_DAP%20-%20Use%
On the web servers I have given path / as it will take full structure
Answers
- Hi Anuj,
The error you mention in the original question indicates that IAG was unable to find any rule that will allow that request, and so it blocked it. What you should do is look under Advanced Trunk configuration/URL Set and look for rules pertaining to that application. Your application type is "Sharepoint2007", so the rules pertaining to that app will be named "Sharepoint2007_rule1", "Sharepoint2007_rule2" etc. Look at these rules, and try to understand what they do. You can also add a new one with the same naming structure and give it a path of .* to allow EVERYTHING (.* is the Regex equivalent of what we know as *.*), although that kind of lax rule has security repercussions.
Another thing you might want to do is use the Sharepoint2007 template - not the "backward compatibility" one. It generally works better.
Lastly, try to look at files that are being blocked - they might have something in common, like a specific character or length that might indicate a problem.
Ben Ari
Microsoft CSS IAG Support
Sammamish, WA- Marked As Answer byBen AriMSFT, OwnerFriday, October 30, 2009 4:57 PM
All Replies
- Hello AnujI think the problem here is that the iag is not able to access all the file from the path give as /. Just try to give a additional path as \"Folder name"
Cheers Bill If the path is set to start in the root all directories will be allowed on the path. Check the URLset for this application and make sure you have the regex correct. With that thought in mind; the application template should be augmenting the URLsets if the application template is correct. Given that Sharepoint has a few different templates, have you verified you are using the correct template for the version of sharepoint you have?
DanIf the path is set to start in the root all directories will be allowed on the path. Check the URLset for this application and make sure you have the regex correct. With that thought in mind; the application template should be augmenting the URLsets if the application template is correct. Given that Sharepoint has a few different templates, have you verified you are using the correct template for the version of sharepoint you have?
Dan
If I publish it with anyother application template like:
1. SP 2003, SP 2007 the resukt is the same. The new thing isRequest failed, the URL contains an illegal path. Trunk: oneshield; Secure=1; Application Name: Intranet; Application Type: SharePoint2007; Rule: Default rule; Source IP: 10.0.0.223; Method: GET; URL: /aaa/Lists/Announcements/Attachments/9/VPN%20Issues%20Log%20for%20AAA%20Mid-Atlantic%20%20Project.xls?AWisNotRunning=true..
2. If I publsi using a genreic web app IE throws an error that Your system do not meet security requirements of the system inspite of Pops are not blocked and site added in trusted sites and IE enhanced security disabled.
The strange part is if I use any other browser in this template for eg. FF or Chrome there is no problem with any document.- Hello AnujThe ie behaves very strangely with IAG. I also facing an issue in ie. I have published my lotus mail server using iag and its works properly with all other browser except ie. The Strange part is none of the logs are showing any error. We tried looking into isa log and iag filter log and none showed any error of any sort.
Cheers Bill - Hi Anuj,
The error you mention in the original question indicates that IAG was unable to find any rule that will allow that request, and so it blocked it. What you should do is look under Advanced Trunk configuration/URL Set and look for rules pertaining to that application. Your application type is "Sharepoint2007", so the rules pertaining to that app will be named "Sharepoint2007_rule1", "Sharepoint2007_rule2" etc. Look at these rules, and try to understand what they do. You can also add a new one with the same naming structure and give it a path of .* to allow EVERYTHING (.* is the Regex equivalent of what we know as *.*), although that kind of lax rule has security repercussions.
Another thing you might want to do is use the Sharepoint2007 template - not the "backward compatibility" one. It generally works better.
Lastly, try to look at files that are being blocked - they might have something in common, like a specific character or length that might indicate a problem.
Ben Ari
Microsoft CSS IAG Support
Sammamish, WA- Marked As Answer byBen AriMSFT, OwnerFriday, October 30, 2009 4:57 PM
