My Site creation fails when running through AAM, works when using the standard url.

Thursday, June 11, 2009 12:32 PMPants79

0
Sign In to Vote
Hello,

This has me stumped so i am turning to you for some help.

I have the following setup:

DB Server.
App/Index Server.
FE Server.

When users try to create a MySite from https://my.company.com it fails but when they try http://my it works. The error is:Failure to create site: Value does not fall within expected range.

What i have done:

Create webapplication 1 http://my.company.local -> http://my
Extend the webapplication to also host http://my.company.com running on SSL.

With AAM i set the http://my to the default zone and https://my.company.com to internet zone.

All other web applications work as expected.

Error log:
My Site creation failure for user 'DOMAIN\USERNAME' for site url 'https://my.company.com/personal/USERNAME'. The exception was: Microsoft.Office.Server.UserProfiles.PersonalSiteCreateException: A failure was encountered while attempting to create the site. ---> System.ArgumentException: Value does not fall within the expected range.     at Microsoft.SharePoint.Library.SPRequestInternalClass.SscCreateSite(Guid gApplicationId, String bstrUrl, String bstrServerRelativeUrl, Int32 lZone, Guid gSiteId, Guid gDatabaseId, String bstrDatabaseServer, String bstrDatabaseName, String bstrDatabaseUsername, String bstrDatabasePassword, String bstrTitle, String bstrDescription, UInt32 nLCID, String bstrWebTemplate, String bstrOwnerLogin, String bstrOwnerUserKey, String bstrOwnerName, String bstrOw...
06/11/2009 11:39:14.52* w3wp.exe (0x0BFC)                       0x0634 SharePoint Portal Server      User Profiles                 7fyq Critical ...nerEmail, String bstrSecondaryContactLogin, String bstrSecondaryContactUserKey, String bstrSecondaryContactName, String bstrSecondaryContactEmail, Boolean bADAccountMode)     at Microsoft.SharePoint.Library.SPRequest.SscCre
06/11/2009 11:39:14.52 w3wp.exe (0x0BFC)                       0x0634 SharePoint Portal Server      User Profiles                 62pb High    Exception while creating personal site for 'COMPANY\USERNAME': Microsoft.Office.Server.UserProfiles.PersonalSiteCreateException: A failure was encountered while attempting to create the site. ---> System.ArgumentException: Value does not fall within the expected range.     at Microsoft.SharePoint.Library.SPRequestInternalClass.SscCreateSite(Guid gApplicationId, String bstrUrl, String bstrServerRelativeUrl, Int32 lZone, Guid gSiteId, Guid gDatabaseId, String bstrDatabaseServer, String bstrDatabaseName, String bstrDatabaseUsername, String bstrDatabasePassword, String bstrTitle, String bstrDescription, UInt32 nLCID, String bstrWebTemplate, String bstrOwnerLogin, String bstrOwnerUserKey, String bstrOwnerName, String bstrOwnerEmail, String bstrSecondaryContactLogin, String bstrSecondaryConta...
06/11/2009 11:39:14.52* w3wp.exe (0x0BFC)                       0x0634 SharePoint Portal Server      User Profiles                 62pb High    ...ctUserKey, String bstrSecondaryContactName, String bstrSecondaryContactEmail, Boolean bADAccountMode)     at Microsoft.SharePoint.Library.SPRequest.SscCreateSite(Guid gApplicationId, String bstrUrl, String bstrServerRelativeUrl, Int32 lZone, Guid gSiteId, Guid gDatabaseId, String bstrDatabaseServer, String bstrDatabaseName, String bstrDatabaseUsername, String bstrDatabasePassword, String bstrTitle, String bstrDescription, UInt32 nLCID, String bstrWebTemplate, String bstrOwnerLogin, String bstrOwnerUserKey, String bstrOwnerName, String bstrOwnerEmail, String bstrSecondaryContactLogin, String bstrSecondaryContactUserKey, String bstrSecondaryContactName, String bstrSecondaryContactEmail, Boolean bADAccountMode)     at Microsoft.SharePoint.Administration.SPSiteCollection.Add(SPContentDatabase ...
06/11/2009 11:39:14.52* w3wp.exe (0x0BFC)                       0x0634 SharePoint Portal Server      User Profiles                 62pb High    ...database, String siteUrl, String title, String description, UInt32 nLCID, String webTemplate, String ownerLogin, String ownerName, String ownerEmail, String secondaryContactLogin, String secondaryContactName, String secondaryContactEmail, String quotaTemplate, String sscRootWebUrl, Boolean useHostHeaderAsSiteName)     at Microsoft.SharePoint.SPSite.SelfServiceCreateSite(String siteUrl, String title, String description, UInt32 nLCID, String webTemplate, String ownerLogin, String ownerName, String ownerEmail, String contactLogin, String contactName, String contactEmail, String quotaTemplate)     at Microsoft.Office.Server.UserProfiles.UserProfile.<>c__DisplayClass2.<CreateSite>b__0()     --- End of inner exception stack trace ---     at Microsoft.Office.Server.UserProfiles.UserProfile.<>c__D...
06/11/2009 11:39:14.52* w3wp.exe (0x0BFC)                       0x0634 SharePoint Portal Server      User Profiles                 62pb High    ...isplayClass2.<CreateSite>b__0()     at Microsoft.SharePoint.SPSecurity.CodeToRunElevatedWrapper(Object state)     at Microsoft.SharePoint.SPSecurity.<>c__DisplayClass4.<RunWithElevatedPrivileges>b__2()     at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode)     at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(WaitCallback secureCode, Object param)     at Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(CodeToRunElevated secureCode)     at Microsoft.Office.Server.UserProfiles.UserProfile.CreateSite(String strRequestUrl, Boolean bCollision, Int32 lcid)     at Microsoft.Office.Server.UserProfiles.UserProfile.CreatePersonalSite(Int32 lcid).
06/11/2009 11:39:14.54 w3wp.exe (0x0BFC)                       0x0634 Windows SharePoint Services   General                       8l1n High    An SPRequest object was not disposed before the end of this thread. To avoid wasting system resources, dispose of this object or its parent (such as an SPSite or SPWeb) as soon as you are done using it. This object will now be disposed. Allocation Id: {ACD8DA71-E0BA-44A6-A99F-BDECB11D9FFD} To determine where this object was allocated, create a registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\HeapSettings. Then create a new DWORD named SPRequestStackTrace with the value 1 under this key.

Kind regards,

Kor
- Edited byPants79 Thursday, June 11, 2009 12:40 PM
- Reply
- Quote

Answers

Wednesday, July 01, 2009 1:01 PMPants79

0
Sign In to Vote
Well for anyone else having this problem, adding the application pool account from the webapplication hosting the mysites to the farm administrators did the trick.

Details per this post:

http://social.technet.microsoft.com/Forums/en-US/sharepointsocialcomputing/thread/c731ce02-f219-4356-985b-baf83a475c28

Don't know why. I hope anyone can tell me of any risks involved in this setup besides giving it too many rights.
- Marked As Answer byPants79 Wednesday, July 01, 2009 2:11 PM
- Reply
- Quote

All Replies

Friday, June 12, 2009 8:01 AMPants79

0
Sign In to Vote
Update:

I have deleted the *entire* webapplication that hosts the MySite collection, including the content databeses, the IIS websites and recreated everything again.

Same error. The normal URL works like expected but the SSL secured one gives the same error.

Any ideas? This is really annoying because i would to have the external URL the same as the internal one.

Kind regards,

Kor
- Reply
- Quote
Friday, June 12, 2009 5:10 PMMirjam van Olst

0
Sign In to Vote
Hi Kor,

Try adding an A record in DNS for https://my.company.com.
Mirjam
www.sharepointblogs.com/mirjam
- Reply
- Quote
Friday, June 12, 2009 10:10 PMPants79

0
Sign In to Vote
Hoi Mirjam,

I have already configured an A record in my DNS.

After the site creation everything works as expected, it is just the site creation that fails and i have no idea why.

Thanks for your answer though.

Kind regards,

Kor
- Reply
- Quote
Saturday, June 13, 2009 5:04 AMIvan Sanders

0
Sign In to Vote
I noticed your using HTTPS, have you added an SSL Certificate to the IIS WebSite thats been extended https://my.company.com ?

-Ivan
Ivan Sanders http://linkedin.com/in/iasanders http://dimension-si.com/blog
- Reply
- Quote
Saturday, June 13, 2009 9:03 AMPants79

0
Sign In to Vote
I have extended the website, loaded a certificate and used adsutil to create the SSL host headers.

When the initial site creation has done it's job i can reach the sites via SSL, it is the problem that initial site creation fails over SSL but works on http://my

I really have no clue as to why yhis doesn't work.

Kind regards,

Kor
- Reply
- Quote
Saturday, June 13, 2009 9:11 AMIvan Sanders

0
Sign In to Vote
Lets check the version of SharPoint your using please go to Central Administration > Site Settings and ping back with the version... Also, have you extended any addional sites to 443?

-Ivan

Ivan Sanders http://linkedin.com/in/iasanders http://dimension-si.com/blog
- Reply
- Quote
Saturday, June 13, 2009 10:04 AMPants79

0
Sign In to Vote
Hi Ivan,

I am using service pack 2. 12.0.0.6421 on all servers.

All other webapplications are also using 443. I have 4 of them.

I have created the initial webapplications *not* using SSL. Afterwards i extended them to use SSL and gave them a different name.

Thanks for your help BTW.

Regards,

Kor
- Reply
- Quote
Saturday, June 13, 2009 10:08 AMIvan Sanders

0
Sign In to Vote
What type of certificates are you using with for SSL, (WildCard)? Does each of the Extended Apps have its own IP Addess? are you familiar with the Host Header issue and Certificates? http://support.microsoft.com/kb/187504

-Ivan
Ivan Sanders http://linkedin.com/in/iasanders http://dimension-si.com/blog
- Reply
- Quote
Saturday, June 13, 2009 10:17 AMPants79

0
Sign In to Vote
It is a wildcard certificate. I have seen that KB article but my servers run 2003 X64 SP2 with all the updates so i don't think that applies to my situation.

It also rears it's ugly head on my second front end which is a 2008R2 server running IIS 7.5.

All the sites are running on the same IP address and everything is done with hostheaders.

All other sites run fine except the My Sites.
- Reply
- Quote
Saturday, June 13, 2009 12:25 PMIvan Sanders

0
Sign In to Vote
Did you run the script for SSL with Host Headers? Are you running any of the role based My Sites?
Ivan Sanders http://linkedin.com/in/iasanders http://dimension-si.com/blog
- Reply
- Quote
Sunday, June 14, 2009 5:33 PMPants79

0
Sign In to Vote
Hi Ivan,

I've run the adsutil script on the 2003 servers and used the applicationhost.config file on the 2008 R2 server.

I am not running any rolebased mysites.
- Reply
- Quote
Wednesday, June 17, 2009 5:59 AMPants79

0
Sign In to Vote
Bump!

Any other things i can check? I am running out of ideas :(
- Reply
- Quote
Sunday, June 21, 2009 12:53 PMIvan Sanders

0
Sign In to Vote
Best Practice is to use a Seperate IP for each of the SSL Enabled Site.

However, you can download fiddler webdebugger @ http://www.fiddler2.com/fiddler2/ Fiddler allows you to inspect all HTTP(S) traffic, set breakpoints, and "fiddle" with incoming or outgoing data and its free.....

-Ivan
Ivan Sanders http://www.linkedin.com/in/iasanders http://dimension-si.com/blog
- Reply
- Quote
Wednesday, July 01, 2009 1:01 PMPants79

0
Sign In to Vote
Well for anyone else having this problem, adding the application pool account from the webapplication hosting the mysites to the farm administrators did the trick.

Details per this post:

http://social.technet.microsoft.com/Forums/en-US/sharepointsocialcomputing/thread/c731ce02-f219-4356-985b-baf83a475c28

Don't know why. I hope anyone can tell me of any risks involved in this setup besides giving it too many rights.
- Marked As Answer byPants79 Wednesday, July 01, 2009 2:11 PM
- Reply
- Quote