locked
Re-creating User Profile Service App (UPS) application and service - stuck on strange issues RRS feed

  • Question

  • Hi everyone, I'm re-creating the User Profile Service (UPS) Application , following Harbar.net http://www.harbar.net/articles/sp2010ups.aspx articles, but I'm having a couple of issues.

    First, when I first create the service application, after clicking the CREATE button, the process window just spins, and spins, and spins, and eventually (30+ minutes) I just close the window. However, it does create the application and it shows up in the list after refreshing the application page.

    The other issue I have, is when I atempt to start and setup the UPS Service, the drop down to select the User Profile Application is empty (see below).

    I'm wondering what I am missing, I'm sure it's something obvious, but I have picked through the Harbar.net directions, with no progress.

    Can anyone give me some suggestions please?

    EDIT: Yes, I have done an IISRESET, many times.


    -Mike



    • Edited by Mikewire MCP Thursday, December 20, 2012 10:11 PM
    Thursday, December 20, 2012 10:08 PM

Answers

All replies

  • Are you deleting the Profile, Social, and Sync databases when you delete your UPA SA, or are you attempting to leverage existing ones?

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Thursday, December 20, 2012 10:29 PM
  • Thanks Trevor, yes I am deleting the 3 associated DB's, and I did make sure the managed account has full access to MSSQL - and are db_owner to all the SP databases in user mapping.  FWIW, after deleting the DB's, and trying agin to create a new UPA SA does create new DB's, so permissions appear to be correct.

    -Mike

    Thursday, December 20, 2012 10:49 PM
  • I take it you have not changed the service account for the UPA/UPSS, correct?

    Have you cleared out the FIM certificates form the Local Computer store as well as the Forefront Identity Manager services?  This can all be done via the MMC.


    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Thursday, December 20, 2012 10:53 PM
  • I have tried changing the service account, but both of the accounts I tried are farm admins, have local login privs, and the proper local and domain permissions as I understand from reading on the harbar.net article for configuring UPA/UPSS. I'm a bit lost, they should be working fine.

    I'm not familar with clearing FIM certificates, can you enlighten me on what that is all about? That could be part of the issue.


    -Mike

    Thursday, December 20, 2012 11:03 PM
  • You cannot change the service account, this will break it.  The account must be the same as the account running owstimer.exe.

    Run mmc.  Go to File -> Add -> Certificates -> Local Computer.  You'll find them under Personal -> Certificates and Trusted People -> Certificates.

    Again go to File -> Add -> Certificates -> Service Account -> Forefront Identity Manager Service (and Forefront Identity Manager Synchronization Service).  It'll be under Trusted People -> Personal.

    Make sure the FIM services are stopped prior to deleting the certs.


    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Thursday, December 20, 2012 11:07 PM
  • Ok, thanks again Trevor - so when I re-created the UPA I used the same managed account as the timer service is using which is a domain service account domain\sharepoint. Now that will not break the UPA, correct?

    Looking in to the MMC for the certificates, I have nothing setup. Not surprsing because this is a new install and the UPA/UPSS was never setup, as I am configuring it now to work properly.

    Still, the issue that's most concerning is that the UPA is not showing up in the drop down when attempting to start the UPSS.

    Any thoughts there?


    -Mike

    Friday, December 21, 2012 4:01 PM
  • What is your farm version #?

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Friday, December 21, 2012 4:52 PM
  • Im on the Aug. 2012 CU, 14.0.6126.5000

    I have one DB, and one WFE running 2008 R2, and SQL 2008 R2.


    -Mike

    Friday, December 21, 2012 4:54 PM
  • Can you delete your UPA Service Application, Stop and restart the User Profile Service service, then recreate your UPA via PowerShell (must run this as the user who is running owstimer.exe, otherwise you'll run into schema ownership issues on the Profile database)?

    $upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool "SharePoint Web Services System" -ProfileDBName "Profile" -ProfileDBServer SQL01 -SocialDBName "Social" -SocialDBServer SQL01 -ProfileSyncDBName "Sync" -ProfileSyncDBServer SQL01 
    New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa -DefaultProxyGrou



    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Friday, December 21, 2012 5:04 PM
  • I seem to be having an issue with the above script, possibly syntax related? Below is your script, modified, substituting my own vars in for SQL01 (my WFE is named sharepointweb1) and naming the DB's (appending an "RSH" to the end of each).

    I have a app pool called SharePoint Web Services System, but it's not recognizing it?

    Error: "New-SPProfileServiceApplication : An invalid application pool was specified."

    $upa = New-SPProfileServiceApplication -Name "User Profile Service" 
    -ApplicationPool "SharePoint Web Services System" -ProfileDBName 
    "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social 
    RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" -
    ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy 
    -Name "User Profile Service Proxy" -ServiceApplication $upa -
    DefaultProxyGroup

    I must be missing something here, do I need to create a new app pool?

    -Mike


    Friday, December 21, 2012 7:46 PM
  • Looks like your service application pool is not "SharePoint Web Services System", which is fine.  But you need to provide the right SA App Pool.  Run Get-SPServiceApplicationPool to get a valid list of pools you can use on this command.

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Friday, December 21, 2012 7:49 PM
  • Looks like your service application pool is not "SharePoint Web Services System", which is fine.  But you need to provide the right SA App Pool.  Run Get-SPServiceApplicationPool to get a valid list of pools you can use on this command.

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Now I'm totally confused here because it looks vaild - I'm really starting to feel like an idoit, I'm sorry. Just for kicks, I removed "User Profile Service Application RSH" and added is (both through PS) and I am still getting the same error:

    PS C:\Users\sharepoint> Get-SPServiceApplicationPool

    Name                                     ProcessAccountName
    ----                                     ------------------
    RSH Search Admin Web 1                   YCCHD\sharepoint
    RSH Search App Pool 1                    YCCHD\sharepoint_search
    SecurityTokenServiceApplicationPool      YCCHD\sharepoint
    SharePoint Web Services Default          YCCHD\sharepoint
    SharePoint Web Services System           YCCHD\sharepoint
    User Profile Service Application RSH     YCCHD\sharepoint

    Maybe I should just hang my SP Admin hat up for the holidays :X

    Again, here's the script:

    $upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool "User Profile Service Application RSH" -ProfileDBName "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" -ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa -DefaultProxyGroup

    "New-SPProfileServiceApplication : An invalid application pool was specified.
    At line:1 char:39"


    -Mike

    Friday, December 21, 2012 8:34 PM
  • Try this:

    $pool = Get-SPServiceApplicationPool | where {$_.Name -eq "SharePoint Web Services System"}

    Then run:

    $upa = New-SPProfileServiceApplication -Name "User Profile Service" 
    -ApplicationPool $pool -ProfileDBName 
    "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social 
    RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" -
    ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy 
    -Name "User Profile Service Proxy" -ServiceApplication $upa -
    DefaultProxyGroup


    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    Friday, December 21, 2012 8:36 PM
  • Sooo close!!

    New-SPProfileServiceApplication : Cannot bind parameter because parameter 'Name
    ' is specified more than once. To provide multiple values to parameters that ca
    n accept multiple values, use the array syntax. For example, "-parameter value1
    ,value2,value3".

    So I split the two commands up, and the first one ran fine.

    New-SPProfileServiceApplication runs, the DB's are created, the service status is "Stopping". How long do I need to wait?

    Haven't run the New-SPProfileServiceApplicationProxy script yet.


    -Mike

    Friday, December 21, 2012 8:53 PM
  • Was the service status stopping prior to running the commands?  If so, we should probably get the service completely stopped prior, start it, then run the above.

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    • Marked as answer by star.wars Thursday, December 27, 2012 10:02 AM
    Friday, December 21, 2012 11:13 PM
  • Ok, I took a break from this over the break, but I'm back at it now and need to resolve this issue. At the last post, I was still stuck. Right now when I run Get-SPServiceApplicationPool I get this list:

    Name                                     ProcessAccountName
    ----                                     ----------------
    RSH Search Admin Web 1                   domain\sharepoint
    RSH Search App Pool 1                    domain\sharepoint
    SecurityTokenServiceApplicationPool      domain\sharepoint
    SharePoint Web Services Default          domain\sharepoint
    SharePoint Web Services System           domain\sharepoint
    User Profile Service Application     domain\sharepoint

    Here's a screen print of my service app screen:

    And here's another of my services:

    And when I go to select a service application, I still get a blank/empty drop down, just like before.

    I normally am able to tackle this kind of issue myself, but I'm realyl stumped on this one. Thank much for the help so far...

    Mike


    -Mike

    Friday, January 4, 2013 10:46 PM
  • So when going to New on the Service Application page, nothing appears?

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Saturday, January 5, 2013 8:13 AM
  • So when going to New on the Service Application page, nothing appears?

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.


    No, I can create SA's and all that, but the problem still is that I have nothing to choose from in the drop down when configuring the SA Service. See my orginal first post for the screen shot.

    -Mike

    Monday, January 7, 2013 4:58 PM
  • Can you provide the output of Get-SPServiceApplication | where {$_.TypeName -eq "User Profile Service Application"} | Format-List

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Monday, January 7, 2013 5:15 PM
  • Yes, and there is null output. Because I have removed the SA.

    The screen shot in the original post is from when I had the SA in the system, and it still was not showing up in the drop down.

    So I suppose we have come full circle here...I need to create the SA, and have it show up in the drop down menu in the service config.

    Maybe a second try adding the SA via powershell?


    -Mike

    Monday, January 7, 2013 5:53 PM
  • If you do create the SA via PowerShell, just make sure to run it as the Farm Admin account.  But yes in order to get output from the command you would have to have the SA in place.

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Monday, January 7, 2013 5:54 PM
  • Ok I used the above script you provided earlier to create the SA, and ran the output:

    PS C:\Users\sharepoint> Get-SPServiceApplication | where {$_.TypeName -eq "User
    Profile Service Application"} | Format-List
    MaxSynchronizationRunRetryCount                    : 3
    ContinousSyncRunInterval                           : 0
    FIMWebClientTimeOut                                : 300000
    NoILMUsed                                          : False
    IsUsersOnlyILMImport                               : False
    ActiveDirectoryImportOUFilterExpirationDays        : 7
    ActiveDirectoryImportDefragIncrement               : 5000
    ActiveDirectoryImportDefragThresholdInMilliseconds : 30000
    SkipBDCImport                                      : False
    NetBIOSDomainNamesEnabled                          : False
    IsSynchronizationRunning                           :
    DaysWorthOfActivityFeedsToKeep                     : 14
    ManageLink                                         : Microsoft.SharePoint.Admin
                                                         istration.SPAdministration
                                                         Link
    PropertiesLink                                     : Microsoft.SharePoint.Admin
                                                         istration.SPAdministration
                                                         Link
    ApplicationClassId                                 : e12223eb-f793-4e73-9f5b-3b
                                                         fcc06ed092
    ApplicationVersion                                 : 14.0.6126.5000
    Status                                             : Unprovisioning
    DisplayName                                        : User Profile Service
    TypeName                                           : User Profile Service Appli
                                                         cation
    IisVirtualDirectoryPath                            : SharePoint Web Services\41
                                                         6670c96d9245f0946a6817582e
                                                         2e20
    ApplicationPool                                    : SPIisWebServiceApplication
                                                         Pool Name=SharePoint Web S
                                                         ervices System
    PermissionsLink                                    : Microsoft.SharePoint.Admin
                                                         istration.SPAdministration
                                                         Link
    Endpoints                                          : {http, https}
    DefaultEndpoint                                    : SPIisWebServiceEndpoint Na
                                                         me=http
    Uri                                                : urn:schemas-microsoft-com:
                                                         sharepoint:service:416670c
                                                         96d9245f0946a6817582e2e20#
                                                         authority=urn:uuid:e2ce67c
                                                         700ae410fbc3fa7668753753c&
                                                         authority=https://sharepoi
                                                         ntweb1:32844/Topology/topo
                                                         logy.svc
    Shared                                             : False
    Comments                                           :
    TermsOfServiceUri                                  :
    Service                                            : UserProfileService
    ServiceInstances                                   : {}
    ServiceApplicationProxyGroup                       : SPServiceApplicationProxyG
                                                         roup
    CanUpgrade                                         : True
    IsBackwardsCompatible                              : True
    NeedsUpgradeIncludeChildren                        : False
    NeedsUpgrade                                       : False
    UpgradeContext                                     : Microsoft.SharePoint.Upgra
                                                         de.SPUpgradeContext
    Name                                               : User Profile Service
    Id                                                 : 416670c9-6d92-45f0-946a-68
                                                         17582e2e20
    Parent                                             : UserProfileService
    Version                                            : 315851
    Properties                                         : {Microsoft.Office.Server.U
                                                         tilities.SPPartitionOption
                                                         s}
    Farm                                               : SPFarm Name=SharePoint_Con
                                                         fig
    UpgradedPersistedProperties                        : {}


    -Mike

    Monday, January 7, 2013 6:34 PM
  • That SA is unprovisioned.  Can you run the following:

    $sa = Get-SPServiceApplication | where {$_.DisplayName -eq "User Profile Service"}
    $sa.Status = "Online"
    $sa.Update()



    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Monday, January 7, 2013 11:08 PM
  • Well man! That was easy...it showed up in the list, hoorah!

    Cycled IIS...now the SA is started - the service is not. When I go to start the service, type the password for the account, I get "An unexpected error has occurred. "

    Progress!

    Guess I need to check log files etc., huh?


    -Mike

    Monday, January 7, 2013 11:25 PM
  • Yes, check the log files (do a Merge-SPLogFile if >1 server is in the farm) and post back here.

    SharePoint - Nauplius Applications
    Microsoft SharePoint Server MVP
    MCITP: SharePoint Administrator 2010

    -----------------------
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Monday, January 7, 2013 11:35 PM
  • I can honestly say I have never had as hard of a time using any system. BMC, Cerner, etc. have never given me as many hassles as SharePoint 2010. [/vent] I realize, most of my probelms are most likely self induced, but man, I wish this install would give me a break.

    With that said, SP seems to be working well for us as an organization. Worked on this for a bit yesterday - My timer job page was giving errors.  Turns out I had some one-time UPS timer jobs with erronious datetimes (01/01/0001...), probably from attemping to get the SA and service running. After removing them from the system via PS, I could load the page.

    Now, on to trying to merge the logs, I am getting errors. I am logged in as the Farm account (mydomain/sharepoint) and I have SP Powershell v2.0 (running as administrator) and I am running this script:

    Merge-SPLogFile -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1/23/2013 08:00" -EndTime "1/23/2013 09:00"

    It fails, and I get this error output:

    PS C:\Users\sharepoint> Merge-SPLogFile -path "C:\SPlogs\mergelog.log" -overwri
    e -StartTime "1/23/2013 08:00" -EndTime "1/23/2013 09:00"
    WARNING: Unable to start job CollectLogFiles_SHAREPOINTWEB1_147590968 on server
    SHAREPOINTWEB1.
    Merge-SPLogFile : The pipeline has been stopped.
    At line:1 char:16
    + Merge-SPLogFile <<<<  -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1
    /23/2013 08:00" -EndTime "1/23/2013 09:00"
        + CategoryInfo          : InvalidData: (Microsoft.Share...letMergeLogFile:
       SPCmdletMergeLogFile) [Merge-SPLogFile], PipelineStoppedException
        + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletMergeLog
       File
    Merge-SPLogFile : None of the collecting jobs finished successfully.
    At line:1 char:16
    + Merge-SPLogFile <<<<  -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1
    /23/2013 08:00" -EndTime "1/23/2013 09:00"
        + CategoryInfo          : OperationStopped: (:) [Merge-SPLogFile], SPExcep
       tion
        + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletMergeLog
       File

    Any pointers here? I'd love to post up my log file so we can get this UPS issue fixed.
    • Edited by Mikewire MCP Wednesday, January 23, 2013 7:09 PM
    Wednesday, January 23, 2013 7:08 PM
  • I only have one WFE, and one DB server. I bet that's the issue.

    What can I pull out of the log file that would be helpful? A specific process, category, area or event ID?


    -Mike

    Wednesday, January 23, 2013 8:36 PM
  • I am getting the same error running Merge-SPLogFile -Path "z:\Prod_ULS_Unexpected.log" -Overwrite -Level Unexpected

    Have you found a resolution on this issue yet? I have a 6 server farm (2WFE/4APP). Funny thing is that it runs fine in our identical test environment. I have tried to set powershell to unrestricted but that didnt help.

    Monday, November 18, 2013 6:50 PM
  • Even though I get that error the merge-splog seems to return results...
    Monday, November 18, 2013 6:56 PM
  • I only have one WFE, and one DB server. I bet that's the issue.

    What can I pull out of the log file that would be helpful? A specific process, category, area or event ID?


    -Mike


    If you only have a single SharePoint server, just grab the log file.  You can filter it with the ulsviewer.

    Trevor Seward, MCC

    Follow or contact me at...
      

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Monday, November 18, 2013 7:15 PM