none
SP2016, Office Online Server Multi-Server Farm(OOS) and SSAS

    Question

  • Hi Team,

    Greetings...!!!!

    I have been reading quite a lot but still have few doubts to clear:

    1) I have to setup a OOS multi-server farm, my SharePoint web application is over HTTP. Can't I have a OOS farm over HTTP? 

    If yes, then how?

    2) How to add the OOS to SSAS instance?

    For example Let us consider that my Analysis instance is SQLDB2016\SHAREPOINT and  my load balanced url for OOS is http://oos.abc.sg.com, my machines are OOS1 and OOS2. We all know that the farm is configured using the Network Services so that we could add the machine to SSAS source as administrators. 

    a. Do I have need to add both OOS1 and OOS2 to SSAS source while adding to above Analysis instance? 

    b. Would my virtual load balanced URL be available in under Location-> objects -> Computers while adding to above Analysis instance?

    3) Also, how about delegation to SQL and SharePoint web application SPN, do I have to use the machines names OOS1 and OOS2?

    Wednesday, March 15, 2017 11:05 AM

All replies

  • Hi Sambhav,

    #1. No, if you configure load balancer for Office Online Server farm, then you need to enable SSL offloading. So OOS farm needs to configured over HTTPS.

    #2. a) It is needed to add both OOS1 and OOS2 to SSAS as both servers need to communicate with SSAS.

       b) I have not tested this, but I think it may not be available.

    #3. Yes. You need to delegate permissions for both OOS1 and OOS2.

    Best Regards,

    Victoria

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Saturday, March 18, 2017 7:09 AM
    Moderator
  • Hi,

    Is SSL offloading must?

    Thanks,

    Manoj Verma.

    Tuesday, March 21, 2017 4:23 AM
  • You shouldn't be using SSL offloading nor HTTP. Both present a significant security risk. When using OOS (or Workflow Manager, Exchange integration, and SharePoint Apps), an OAuth token is sent between SharePoint and the service (OOS in your case) on behalf of the user. This token is functionality a username and password. This should *never* be sent in the clear (e.g. HTTP). Always use SSL. Internal SSL certificates will work, along with public certificates.

    For KCD, yes you must use the machine names (OOS1$ and OOS2$, as an example).


    Trevor Seward

    Office Servers and Services MVP



    Author, Deploying SharePoint 2016

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Tuesday, March 21, 2017 4:51 AM
    Moderator
  • Hi Seward,

    Greetings..!!!

    We have both OOS farm and SP2016 farm running internally. My only worry was around use of https as to whether it is necessary to use SSL while load balancing OOS servers within the farm?

    Is, http is not allowed when we load balance OOS servers within a farm?

    note: Security is not a problem as setup is behind the firewalls.

    Thanks,

    Manoj Verma.

    Tuesday, March 21, 2017 7:33 AM
  • Hi ,

    Greetings..!!!

    We have both OOS farm and SP2016 farm running internally. My only worry was around use of https as to whether it is necessary to use SSL while load balancing OOS servers within the farm?

    Is, http is not allowed when we load balance OOS servers within a farm?

    note: Security is not a problem as setup is behind the firewalls.

    Thanks,

    Manoj Verma.

    Tuesday, March 21, 2017 7:34 AM
  • yes, need to use https when load balancing OOS server.

    14 hours 56 minutes ago
  • need to use https when load balancing OOS server I think.
    14 hours 54 minutes ago
  • You don't _have_ to, but it is really inadvisable. The 'it's only internal' used to fly back in the 1990s, but given most attacks occur against a network from the *inside*, it is extremely unwise to use any non-secure transports, anywhere.

    Trevor Seward

    Office Servers and Services MVP



    Author, Deploying SharePoint 2016

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    14 hours 53 minutes ago
    Moderator