Forum Discussion

BigPhil's avatar
BigPhil
Level 5
13 years ago

Enterprise Vault Mobile Search 10 - Impersonation Issue

Ok, I am once again working on trying to get Mobile Search 10 to work (gave up last time). I have done a fresh install on Windows 2008 R2 SP1, Windows 2003 SP2...same result with both..."Access Denied". It appears that the application is not properly passing the impersonation settings to the backend Enterprise Vault server. My question is this...does ANYBODY have EV10 and EV Mobile Search 10 working? I have a case open, but I have a strong feeling there is a bug in it. If you have EV 10, but no mobile search, can you try installing it and see if you can get it working?...takes about 10 minutes in all if you have to install IIS too. I have been installing it with "Basic Authentication" (Blackberry mode during setup...you'll see what I mean).

Symantec Case # 416-559-498

Enterprise Vault
Error messages
Information Governance
Installing
MS Exchange
Troubleshooting
Windows
  • BigPhil's avatar
    BigPhil
    Level 5
    13 years ago

    Yes. The install is by the book and I have verified all settings tons of times. I simply want to know if anybody else has this working on EV 10. 

  • JesusWept3's avatar
    JesusWept3
    Level 6
    13 years ago
    I haven't used it and don't know of anyone else that's used it either to be honest I was just asking just due to the fact with IIS 7.5 a lot of people don't know that things like impersonation can be toggled on and off or such Personally if it were me I'd bust out AuthDiag and get traces of AuthServer and possibly some procmons too
  • BigPhil's avatar
    BigPhil
    Level 5
    13 years ago

    No worries at all. When installing Mobile Search, it installs as a web application and sets everything properly anyways (<identity impersonate="true"/>). I have verified all settings through GUI as well as web.config...its all perfect. I can already see exactly what it is doing as it does log an error on the backend EV server, so I KNOW it is not properly passing the authenticated users credentials. Mobile Search always worked perfectly for me when on EV 9.0.x.

  • JesusWept3's avatar
    JesusWept3
    Level 6
    13 years ago
    Just as a matter of interest, what user is it trying to use when it authenticates?
  • BigPhil's avatar
    BigPhil
    Level 5
    13 years ago

    The machine account. By default, when you install mobile search, it sets the application pool identity to "Local System", and that account cannot request network resources. Its like it doesnt care what is set and is trying to use the "Network Service" account.

  • JesusWept3's avatar
    JesusWept3
    Level 6
    13 years ago
    Network service makes sense as that is what asp.net runs under I'll see if I can get a lab together quickly and try and repro it Just for repro purposes, it fails internally as well right? Or is it external only etc?
  • BigPhil's avatar
    BigPhil
    Level 5
    13 years ago
    The web app will run under whatever the application pool identity is set to, not just network service. But...problem is both internal and external. Thanks for the Help JW!
  • JesusWept3's avatar
    JesusWept3
    Level 6
    13 years ago

    but thats what i'm trying to say, the application pool doesn't matter in terms of what NET Framework runs under, it will always run under the network service account, so for instance if you run the app pool under the domain admin account, and then remove the NETWORK SYSTEM from having rights to the Temporary ASP Net folders on NTFS, you would find the aspx pages would fail to compile etc

     

    but anywho, will let you know at least if i can reproduce...last question :)
    i should be able to repro just using IE right? or do i need to use a BB simulator?