sharepoint2010 sharepoint管理中心连接到fast失败处理

Unable to connect to a shared service application (Remote/Published SA) 

• Hello,

  We installed 2 SPS2010 farms annd are trying to connect a published service application to the other farm but we aren't able to make it work.

  - We published the Managed Metadata, Secure Store and User Profile Service Applications.
  - We exchanged the certificates correctly. (Both farms have the root and sts certificates just to be sure).
  - Windows Firewalls have been deactivated.
  - We gave all users full control permissions on the shared SA.

  Each time we try to connect a remote service, we get this basic error message : "Unable to connect to the specified address. Verify the URL you entered and contact the service administrator for more details. "

  The ULS logs says : "

  An exception occurred when calling SPTopologyWebServiceApplicationProxy.EnumerateSharedServiceApplications on servicehttps://SERVERNAME:32844/Topology/topology.svc : System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied.

  "
  See detailed error below.

  We tried analyzing with Process Monitor but there's no access denied on any folder or file. Network sniffing didn't gave us any clue neither.

  Here's the architecture :
  - Windows Server 2008 R2 Enterprise (all servers)
  - An SQL 2008 server (the 2 instances are on the same box)
  - SPS2010 RTM
  
  ULS ERROR :
  An exception occurred when calling SPTopologyWebServiceApplicationProxy.EnumerateSharedServiceApplications on servicehttps://SERVERNAME:32844/Topology/topology.svc : System.ServiceModel.Security.SecurityAccessDeniedException: Access is denied. Server stack trace: 
  at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter) 
  at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc) 
  at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) 
  at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) 
  at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) Exception rethrown
  at [0]: 
  at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) 
  at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) 
  at Microsoft.SharePoint.ITopologyWebServiceApplication.EnumerateSharedServiceApplications() 
  at Microsoft.SharePoint.SPTopologyWebServiceApplicationProxy.EnumerateSharedServiceApplications(Uri endpointAddress, SPServiceLoadBalancerContext 
  loadBalancerContext)
  

  • Reply 
  • Quote

All Replies

• Sunday, May 02, 2010 11:06 PM

  Spencer Harbar [MCA, MCSM]

  (MVP)

  2,586 Points

   
  

  2

  the consuming farm does not have rights to speak to the publishing farm's topology service.

   

  On the consumer farm, run the following command to get the id of the consumer farm:

  (Get-SPFarm).Id

  Copy the Id output from this command, and run the following command on the publisher farm:

  $security = Get-SPTopologyServiceApplication | Get-SPServiceApplicationSecurity

  $claimProvider = (Get-SPClaimProvider System).ClaimProvider

  $principal = New-SPClaimsPrincipal -ClaimType "http://schemas.microsoft.com/sharepoint/2009/08/claims/farmid" -ClaimProvider $claimProvider -ClaimValue <farmid from previous command>

  Grant-SPObjectSecurity -Identity $security -Principal $principal -Rights "Full Control"

  Get-SPTopologyServiceApplication | Set-SPServiceApplicationSecurity -ObjectSecurity $security 

  ---

  Cheers
  Spence
  www.harbar.net
  Microsoft Certified Master | SharePoint 2007

  • Marked As Answer by Wesley De Arburn Monday, May 03, 2010 12:53 AM
  •  
  • Reply 
  • Quote