Hi All,
We have a new web front (WFE_New) end server a month ago and everything looks fine. Used reported for that groups and other users is not resolving where existing Web end server users area able to service resolve without any issue.
In the new WFE server, we checked the SharePoint ULS logs and found these errors:
-------------------------------------------------------------------------------------------------------------------------------------
09/16/2015 15:24:41.84 w3wp.exe (0x1BD8) 0x18A8 SharePoint Foundation General
72e7 Medium Error in searching user '<USER>' : System.DirectoryServices.DirectoryServicesCOMException
(0x8007203B): A local error has occurred.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean
throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_AdsObject() at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne) at Microsoft.SharePoint.WebControls.PeopleEditor.SearchFromGC(SPActiveDirectoryDomain
domain, String strFilter, String[] rgstrProp, Int32 nTimeout, Int32 nSizeLimit, SPUserCollection spUsers, ArrayList& rgResults)
at Microsoft.SharePoint.Utilities.SPUserUtility.SearchAgainstAD(String
input, Boolean useUpnInResolve, SPActiveDirectoryDomain domainController, SPPrincipalType scopes, SPUserCollection usersContainer, Int32 maxCount, String customQuery, String customFilter, TimeSpan searchTimeout, Boolean& reachMaxCount)
at Microsoft.SharePoint.Utilities.SPActiveDirectoryPrincipalResolver.SearchPrincipals(String
input, SPPrincipalType scopes, SPPrincipalSource sources, SPUserCollection usersContainer, Int32 maxCount, Boolean& reachMaxCount)
at Microsoft.SharePoint.Utilities.SPUtility.SearchPrincipalFromResolvers(List`1
resolvers, String input, SPPrincipalType scopes, SPPrincipalSource sources, SPUserCollection usersContainer, Int32 maxCount, Boolean& reachMaxCount, Dictionary`2 usersDict).
72732e9d-4c74-20ef-c7e7-bb2d12f20599
--------------------------------------------------------------------------------------------------------------------
We checked the Trevor
Seward’s blog where mentions to have selective Authentication, for two way authentication. In our environment, we have only one domain.
Troubleshooting steps we performed
- We also
checked the Joel’s
blog and tested the following PowerShell for existing and new WFEs server:
$site = get-spsite <Web Application URL>
$site.UserAccountDirectoryPath
Both did not show any value.
- Checked
all he Ports for LDAP (port 389), LDAPS (port 636), Kerberos (port 88), NETBIOS-ssn (port 139) and Microsoft-DS (port 445). At the both the existing WFE and New WFE LDAP ports are opened.
- Checked
the Microsoft
Article about people picker and checked relevant stsadm commands but did not run the any success.
- We noticed
a very strange behaviour on this new WFE. Once try to add a user and type the first name and clicked on Share button, we get the following message:
Multiple entries matched, please click to resolve
![]()
After clicking on the SharePoint and click on name of the user, we areable
to resolve his/her name as shown below:
![]()
We don’t know, if it’s an AD issue or networking issue. But ports are opened for new WFE server,
Any help would greatly appreciated.
Sandy