wehuberconsultingllc.com

I installed Services for Unix a little while ago and things have been somewhat okay. My server locked up once or twice but I blamed those shutdowns on myself even though I could not see that I did anything wrong. Today I tried to scan a document into CorelDraw that I have on my server. I use CorelDraw infrequently and this has worked for me in the past on W2K and now on W2K3. Today the server locked up. I rebooted and tried again. It locked up. Now I am pissed off! After some research and a few more reboots I finally located the culprit, nissvc, or otherwise known as Server for NIS. Task Manager showed it was consuming 30% to 100% of the cpu. I tried changing the settings back to the default settings but I could not seem to get rid of the problem. So I shut it down. Actually I shut down Server for NIS, Server for NFS, and the rest of servers in Services for Unix console. I don’t use any of them except sftp and it is not listed.

I added two MSNBC webparts, weather & news, to the intranet site. We were running out of water in our cistern and rain has been forecast for the last couple of days. I typically check the weather at least once a day so this will save me some clicks. While I was at it I added the news webpart and a page viewer webpart for the Google search. My first choice for the Google search was the form webpart but I couldn’t get it to work.

“This article describes how to specify the icon that Microsoft Windows SharePoint Services uses to represent Adobe Portable Document Format (PDF) documents that are stored in document libraries.“

I couldn’t get the sqlagent for sharepoint to run so I went searching for the answer again. This time I am writing it down, http://www.dbforums.com/t768589.html. Delete the guid and it is happy.

SBS creates a group called Power Users. The default SBS installation puts all users into this group. I could not log in to ssh with a normal userid but I could log in with the Administrator userid. I finally found that power users were denied “local log in” in the default Domain controllers policy.

I installed Services for Unix 3.5 today. The idea is to use authenticate my Redhat box against the Active Directory. I spent most of the time downloading and testing the tools from http://www.interopsystems.com/tools/. Those nice folks have ported over a nice set of open source tools. I downloaded Bash and ssh. I was very pleased to find they had ported over ssh and even more pleased to find that it works. I have been reading the ssh mailing list for almost a year so I have seen a lot of problems with the cygwin version of ssh on 2003. I believe I have NIS set up correctly on the server but I won’t get around to setting up the Redhat box until tomorrow.

Today I found Sig Weber’s Playground and his xslt files for reading and formating a RSS feed using a XML webpart. This is pretty simple stuff except for the XSLT stuff and is equivalent to Leadit’s version. I prefer the format of Leadit’s version but would prefer to have ability to customize the feed display with xslt. Hmm…

I decided to write a description of my firewall policy today. I have been tweaking it again to get the RSS Reader webpart to work. I think if I write it out I will better be able to see any logic errors.

General Firewall Policy Description

1. Allow computers in the local domain complete access to other computers in the local domain.
2. Deny inbound access from the internet.
3. Allow computers in the local domain anonymous outbound access to the internet with the following protocols:
   1. HTTP
   2. HTTPS
   3. FTP
   4. POP3
   5. SMTP
   6. NTP(UDP)
4. Windows integrated authentication for IP protocols other than the ones listed above.
5. Minimize the downloading of advertising and sexual content.

Rules and Implementation

1. Direct Access Rule – Direct access to computers in the local domain is granted via the proxy client configuration for the web browser.
2. Default Inbound Access Rule – Inbound access from the Internet is denied by the ISA firewall by default.
3. Protocol rule #1 – If the client is from the local domain, anonymous outbound access is granted to the Internet for the normal protocol set, HTTP, HTTPS, FTP, POP3, SMTP, and NTP. Almost all internet access will go through this rule.
4. Protocol rule #2 – If a client requires access to an IP protocol outside of the normal protocol set, that client must be authenticated using windows integrated authentication.
5. Site and content rule #1 – Deny content from known advertising websites listed in the “No Ads” destination set and redirect the link to a local web page. This rule increases bandwidth by reducing the amount of unnecessary content being downloaded from the internet.
6. Site and content rule #2 – Deny content from known sexual websites listed in the “No Sex” destination set and redirect the link to a local policy web page.
7. Site and content rule #3 – Allow clients from the local domain access to all domains that have not been explicitly denied.
8. Do not authenticate outbound listener. I think this is a temporary fix to get the RSS reader webpart to work and requires that the web.config have a statement. This is opposite of what the folks at www.isaserver.org recommend but their recommendation does not work for my server. All http connections end up being anonymous but I don’t care.

I got an email from Jan asking me to comment on his Essentials webparts on his weblog. I really like them because they show what I have been working on. I set up a quick and dirty homepage to use them as a simple status report. I used a default template and just dropped the Navigation webpart, the Whats New webpart, and the RSSReader webpart on to the left side. Simple but satisfying!

Since I had recently reinstalled Sharepoint to fix an unrelated problem, I had to reinstall the webparts. So I made sure I had the latest versions and started off with the RSSReader. It looked easy. It had an installer! The bad news is that it finishs with an error.

========= WPPackager install log started 3/26/2004 11:18:39 AM =========
3/26/2004 11:18:58 AM: Error: Config file: ‘d:inetpubwwwrootweb.config’ for virtual server ‘http://companyweb/’ is missing or appears invalid. Could not apply required CAS settings to this server.
3/26/2004 11:18:58 AM: Error: Could not apply required CAS settings to virtual server ‘http://companyweb/’ during installation of ‘Lead-it SharePoint RSSReader Webpart’
3/26/2004 11:18:59 AM: Success: Installation Successfully Completed

The good news is that the error does not matter!? The dll is in the GAC. The web.config is configured. The webpart is in the wpcatalog. Once you figure out how to configure your firewall you are set. That was actually quite hard. I decided to put my findings in a second post on my weblog since it is specific to ISA.

The installation of Essentials was quite easy if you knew the locations of your wpcatalog, web.config, and GAC. I found that I only needed to restart the sharepoint server to start using them.

Today I finally got Sharepoint installed and working. Here was the plan.

1. Stop the Sharepoint database with NET STOP mssql$sharepoint.
2. From the Add or Remove Programs, remove Sharepoint.
3. From the Add or Remove Programs, remove the MSDE instance of sharepoint.
4. Reboot.
5. Install a new instance of SQL Server called SHAREPOINT using the Premium cdrom. When it asks, change the default disk location. Ignore warning message about SQL and Windows 2003.
6. Apply SQL Service Pack 3a to the new instance.
7. Start the database.
8. Run STSV2 and pick the server farm option. It tells you that you will have to manually extend the site after the installation completes. I got an error at the end complaining about FrontPage extensions on the default server.
9. Go into Sharepoint Central Administration and extend the companyweb site. I used the DefaultAppPool with Network Service.
10. Pick a site template.

I verified my installation by saving a document into Sharepoint and then bringing it back up. It knew who I was and did not ask me for a logon.

I finally gave up on trying to tweak Sharepoint to work and starting the process of re-installing. Guess what! The reinstall fails. It doesn’t create the two databases. Maybe I am missing something? So I have downloaded STSV2. I think I will try to stuff it directly into a new SQL Server instance rather than go through MSDE first. I want to put the sharepoint databases on a seperate partition.

Along the way I downloaded the web version of SQL Enterprise manager. To get it to not ask me for my userid I had to give NETWORK SERVICE full access to the Microsoft.NetFrameworkv1.1.4322 directory. I was trying to view my MSDE instances. It didn’t help. My problem was that I was’entering the server name incorrectly.

I modified my Sharepoint intranet site to use a couple of webparts from Leadit.SharePoint.Essentials. Jan Tielens did a nice job on everything except the instructions on how to install it. I think the Whatsnew and Navigation webparts on my main page are really handy. My intranet site is getting a little more useful than the ordinary file system it replaces.