SharePoint User Group UK

Hi,,

Really hope you can help with this one.

I have a Moss 2007 installation with two webapps - portal and mysites. I am trying to make these webapps available externally through ISA Server 2006.

First question - is this possible with only one rule and one external URL? I can't work out how, using a combination of AAMs and ISA rule config I can properly translate links between the mysites and portal webapps.

My second question, obviously, would be how?!

Hope someone can help.

Why are you trying to limit yourself to 1 rule for portal & mysites?

We've done this with multiple rules.

Thanks for your reply!

I'm not trying to limit myself, I'd assumed, probably wrongly, that one rule might be the way to do it.

I've currently got 3 rules defined to publish the 2 webapps and it works on the surface but I can't help feeling that it's probably a bit shaky.

I've made it up as I've gone along, giving the Mysites rule higher priority and telling it to watch out for _layouts and a couple of other strings in the URL, while the lower priority rule for the portal webapp grabs everything else.

Am I on the right lines?

I'm not an expert in ISA Server at all, but i'd suggest you use the wizards to setup your rules.

We've used subdomains/ip addresses to split the portal and mysites, which are then directed to the appropriate server/port.

So:

portal.demo.co.uk -> dev:701

mysite.demo.co.uk -> dev:702

Thus the order of these rules is not important, as they are quite different.

We use different listeners for internal/external, so we use 4 rules for this.

Thanks for that.

I think that where I've really been limiting myself is by using only one external URL / DNS entry. So I've been trying to redirect requests to two different webapps coming in on only one URL, only using bits of the URL as identifying information. Maybe if I create a new external DNS entry and URL I'll be able to direct requests in a more robust manner.

Thanks again.

Hi,

Thanks for your help so far.

I'm currently testing this. I've got 2 external urls - portal.me.com and mysites.me.com. I've got two ISA rules, one for each, and I've got the two corresponding webapps in the background with AAM configured in Sharepoint.

The problem I have now is although the links on MOSS sites work, authenticating against the portal webapp doesn't authenticate against the mysites one. So my users come to portal.me.com, log in through ISA (LDAPS) and are in the portal. However, when they click on 'My Site' they get an ISA login screen again. If they log in they are taken to their mysite (although it briefly tries to recereate their site).

Is there any way for me to configure it so that there's only one authentication required and these details are passed between both rules?

I'm a little bit confused what authentication method you're using.

If you're using HTML Forms, you can fill in the SSO tab of the listener, so if you've authenticated initially on

portal.me.com it will be used for any *.me.com subdomain.

For integrated authentication, it should authenticate you on on the IIS side, so you shouldn't be prompted to login ever.

I hope that helps.

 

Thanks again!

I'd actually confused ISA SSO with MOSS SSO (which we don't use) and therefore completely ignored the SSO settings in ISA.

That's resolved it.

No problem, glad I was of some help.

OK then just one more question!

My two webapps are working flawlessly when independent of each other. However, with user profile pictures on discussion forums I'm having a little problem.

The pictures don't display - I get a little 'picture not found' placeholder - white box, red cross in top left corner.

I can see why - when I view the path to those pictures on our local network, independent of ISA, I can see that the URL of those pictures starts with the URL of my mysites webapp.

However, when I check the link on the same page coming in through ISA, the URL points to our portal webapp. However, if I click on the image or the name link underneath it, I am redirected to the mysites URL.

I think I have AAMs set up correctly - is there anything else I need to do in the rules to make the pictures appear?

Obviously I'm down to minor details now...

Is that the standard discussion forums?

In your first example are you accessing it from your webapp or mysite?

To be honest i'm confused as to what's happening.

You might need to modify your mysite settings, in your SSP, or possibly change ISA Server.

The easiest way to check is get everything working correctly without ISA Server, and then you can focus on ISA Server afterwards. (As it should work correctly without ISA Server, using AAM's and configuration)

Everything works fine internally. Everything displayed where it should be displayed.

Coming in from external through the ISA Server 99% of content is displayed correctly and all links work.

Viewing users' contributions (from external through ISA) in a forum thread, their pictures do not appear alongside their posts - I just get an empty image placeholder. They do appear when I view them internally.

If I right click the placeholder and view the URL for the missing picture I notice that AAMs have not kicked in, and the URL  is the internal mysites one. So instead of https://mysitesapp.mycompany.co.uk I get http://mysites - the internal URL. If I left click on the image holder to follow the link, I am taken correctly to that user's profile page.

AAM works correctly for every other link throughout the whole site - the my site link, links to people etc.

Just, for some reason, doesn't translate user pictures.