Resolving resource access errors in FAST Search Server 2010

Symptom

Various FAST Search components fail to access the ResourceStore, logging errors of this sort:

Failed to communicate with the WCF service

Error: resourcestore error: Microsoft.SharePoint.Search.Extended.Administration.Common.AdminException: Could not verify resource existence.

ProcessorDeploymentException: For pipeline 'Office14 (webcluster)', creating processor CompanyExtractorInclusionAny failed: ConfigurationError: CompanyExtractorInclusionAny: Failed to access or parse configuration file 'etc/resources/matching/configuration.companyextractor.inclusion.any.xml'.

Connected to ResourceStore stderr: Could not list resources.. The remote server returned an error: (401) Unauthorized.

Cause

This is an indication that the ResourceStore hosted in IIS on the FAST Search administration server cannot be accessed succesfully.

Resolution

The ResourceStore and FASTSearchAdminPool should exist in IIS - if either does not, FAST Search must be reinstalled. If they do exist, the FAST Search Software Requirements should be reviewed, and direct (without a proxy) network communication should be verified by logging into the ResourceStore as the FAST Search service user at http://fastadmin.local.domain:13255/. If the documented requirements are already met, the issue is commonly a consequence of Kerberos authentication failing. The following steps can be taken to enable successful authentication.

Set the IIS useAppPoolCredentials value to True on the FAST Search administration server
  1. Open an elevated command prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Navigate to %windir%\system32\inetsrv.
  3. Type appcmd.exe set config -section:system.webServer/security/authentication/windowsAuthentication -useAppPoolCredentials:true.
Set the Service Principal Names (SPN) value for the FAST Search service account
  1. Open an elevated command prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type setspn -a HTTP/<ServerName> <ServiceAccountDomain>\<ServiceAccount>, where <ServerName> is the name of the server, <ServiceAccountDomain> is the name of the domain containing the FAST Search service account, and <ServiceAccount> is the name of the FAST Search service account.
  3. Type setspn -a HTTP/<ServerFQDN> <ServiceAccountDomain>\<ServiceAccount>, where <ServerFQDN> is the fully qualified domain name (FQDN) of the server.

More Information

Instead of enabling application pool credentials for IIS, Kernel-mode authentication for the ResourceStore site can be disabled in IIS Manager. Additionally, it is also possible that the FASTSearchAdminAppPool is not running or that the ResourceStore site is stopped; they can be started if that is the case.
Rekvizīti

Raksta ID: 2533978. Pēdējo reizi pārskatīts: 2012. gada 28. apr.. Pārskatījums: 1

Atsauksmes