Skip to main content

From The Field

Go Search
From The Field
  

From The Field > Categories
SSP Admin Site Strangeness!

I recently came across a weird issue, a customer had built a farm using MOSS 2007 Standard Edition but for some reason their SSP Administration Site included links for both Excel Services and the Business Data Catalog. These shouldn’t be present with the Standard Edition as they are features of the Enterprise Edition of MOSS 2007.

The next step was to check each server within the farm to verify which version of MOSS 2007 had been installed.

The easiest way to do this is to look within the registry – HKLM\SOFTWARE\Microsoft\Office Server\12.0\

The registry key OfficeServerPremium indicates the version of MOSS 2007 installed, a 0 indicates Standard Edition and a 1 indicates Enterprise Edition.

I managed to find a server within the farm where this key was a 1; this was the culprit of the problem. The server had been mistakenly built with an Enterprise Edition key L

The next step I would recommend would be to tear down the farm and rebuild from scratch just to make sure that each and every server is Standard Edition and there are no references to the Enterprise Edition anywhere, simply removing the server(s) that have the Enterprise Edition installed doesn’t remove the links to Excel and BDC from the SSP admin site.

Now in this case we were working with a development farm that is to be rebuilt in the short term anyway so we had the ability to have a play around, we removed the Enterprise server from the farm, rebuilt as Standard and then re-added to the farm.

What I did find is that the following features are responsible for adding the BDC and Excel links to the SSP admin site(s)

·         BDCAdminUILinks

·         ExcelServer

By simply deactivating these features the links are removed from the SSP admin site(s). NOTE – THIS SHOULD NOT BE DONE IN A PRODUCTION ENVIRONMENT

The following commands can be used to achieve this

·         stsadm -o deactivatefeature -filename bdcadminuilinks\feature.xml

·         stsadm -o deactivatefeature -filename excelserver\feature.xml

In a production environment I would recommend a rebuild of the farm rather than manually removing the links by deactivating the features.

Crawler Impact Rules - What not to do
In a recent engagement I was asked to troubleshoot an indexing problem for a customer. Essentially the SharePoint indexer despite running on 64bit with 12GB ram and having real fast network links to the Database and remote File Shares was crawling very slowly.
 
So this first thing I did was take a look at these performance counters to assess the state of play:
 
 
Perf Counters
 
What was obvious from this was that the Documents Filtered rate was extremely low at an average of 2 per second. Moss Indexer at full throttle should be indexing considerably faster than this, 80 docs per second is not uncommon in well performing systems.
 
What was also apparent was that the Threads Accessing Network was a similar figure to the Filtering Threads total. This is indicative of threads waiting on response from the data source.
 
So where to go from here?
 
The thread count was so high in these counters that I wanted to see what 'tuning' had been applied to the Indexer. Two places to check.
 
  1. The SSP Search Settings on the Indexer for the Indexer Performance Setting.
  2. Any Crawler Impact Rules that may have been set

In this case the Indexer Performance Level was set to Maximum which is fine with a dedicated Indexing Server.

When Checking the Crawler Impact Rules though I discovered a whole world of problems.

Crawler Impact Rules

What I found here was over twenty crawler impact rules had been configured for the search service but each one had been setup to use the maximum number of requests for the crawl - Sixty Four.
 
Best Practice and Technet provide guidance for crawler impact rules as follows.
 
For crawling internal content in your organization, you can set crawler impact rules based on the performance and capacity of the crawled servers. For example, you might try to avoid crawling internal servers at peak load times. However, for crawling external sites, this kind of coordination is usually not feasible. Therefore, it is best to configure crawl requests to minimize consumption of external site resources and bandwidth so that external site administrators are less inclined to restrict your future access.
During initial deployment, set your crawler impact rules to minimize impact on crawled servers while crawling them frequently enough to ensure relatively fresh results. Later, during the operations phase, you can adjust crawler impact rules based on your experience and the data from your crawl logs.
With many impact rules and all set to sixty four the target servers were simply overwhelmed with requests resulting in a major bottleneck in the search service and reduced performance as we have seen.
 
Testing the search service by reducing the crawler impact rule maximum requests to the default of eight resulted in immediate improvements in the document filtered rate to around thirty documents per second and the threads accessing the network : total filtering threads ratio improved enormously.
 
This was by no means the end of the story and the next task involved a lot of trial and error to determine the optimum configuration for the impact rules (or deleting them entirely).
 
The moral of this tale though is to get the message out about what Crawler Impact Rules are all about. They are not there to squeeze more output from the search engine, they are there to reduce the impact the crawler has on the sources being crawled. There is almost never a reason to increase this number beyond the default and in many cases, such as this one, reducing the number actually improves performance.
SSP Deletion Mayhem
Problem
My customer had one shared service provider (SSP) and deleted the site collection associated with it from here:
 
Central administration > Application management > Delete Site Collection
 
They tried to recreate the SSP form here:
 
Central Administration > Application Mangement > Create or configure this farms shared services
 
Then they clicked New SSP.  On the New Shared Services Provider page, they used the same name as the original SSP, clicked ok and got this message:
 
SSP name is not unique; enter a different name (if you are reusing the name of a deleted SSP, check the Status of running timer jobs page to ensure the deletion has complete)
 
Thats when they mailed me.
 
Solution
I was asked how to delete a timer job because the customer thought that the SSP delete hadn't finished.  I started looking into it but it was a red herring.
 
Took me a little while to realise that wasn't the problem.  You have to delete the SSP from the Manage This Farms Shared Services page.  If you delete the site collection the SSP still exists but you can't open SSP admin. 
 
Plus you can't delete the default SSP.  Try right clicking it.  The delete is greyed out.  You have to create a new SSP and move all the web apps over to it using the Change Associations buttons.  The you have to make the new SSP the default with the Change Default SSP button.
 
Yeah, I know this one is easy when you know how, but it took me longer than it should have done, so I thought it was worth a post. 
 
If I can save you 30 minutes here and there then my job is done.
The Port Dilemma

Question
Which port can I run the Central Administration and Shared Service Provider (SSP) web applications on and what does Microsoft recommend?

Advice
If you run your Central Admin and SSP web apps on port 80 it is supported by Microsoft.  

But

There are some pages in Central and SSP admin where you have to enter usernames and passwords, like the Configure Profile Import page, you will see this message:

Configure Profile Import

It means what it says.  Your enemies could discover your passwords if they are flying round the network as clear text.  So it's better practise to run on port 443 using SSL. 

 Error

Web Part Error: A Web Part or Web Form Control on this Page cannot be displayed or imported. The type could not be found or it is not registered as safe.

Error Details:
[UnsafeControlException: A Web Part or Web Form Control on this Page cannot be displayed or imported. The type could not be found or it is not registered as safe.]
  at Microsoft.SharePoint.ApplicationRuntime.SafeControls.GetTypeFromGuid(Guid guid)
  at Microsoft.SharePoint.WebPartPages.SPWebPartManager.CreateWebPartsFromRowSetData(Boolean onlyInitializeClosedWebParts)