安全令牌服务不可用

https://sharepoint.stackexchange.com/questions/4199

16-10-2019
|

题

在Server 2008 R2上安装SharePoint Server 2010（独立）之后，我从Health Analyzer那里得到了此警告：“安全令牌服务不可用。”

Windows应用程序事件日志也充满了这些错误：

资料来源：Microsoft-SharePoint产品 - 份求职基金会
事件ID：8306
任务类别：索赔身份验证
级别：错误
描述：尝试发布安全令牌时发生了例外：服务器没有提供有意义的答复；这可能是由于合同不匹配，过早的会话关闭或内部服务器错误引起的。

我已经安装了KB976462 Hotfix，并尝试了Google可以找到的所有补救措施，但问题仍然存在。

有人有任何想法吗？

更新：来自SharePoint跟踪日志的此错误的示例：

07/22/2010 15:15:44.08  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Foundation           Monitoring                      nasq    Medium      Entering monitored scope (Timer Job MetadataHubTimerJob)    cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.08  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        8yq5    Medium      Metadata Hub timer job starts.  cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.09  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Foundation           Claims Authentication           fsq7    High        Request for security token failed with exception: System.ServiceModel.CommunicationException: The server did not provide a meaningful reply; this might be caused by a contract mismatch, a premature session shutdown or an internal server error.    Server stack trace:      at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)     at System.Ru... cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.09* OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Foundation           Claims Authentication           fsq7    High        ...ntime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.Protocols.WSTrust.IWSTrustContract.Issue(Message message)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)   cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.09  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Foundation           Claims Authentication           8306    Critical    An exception occurred when trying to issue security token: The server did not provide a meaningful reply; this might be caused by a contract mismatch, a premature session shutdown or an internal server error..   cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        ch5x    Monitorable Proxy Managed Metadata Service throws an exception: System.ServiceModel.CommunicationException: The server did not provide a meaningful reply; this might be caused by a contract mismatch, a premature session shutdown or an internal server error.    Server stack trace:      at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)     at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)     at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)    Exception rethrown at [0]:      at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)     at System.... cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10* OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        ch5x    Monitorable ...Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)     at Microsoft.IdentityModel.Protocols.WSTrust.IWSTrustContract.Issue(Message message)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst, RequestSecurityTokenResponse& rstr)     at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustChannel.Issue(RequestSecurityToken rst)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForContext(Uri context, Boolean bearerToken, SecurityToken onBehalfOf, SecurityToken actAs, SecurityToken delegateTo)     at Microsoft.SharePoint.SPSecurityContext.<>c__DisplayClass7.<GetProcessSecurityTokenForServiceContext>b__6()     at Microsoft.SharePoint.Utilities.SecurityContext.RunAsProcess(CodeToRunElevated secureCode)     at Micro...  cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10* OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        ch5x    Monitorable ...soft.SharePoint.SPSecurityContext.GetProcessSecurityTokenForServiceContext()     at Microsoft.SharePoint.SPChannelFactoryOperations.CreateChannelAsProcess[TChannel](ChannelFactory`1 factory, EndpointAddress address, Uri via)     at Microsoft.SharePoint.SPChannelFactoryOperations.CreateChannelAsProcess[TChannel](ChannelFactory`1 factory, EndpointAddress address)     at Microsoft.SharePoint.Taxonomy.MetadataWebServiceApplicationProxy.GetChannel(Uri address, Boolean& cachedChannel)     at Microsoft.SharePoint.Taxonomy.MetadataWebServiceApplicationProxy.<>c__DisplayClass2c.<RunOnChannel>b__2b()     at Microsoft.Office.Server.Security.SecurityContext.RunAsProcess(CodeToRunElevated secureCode)     at Microsoft.SharePoint.Taxonomy.MetadataWebServiceApplicationProxy.<>c__DisplayClass2c.<RunOnChann...  cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10* OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        ch5x    Monitorable ...el>b__2a()     at Microsoft.Office.Server.Utilities.MonitoredScopeWrapper.RunWithMonitoredScope(Action code)     at Microsoft.SharePoint.Taxonomy.MetadataWebServiceApplicationProxy.RunOnChannel(CodeToRun codeToRun, Double operationTimeoutFactor)     at Microsoft.SharePoint.Taxonomy.MetadataWebServiceApplicationProxy.GetIsServiceApplicationPartitioned()     at Microsoft.SharePoint.Taxonomy.ContentTypeSync.Internal.HubTimerJobDefinition.Execute(SPJobState jobState)  cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Server               Taxonomy                        8yq6    Medium      Metadata Hub timer job ends.    cab840d1-04ed-435a-bdec-56489baf89e7
07/22/2010 15:15:44.10  OWSTIMER.EXE (0x05F8)                       0x0340  SharePoint Foundation           Monitoring                      b4ly    Medium      Leaving Monitored Scope (Timer Job MetadataHubTimerJob). Execution Time=11.509195408448 cab840d1-04ed-435a-bdec-56489baf89e7

解决方案

我遇到了这个问题。事实证明，我们的公司标准IIS安装对与SharePoint发生冲突的.NET配置进行了更改。基本上，SharePoint的Web.config文件包括“ WindowsAuthentication”配置。这是由applyshost.config文件锁定的。

编辑C： Windows System32 inetsrv config applicationhost.config
改变：u003CwindowsAuthentication enabled="true" lockAttributes="enabled">
至：u003CwindowsAuthentication enabled="true">
IISRESET

我为此阅读的其他潜在原因是：

该网站设置为32位模式
该网站没有完全信任
应用程序池未运行

基本上，这是IIS/.NET问题。

有关.config文件和锁定的更多信息.

其他提示

我也遇到了这个问题，但是就我而言，解决非常简单：

SharePoint Web服务网站停止了；一旦开始，问题就消失了。

您是否检查了WMSVC证书到期日期？

当更改了用于其中一项服务的域帐户的密码时，有这个问题。必须更新密码 中央管理员 - >安全性 - >配置托管帐户

我们遇到了同样的问题，希望这也会对您有所帮助。

尝试此操作以重现安全令牌！http://blogs.msdn.com/b/sowmyancs/archive/2010/07/16/sharepoint-2010-service-applications-bcs-metadata-access-access-access-service-arevice-are-not-working.aspx?commentPostosted=true

PS C:\Users\sowmyans> Get-SPServiceApplication

DisplayName          TypeName             Id                                  
-----------          --------             --                                  
Access Services      Access Services W... 77562ca9-5c80-45f4-9a21-6d86c013eb75
Secure Store Service Secure Store Serv... 5eceb8dd-ef3d-4c7d-b900-59436e4743a1
State Service        State Service        54dfbd6d-dc83-48e9-9b79-a52853aad23d
PerformancePoint ... PerformancePoint ... 7556e63a-4c50-400c-8788-de6724b64ab7
Visio Graphics Se... Visio Graphics Se... ac3ab2e0-3952-473d-9901-001b050ef945
Managed Metadata ... Managed Metadata ... 32eeb3d8-b710-4635-81d5-771701072593
Web Analytics Ser... Web Analytics Ser... 9cb8fdbb-c87c-4c11-9c91-d89e04aec703
Excel Services Ap... Excel Services Ap... 8918fc32-b6f2-49ad-9d60-f0d7a866d85d
Security Token Se... Security Token Se... 033b6266-261d-4318-9a9a-36f0e390d346
Application Disco... Application Disco... 80a9e9de-88d0-4ce1-8108-380117fc1c11
Usage and Health ... Usage and Health ... 746c7339-1e8c-47ae-8583-ea80faae5fac
Search Administra... Search Administra... 944cfcd9-155e-41c0-82b7-95386d737fcb
Word Automation S... Word Automation S... c2a414b6-dfb7-4974-8eb4-6c2c6da65af0
Application Regis... Application Regis... e1131c58-0242-4aab-9156-1de22c2be8a4
User Profile Serv... User Profile Serv... 24f623c3-d368-4901-aee0-aed2f8e3f129
Business Data Con... Business Data Con... 2d21dffe-a188-42d7-b46e-04850805bcde
Lotus Notes Conne... Lotus Notes Conne... 115431c5-80e7-40d4-bdd8-7a7254951714
Search Service Ap... Search Service Ap... 1f69450e-c835-4219-9b46-7f444c204059

PS C:\Users\sowmyans> $sts = Get-SPServiceApplication | ?{$_ -match "Security"}
PS C:\Users\sowmyans> $sts

DisplayName          TypeName             Id                                  
-----------          --------             --                                  
Security Token Se... Security Token Se... 033b6266-261d-4318-9a9a-36f0e390d346  

PS C:\Users\sowmyans> $sts.StatusOnlinePS C:\Users\sowmyans> $sts.Provision()

许可以下： CC-BY-SA 和归因

不隶属于 sharepoint.stackexchange