Todd Klindt's SharePoint Admin Blog

Once you click "Create External URL Mapping" your taken to another page with TWO spaces. I'm assuming the external IP goes in the "New default zone URL protocol, host and port space. Correct?

I'm not sure what goes in the Resource space. Does it matter what goes there? Or is it just a description for reference purposes?

--Jess

Jess,
Thanks for the sanity check.  You should use the "Add Incoming URL" option, not the one I mentioned in the original entry.  I have changed it, so as to not confuse anyone else.

Thanks again.

tk

Cool, got another nifty screenshot of that?

Or do I still need to do the Create External URL Mapping AND do Add Incoming URL?

Both of them or just the add incoming URL?

Thanks for bringing up the screenshot, I'll put a correct one up in a couple of minutes.  :)

You only need to add an incoming URL.  Ignore all the "External URL Mapping" talk.  That only came up because I was rushing to get the blog posted and I messed up.

When I set this up I don't think I manually added the Outbound URL, I think it just came with the Inbound URL when I created it.

tk

ok when I click the Add Incoming URL it takes me to another page.
In the upper right hand corner there is a drop down menu for "Alternate Access Mapping collection: No Selection"

Until I change that drop down menu from "No Selection" the Save button at the bottom is grayed out. When I hit the drop down I get a link for "Change Alternate Access Mapping Collection"

If I click on that link it opens another window with a list of SharePoint sites (port) and the URL's for them.

Do I choose the SharePoint(80) ? Since I think that is the default SharePoint homepage correct?

Then in the space for "Add Incoming URL" I put the external IP address I've given it in NAT?

Do I leave the "Zone" drop down menu on Default?

Or maybe I should be putting the INTERNAL IP address from the NAT in Incoming URL.

From my understanding of NAT and firewall the computer doesn't know what it's outside IP is, that is all handled by the NAT/firewall.

So SharePoint would only know that its IP address is the internal IP number?

You'll want to put your Extenal IP address in there.  Basically you're telling Sharepoint "If you get a request for http://123.45.67.89 that's you, go ahead and answer it."  I put www.toddklindt.com in because that's what the host headers have in them when requests come in from the outside.  I've never done this with IP address, so there's some guesswork on my side.

tk

Are you using a single server or farm setup?

I'm wondering if your using more than one SharePoint server in your setup if I still need the Alternate Access Mappings for a single server.

I have a single box.

Before I put the alternate Incoming URL folks going to http://www.toddklindt.com would be redirected to "http://wssv3test," which is the internal name and of course didn't work for external folks.  Putting in the alternate URL fixed that.  V3 has added zones which lets you differentiate between people coming internally and externally.  I assume adding Incoming URLs is the first part of getting that set up.

tk

Hi, Todd
I can't find your email address, so i have to post my question here.

I don't know the solution above will be suitable for my case.
we are running sps 2003 evaluation version for testing purpose now.

we have two offices which connected by IPSec and they are on the different subnet.
192.168.1.0/24 and 192.168.2.0/24.
I setup a SPS in the head office(192.168.1.0) with a internal IP(192.168.1.10).
All PCs in the headoffice can IE SPS portal site without any problems.
All PCs in remote office cannot IE SPS portal site, but they can access sharepoint central administration.

All PCs are in one domain which locates in headoffice.

Can you help me?

Thanks
Bo

Hi, Todd

My email address is bo.hu@lawinorder.com.au

Thanks

Hi Todd,
    I try to create a mapping as you said. But it didn't work. It says page cannot be displayed. Is there any other steps i need to before. Plese add also that in this thread.
Thank you

Hi Todd,
    I try to create a mapping as you said. But it didn't work. It says page cannot be displayed. Is there any other steps i need to before. Plese add also that in this thread.
Thank you

Can you still get to Central Admin?  Which zone did you add the mapping for?  Have you tried both the old and new URLs to verify they both don't work?

tk

Worked like a charm...

ok... get this... i am having problems getting INTERNAL people to see the site... but external folk are fine. i want to route everyone (internal AND external) to see the site by IP or A Record ONLY... not by machine name... anythoughts?

You need to make sure you have a Zone for both internal and external URLs.  If you only have the External URL defined, when users hit the site with the internal URL they will be redirected to the external URL.  Is that what's happening with you?

tk

I had them setup and they stopped working.

http://mysites -- default
http://mysites.mydomain.com -- internet

Now either one or the other works... but not both.

Hello there!  Thanks for posting such useful content here.  I am just a normal IT guy and don't do any WSS development.  This was causing me great pain.

How does WSS determine where the client device is coming from and to which URL to provide them with.

Eric Hanke

Hi Eric,
Glad to hear this information is helpful.  I haven't done all the research on this, but I imagine WSS matches the incoming URL up with a Zone in the Zones table and then treats the request accordingly.  If you have Forms Based Auth set up for your Internet zone, and the URL you hit the server with matches the Internet zone, WSS responds accordingly.

I hope that answers your question.

tk

-

Wow! you just totally made my day with this.

I would have expected MS to make this much more known. I've spent two weeks in the MS Partners managed newsgroups before something suggested there lead me to your page!

Thanks for the help!

Eric

Eric,
Glad to hear it helped.  :)

tk

I agree with the previous poster, this was not the easiest information to come across and if it wasn't for Google, I'd still be digging :).

Might I suggest a topic for another blog entry: how to deal with users getting prompted multiple times for username/password when opening Office docs from an externally facing WSS v3 site.

Thanks very much for the information!

Shawn

Hi Todd,

Big thanks to you, I was struggling around with this problem for a couple of weeks now, you made my day!

Another confusing thing for me was, that, when I entered http://sharepoint.domain.com, it redirected me to http://sharepoint, but when I entered http://sharepoint.domain.com/default.aspx, it worked...

Thank you,
David

Hey Eric, did you get your stuff working?

tk

In AAM incoming URLS option is not there, I only see, Edit, add internal, map to external. What am I doing wrong?

The screenshots are from Beta2 and the screens have changed.  See my updated blog post at http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=39

tk

The address mapping worked a treat thanks. However, whenever an external host tries to click the <sign in> link they are just brought to a blank white page. Internelly works fine.
Any ideas?

Cheers

The address mapping worked a treat thanks. However, whenever an external host tries to click the <sign in> link they are just brought to a blank white page. Internelly works fine.
Any ideas?

Cheers

The address mapping worked a treat thanks. However, whenever an external host tries to click the <sign in> link they are just brought to a blank white page. Internelly works fine.
Any ideas?

Cheers

First, read my updated blog entry about AAMs at http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=39.  It's got more information and the pictures are based on the RTM code, so the screenshots are more correct.  :)

As for your authentication issues, go into Central Administration > Application Management > Authentication Providers  for your Web App.  Click the zone that your users are coming in to (probably Default) and verify that Basic Authentication is enabled.

tk

Do you know how to add SSL to this external URL?  I have added SSL to a new 443 site through Central Admin tool and stopped the Port 80 site in IIS.  After this change, only my existing sites are accessible with FQDN (https://sharepoint.xxx.xx.xxx).  If I add new sites they get the short netbios way (http://sharepoint) and don't work.  I believe this involves Alternate Access Mappings but i'm not sure what to do at this point.

Thanks for all the info on this topic. I unfortunately am still having issues. I have WSS installed on the DMZ interface of my firewall. I have NAT configured identically for the Outside interface and the Inside interface. Here are the URLs I have configured. 74.8.14.153 is the outside and inside address.
http://gza-sharepointx  Default http://gza-sharepointx 
http://gza-sharepointx.gza.com  Default http://gza-sharepointx 
http://74.8.14.153  Default http://gza-sharepointx 

I am getting "Unable to determine IP address from host name for gza-sharepointx.gza.com" DNS on the sharepoint server and myself is pointing to 74.8.14.153 for gza-sharepointx.gza.com.

Any idea as to what I am doing wrong?

Hello, Your site is great. Regards, Valintino Guxxi

I have sharepoint v3 with a web application called portal.mysite.com. I have a named space called portal.mysite.com/home what I I am trying to do is when a user types in portal.mysite.com they are redirected to portal.mysite.com/home.

I have tried a couple of the suggestions above with no luck. Is there any other ideas out there?

You can't do this with an AAM.  You could do with with a Content Editor Web Part and put in some HTML code and send your users to the /home page with a "meta refresh" tag.

tk

A++
Would ask for help from again

Good Site! Thanks!

When I try to add an Internal URL, the save button is greyed out.  When I click on "No Selection" next to Change Alternative Access Mapping Collection nothing happens.

Can anyone help?

Hi Todd,
Not sure if this question fits here but see what you have to say.  3 servers running 1 MS EPM/PWA & SPS 2 SQL Server 3Web Server.   Using AAM so users can enter a realestic name not the server name.   Working fine for a year and a half.    Last night June MS security patches applied and the AAM address stopped working.

Backed out the changes with no effect, still cant access the AAM alternate address.   Monitoring the server it is available however the redirect is failing and showing access to the site but is continual looping on handover to SPS AAM.

Any help would be appreciated.
A beginner in SPS
Thanks,
Kym
  

Hey Kym,
Are you using SPS 2003 or MOSS 2007? If it's SPS 2003, I'm afraid I can't help you. I never touched it. If it's MOSS 2007 the first thing I'd do is make sure you're running the latest service pack (SP2) or at least a couple of patches after the Infrastructure Update. The IU did some weird things to AAMs. If you reply to this, please include your build number. That'll help. Also, what shows up in the ULS logs?

tk

We are using WSS3.0 and have designed a site using the Helpdesk template. the problem is, I designed the site and it works great untill we try to access it from one of our other subnets within our company. It will not get to the site "Page can not be displayed" What do we need to do to allow our site to be accessible from our other subnets?

Any help would be greatly appreciated.

--Barb--

All,

I want the users to connect to my server over internet using the adress www.domain.com. This domain will be linked to the ip of the server. I also want the server to forward all people that connects over internet, using www.domain.com, to be forwared to the port xxx. Is this possible?

E.G: Users type in: www.myserver.com and they get to the sharepoint site www.myserver1:12345

Regards
Erik

Hi
I want someone to help me with Sharepoint services 3.0. When I checkout a document in internet explorer i get error "object ref not set to an instance of an object". I searched on internet and this guy had same issue : http://blogs.technet.com/isablog/archive/2008/10/02/unable-to-check-out-a-document-in-moss-2007-published-through-isa-server-2006.aspx

Please let me know if you can help me with this. My email is hnaushad@dixiesales.com