File Not Found on main PWA page

[Dan]

We have Project Server 2007 installed on a Windows 2003 Server. Project Web
Access was working fine, as was MOSS 2007 on that same server. We changed the
Sharepoint website to require SSL and changed the urls to https. I updated
the alternate access mapping so all of my Sharepoint sites/links now point
correctly to https. However, when I go to https://portal.com/PWA, I get a
File Not Found message within a Sharepoint screen. I can open the project
workspaces, but not the main project center link. I've tried doing a Repair
on Project Server 2007, but get the same message. Perhaps I missed changing a
url to https somewhere else in the project server configuration? Any help
would be greatly appreciated.

 

[Dan]

Any ideas?

 

[Stephen Sanderlin]

Can you post the changes you made in your efforts to enable SSL?

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Dan]

Yes, I hope I've remembered them all:

1. Added a certificate to my main SP application in IIS.
2. Checked "require SSL" on my main SP app in IIS.
3. Updated the alternate access mapping in SP to point to https.

This allowed me to view all of my SP pages (except PWA) with https. Then, I
updated my project server web app to use SSL in SP Admin. I also have
required SSL and given a certificate to my SSP site in IIS, but also had no
luck.

Thanks.

 

[Dan]

Also, I can get to any project workspace, and even the Site Settings for my
main PWA site. Just no main page nor project center.

 

[Stephen Sanderlin]

This is the process that I use:

1) In Application Management, extend the existing Web Application onto
port 443. Make sure to choose "Yes" under "Use SSL" on the page.

2) Add the SSL certificate to the new virtual server you just created
by extending the existing web application. While you're in IIS, ensure
that the virtual server for port 80 is stopped.

3) Change the Alternate Access Mapping for the Default zone of the web
application you just extended to the new HTTPS URL (e.g. http://test
would become https://test). This will make the Default URL for the zone
the SSL url.

This is the only reliable way I've found to make this change.

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Stephen Sanderlin]

Three things I forgot to mention...

1) While you're playing with this, I would use a certificate generated
by the SelfSSL utility in the IIS 6 ResKit
(http://support.microsoft.com/kb/840671). Just make sure you tell it to
add the certificate to the right site id. Mistakenly signed
certificates can be an expensive mistake (depending), so I use this to
make sure everything is on the up and up before I get one.

2) Using the AAM to change the zone is not always necessary depending
on your design.

3) You may have to alter this procedure depending on how your SSL and
SP/PS architecture is set up or planned.

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Dan]

For step 1, do I need to extend the existing web app? Wouldn't the alternate
access mappings and changing the site in IIS take care of it?

I'm not sure what extending the existing web app does, or what it would
impact. I tried to select my existing IIS web site instead of Creating a new
one, but my existing site is not in the list.

I appreciate the help.

 

[Stephen Sanderlin]

How do you have your AAMs configured? Is everything just using the
Default zone? Ar eyou only using the Server name and no host headers?

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Dan]

I'm using our host header in the Default Zone only. (https://portal.com)

 

[Stephen Sanderlin]

Okay. Can you post a list of all the AAMs you have configured in all
collections? (include internal url, zone, and public url)?

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Stephen Sanderlin]

My purpose in posting that procedure was to provide another example of
a process which I've used that works. FYI, when I perform the steps you
said you performed, everything works fine there as well.

As for why to extend the web application, if you are hosting seperate
HTTP and SSL sites, Microsoft recommends that you extend seperate web
applications instead of sharing. If you leave the AAM as-is after
extending, ensure there's no SSL port on the SharePoint - 80 virtual
server, and change the HTTP port of SharePoint - 443, you should be
able to run both the original and extended web application
simultaneously without any trouble.

I've gotten in the habit of always extending when I implement SSL so
that I have two web applications already created in case I ever need to
add a host header -- then, I'd just have to reconfigure the AAMs. This
isn't mandatory, though.

I'm troubled that your existing site is not in the list on the Extend a
Web Application screen, though... Are you sure you're not working with
an extended web application? I believe that web applications created by
extending existing web applications are the only ones that shouldn't
appear in that list.

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.

 

[Dan]

That is the only one I have set up. (the default zone). Do I need to set up
all zones?

 

[Dan]

Well, I figured it out. Before, I had one map to https in the Default zone
only. I changed the Default zone to http, and I put the https in the Internet
zone, and it took care of it. I'm not sure why it worked because I don't
fully understand the AAMs by zone, so any explanation as to why that would
work would be helpful.

 

[Stephen Sanderlin]

Glad that you figured it out!

This is an excellent series of three posts on AAMs by the SharePoint
P&T Team:
http://blogs.msdn.com/sharepoint/archive/2007/03/06/what-every-sharepoin
t-administrator-needs-to-know-about-alternate-access-mappings-part-1.asp
x

--
Stephen Sanderlin
Owner/Founder - EPMFAQ
http://www.epmfaq.com/
http://forums.epmfaq.com/

EPM Solutions Architect / Principal Consultant - BT Professional
Services
http://bt.ins.com/

This electronic message, along with any information, advice, and
opinions it contains, are mine alone and are not representative of my
employer. All information is provided in "GOOD FAITH" and on an "AS IS"
basis only. I provide no presentations or warranties, express or
implied, including implied warranties of fitness for a particular
purpose, merchantability, title, and noninfringement. I strongly advise
you to extensively test any changes, workarounds, or techniques
described herein on a development system prior to implementation in a
production environment, and you are hereby notified that I bear no
responsibility whatsoever for any loss, harm, or otherwise negative
outcomes resulting from your actions, whether or not said actions were
a result of this electronic message, directly or indirectly.