question

HishamQaddoumi-7400 avatar image
0 Votes"
HishamQaddoumi-7400 asked HishamQaddoumi-7400 commented

FBA Users Cannot Search

We have a site with two zones, one for windows authentication and one for FBA users. The one with windows authentication is fine and users can perform search but the one with the FBA users cannot search and it throws an error about authentication. I uploaded the error log within this thread. This happened after a recent SharePoint update we did on the server as it was working before. Here are more information:

SharePoint Version: 2019 (on-promise)
Windows Server 2019
SQL Server 2019
Site Collection Template: Publishing Site (Classic Experience)

Thigs I tried:
- Full crawl
- Change authentication method in the STS different times different methods

Any help is greatly appreciated.

93258-fba-search-error.txt




office-sharepoint-server-administrationoffice-sharepoint-server-developmentoffice-sharepoint-server-customizationoffice-sharepoint-server-search-itpro
· 6
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @HishamQaddoumi-7400

Have you installed system update or CU patch in the SharePoint? Which version of system update or CU patch have you installed?

0 Votes 0 ·

@CaseyYangMSFT-4714 Yes Casey. The current update version information is as below:

SharePoint 2019 version: 16.0.10373.20000
Latest Core KB: KB4504716

Screenshot of the latest patches installed is attached below:

93605-screenshot-2021-05-04-075933.png


0 Votes 0 ·

Hi @HishamQaddoumi-7400

Please try to re-configure your FBA. If you have any progress please feel free to let us know.

0 Votes 0 ·
Show more comments
sadomovalex avatar image
0 Votes"
sadomovalex answered

strange thing in provided log is this one:

"The security validation for this page is invalid and might be corrupted"

do use see any errors in Browser console (F12) when open search page?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HishamQaddoumi-7400 avatar image
0 Votes"
HishamQaddoumi-7400 answered

@sadomovalex
Nothing in the browser console. This error happens on the SharePoint level not the browser level. This message appears in the ULS because it cannot generate the Search Results web part because of a permission error so the security validation of the whole page fails and got corrupted as the web part inside it is corrupt. If you notice the first logs, you can see that the FBA users do not have access to Process Query service:
Failed getting current site subscription id using context uri: 'https://www.mysitecom:443/search/vti_bin/client.svc/ProcessQuery'.
If I open this URL in the browser I get this error:

<m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">;
<m:code>-2147024891, System.UnauthorizedAccessException</m:code>
<m:message xml:lang="en-US">Access denied. You do not have permission to perform this action or access this resource.</m:message>
</m:error>
_
It is obviously a permission error nothing to so with the browser.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.