Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Office 2003/2007 Docs Treated Differently?
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Office 2003/2007 Docs Treated Differently? - 18.Apr.2008 3:03:34 AM
|
|
|
jerrice
Posts: 28
Joined: 9.Dec.2005
Status: offline
|
We are having a strange problem here, I am hoping someone has an idea... First our environment:
ISA 2006 Enterprise
Sharepoint Portal Server 2003
RSA SecurID
Mixture of Office 2003 and 2007 documents
So, after the Sharepoint site is published and working fine (using RSA SecurID for authentication and https to https bridging) I can click on and view Office 2007 documents just fine (.docx, .xlsx., pptx., etc.) Office 2003 documents (.doc, .xls, etc.) do not work. IE7 prompts you as to whether you want to open or save the file when clicking on a .docx file. When clicking on a .doc file, I get the "Some files may be harmful to your computer..." dialog, and after clicking 'OK' Word 2007 opens, then I get the RSA SecurID logon page rendered in Word (kind of neat, but I don't want that ;-) The doc is called CookieAuth.dll (which is RSA trying to auth again). I tried enabling persistant cookies, but that didn't change any behavior. Making the site a trusted site in IE doesn't help either.
I would say it is an auth issue, but then how come Office 2007 documents work fine? I was looking for a way to look at/edit mime settings in ISA, but didn't see anywhere to do that. The link translation seems to be fine, it seems to come from the right place, regardless of whether it is a doc or docx.
I tried renaming a .docx file to .doc, then uploading it, and when I tried to click it I got the same weird behavior, it wouldn't let me get the file. I renamed it back to docx, and it came down fine. I also tried renaming a .doc file to .docx, and that came down fine. So, this appears to be all about the file extension.
Thanks for any pointers, this is a confounding issue!
< Message edited by jerrice -- 18.Apr.2008 12:23:42 PM >
_____________________________
-Jerry
|
|
|
|
|
RE: Office 2003/2007 Docs Treated Differently? - 18.Apr.2008 1:12:34 PM
|
|
|
jerrice
Posts: 28
Joined: 9.Dec.2005
Status: offline
|
I came up with a problem in how implemented Office 2007 documents in Sharepoint. After checking out this document, I had missed step 3 (change the Htmltransinfo.xml file).
http://support.microsoft.com/kb/936909
Once I edited the above file, my .docx files are now treated the same as the .doc files, so now everything is requiring auth. I'll try the persistant cookie again to see if that solves the issue.
< Message edited by jerrice -- 18.Apr.2008 3:19:20 PM >
_____________________________
-Jerry
|
|
|
|
|
RSA SecurID Won't Allow Doc Editing in Sharepoint? - 18.Apr.2008 3:29:10 PM
|
|
|
jerrice
Posts: 28
Joined: 9.Dec.2005
Status: offline
|
Ok, well, everything is consistantly not working now. Essentially, I am getting an issue where any clicked-on office doc (2003 or 2007) in IE is getting the CookieAuth.dll page sent back. I turned on Persistant Cookies, and that has not helped. I have tried removing the RSA SecurID auth and using just Windows auth. and that DOES work correctly. With RSA enabled, and ensuring that there is a consistant SecurID cookie setup in the Advanced Authentication Options, I still always get that intial ISA/RSA auth page back. Does anyone have any ideas?
_____________________________
-Jerry
|
|
|
|
|
RE: RSA SecurID Won't Allow Doc Editing in Sharepoint? - 23.Apr.2008 2:44:37 PM
|
|
|
jerrice
Posts: 28
Joined: 9.Dec.2005
Status: offline
|
The current conclusion is that RSA SecurID will not work with Sharepoint correctly, since it does not have a machine-based cookie option. Without that, the "new session" created when you click on a Office document would require a keyfob login. Since office doesn't actually understand that, it just displays the form in the Office app without letting you log in.
At this point we are giving up, unless anyone has any ideas...
_____________________________
-Jerry
|
|
|
|
|
RE: RSA SecurID Won't Allow Doc Editing in Sharepoint? - 22.Jul.2008 8:55:13 PM
|
|
|
Jason Jones
Posts: 1938
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
|
Hi Jerry,
I think I may have stumbled across a solution for this, although I am using MOSS 2007 - can you do some testing for me to confirm?
Please drop me a PM with contact details.
Once we have confirmed it works, I can then post the details and upload an entry to my blog...
Cheers
JJ
< Message edited by Jason Jones -- 22.Jul.2008 8:59:37 PM >
_____________________________
Jason Jones
Microsoft MVP (Forefront Edge Security)
Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/
Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: RSA SecurID Won't Allow Doc Editing in Sharepoint? - 24.Jul.2008 4:45:16 AM
|
|
|
Jason Jones
Posts: 1938
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
|
Hi Jerry,
Thanks for testing this!
So, finally we have a solution to allow RSA SecurID protected SharePoint environments to allow SharePoint document library access - yay!
I will do a quick blog entry (after I have done Exchange 2007 stuff!) as I think this is pretty useful stuff and not that obvious to get working...
Cheers
JJ
_____________________________
Jason Jones
Microsoft MVP (Forefront Edge Security)
Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/
Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
