Tag Archives: search

SharePoint Search Service – service implementation object was not initialized

As usually, the same opening statement.

“I recently bumped into this issue” where my Search Service Application services is throwing “service implementation object was not initialized” error when perform a regular, normal, nothing-special search from any sharepoint site collection.

Note that in my SharePoint Farm, I have two search server that are both hosting the 6 components

  • Admin Component
  • QueryProcessing Component
  • Index Component
  • Crawl Component
  • ContentProcessing Component
  • AnalysticProcessing Component

When accessing to Central Admin > Manage Service Application > Search Service Application page, I notice the “All Status” is “All Errors” and if it is hitting my another central admin server (i have 2, yea same server), it gives “Running”.

For this, I seem that there is some issue when server is trying to TALK to each other. Also, if  you browse into Search Schema (the old Managed Properties page), You do not see any managed properties to be configured.  Browsing to “Content Source” page will give you “Service Implementation object was not initialized” error

Flipping through my ULS logs for both server, you will see errors right below (putting the error here so it help Google Search for people hitting the same error and be able to find out my article that may be able to help them)

failed to get default collection for application Search Service Application: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: The service implementation object was not initialized
SearchServiceApplicationProxy::GetQueryHealthMonitoringSettingsForComponents--Error occurred:System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: The service implementation object was not initialized
Exception when reading aggregator settings: ...

All over the logs file.

It took me 7 rounds of re-provisioning of Search Service Application… in order to get it tested and fixed. I hope you do not need to spend that much time !

Occasionally, you see Error reported in Event Viewer

A failure was reported when trying to invoke a service application: EndpointFailure
Process Name: OWSTIMER
...
Service Application Uri: urn:schemas-microsoft-com:sharepoint:service: ...
...
Affected Endpoint: http:// xxxx /SearchService.svc

Resolution

All these are signs of SSL validation error that causing SVC end point failure. I followed this article (thanks to the author!) and trying to remove and add SSLCert with certification revocation disable.

  1. RDP to Search Server with Local Administrator rights
  2. Fire up “CMD” command prompt
  3. Execute
    netsh http show sslcert
  4. Note down the detail for ip port : 0.0.0.0:32844 (especially the Hash number) cause this is what the cert binding for SharePoint Web Service
    SharePoint SSL Cert binding revocation disable
  5. Execute command below to Delete the SSL binding
    netsh http delete sslcert ipport=0.0.0.0:32844
  6. You should see a success message. Then execute the following to add the SSL Binding with verify client certificate revocation Disabled
    netsh http add sslcert ipport=0.0.0.0:32844 certhash=18e363549ba0c0445625cc47ecbfb5dbbd4ec517
    appid={4dc3e181-e14b-4a21-b022-59fc669b0914}
    certstorename=SharePoint verifyclientcertrevocation=disableNote that the certhash should follow your own Cert.
  7. Repeat the same steps to all your Search Server
  8. Once it is added, I did a re-provisioning of my Search Service Application… And Woala!

 

 

SharePoint Search Content Source Crawl Log Access Denied

I have the following issue when setting up SharePoint 2013 Search Service Application.

Whenever I started full crawling my content sources, after certain time (usually the next day). Content Sources page and Crawl Log will give Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
search service application content source access denied

Checking Search Instance Server’s Application Log and you can see the following error

The Execute method of job definition Microsoft.Office.Server.Search.Administration.IndexingScheduleJobDefinition (ID e611e95c-dc0a-40ee-a3a3-c58f2099c2d1) threw an exception. More information is included below.

Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

Event ID 6398

Subsequently go to Central Administration page > Timer Jobs to look for the respective Timer

Found “Indexing Schedule Manager on xxxServerNamexxx” failed miserably, for every 5 minutes.

It was then found that some user has this issue previously which has got something to do with TASKS folder in your C:\WINDOWS

sharepoint search windows task access denied issue

In case if you do not have the history of your Domain GPO, this particular folder was previously a target for Conficker Worm virus. Refer here. MS recommended to actually change the permission of this folder which then conflict the requirement for SharePoint Search Service.

If you are interest in checking your own GPO setting, you can simply run “rsop.msc” in your server’s RUN command. And you should be able to see the settings made as per below

sharepoint search windows task access denied issue conflicker

 

Workaround

In order to solve the issue, you have to get your AD GPO team to remove this setting from your sharepoint servers. Explicitly for this requirement or else your search cannot crawl.

For temp solution, you have to change the Owner of this TASKS folder and grant

WSS_WPG with minimum “Read” and “Write” access.

Finger Crossed

an unrecognized http response was received trustfailure could not establish trust relationship ssl/tls

I was having this error generated from my SharePoint 2013 Crawl Log saying the HTTP response is not recognised when it was trying to crawl my SharePoint Webs

This error came out after configuring a subscribed SSL certificate from Entrust (it may happen to all other vendor too I bet) in IIS.

After digging the Application Log of my SharePoint 2013 server which is running the crawling, Error like below was shown:

An operation failed because the following certificate has validation errors:
Subject Name: CN=xxxx, OU=XXX.
 Thumbprint: xxx
Errors:
PartialChain: A certificate chain could not be built to a trusted root authority.
 RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
 OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline.

After reading this error message, it reminds me that I have a chain certificate provided by the SSL vendor which it is asked to import this chain to my server’s certificate store

For SharePoint, You will need to do additional steps to configure this! If you happen to see this error, please kindly perform the following steps:

  1. Import the Chain Certificate from your SSL vendor and save into your server.
  2. Go to Central Admin > Security > Manage Trust
  3. Click “New” in the Trust Relationships tab
  4. Enter the name for the trust and browse the imported Chain Certificate.
  5. Click Ok to create the trust. You shall see your new trust being added
  6. Perform a full crawl again and you shall see the Crawl Log starts generating results

Note: Ticking the “Ignore SSL Warning” in Farm Search Administration page does not help. Have tried that and it didn’t work. The above steps should suffice.