I was recently working on an interesting issue where Search Centre, Center for our American cousins, was not returning any results. Picked up the case and thought, yeah it’s going to be a breeze.
The guy was accessing the site from one particular URL and the content source the gatherer was crawling was pointing to another. So for the sake of this topic it lets just say;
Accessing: https://www.domain.com
Crawling: http://www.domain.com
So I automatically thought, great. Simple AAM (Alternate Access Mappings) issue here. Had the customer run;
stsadm -o enumzoneurls
Received back;
http://sharepoint:39517
https://www.domain.com
http://www.domain.com
https://www.domain.com:65534
http://www.domain.com:65535
Dang! Looks like this AAM are all good. He has both URLs in the list.
So next step we performed a SPSReport, a free Open Source on Codeplex that collects all the good oil from each SharePoint server.
Checking the his Application Log I notice a whole stack of Event ID 6398 and 6482 errors;
7/8/2008 1:27:13 PM 1 964 6398 Windows SharePoint Services 3 N/A SHAREPOINT “Microsoft.Office.Server.Search.Administration.IndexingScheduleJobDefinition “”ae0200ec-e4d7-43e5-a55e-44ecd2f54821 “”Retrieving the COM class factory for component with CLSID {3D42CCB1-4665-4620-92A3-478F47389230} failed due to the following error: 80070005. “
7/8/2008 1:27:17 PM 1 1328 6482 Office SharePoint Server N/A SHAREPOINT “Microsoft.Office.Server.Search.Administration.SearchServiceInstance “”12995fbd-8200-479c-86d8-f201504e6d86 “”Retrieving the COM class factory for component with CLSID {3D42CCB1-4665-4620-92A3-478F47389230} failed due to the following error: 80070005. “”System.UnauthorizedAccessException: Retrieving the COM class factory for component with CLSID {3D42CCB1-4665-4620-92A3-478F47389230} failed due to the following error: 80070005. at Microsoft.Office.Server.Search.Administration.Gatherer.get_AdminObject() at Microsoft.Office.Server.Search.Administration.Gatherer.ProvisionGlobalProperties() at Microsoft.Office.Server.Search.Administration.SearchServiceInstance.Synchronize() at Microsoft.Office.Server.Administration.ApplicationServerJob. ProvisionLocalSharedServiceInstances(Boolean is AdministrationServiceJob) “
Now it’s pointing towards a DCOM an issue in activating {3D42CCB1-4665-4620-92A3-478F47389230} with error 80070005. 0×80070005 usually means access has been denied or the incorrect permissions are in place. So searching for 3D42CCB1-4665-4620-92A3-478F47389230 in the Regedit we see that it returns the Microsoft Offie SharePoint Server Gathering Manager, with an AppID of {58F1D482-A132-4297-9B8A-F8E4E600CDF6}.
If you get the AppID string and once again search in Registry you will find that the Service which is returned is OSearch. The old chestnut, the Office SharePoint Server Search service. Looks like there’s light at the end of the tunnel yet.
As standard practice you should enable Local Activation permissions to your Web Application Pool ID’s to the IIS WAMREG admin Service under Component Services (dcomcnfg), which bring us back to the original issue, Local Activation permissions not being set correctly. So in Component Services we’ll need to grant Local Activation permissions to your OSearch application by adding your Office SharePoint Server Search service account. Try saying that a hundred times over.
So we’ve performed the above steps and still no go. Strange. I had a look at the Event Viewer logs again and this time our Event ID 6398 and 6482 errors are showing a different error, with the addition of an extra Event ID 7076, such as;
7/8/2008 3:48:17 PM 1 1328 6482 Office SharePoint Server N/A SHAREPOINT “Microsoft.Office.Excel.Server.ExcelServerSharedWebServiceInstance “”2c538eae-474f-476b-b99e-1c86966add40 “”Exception from HRESULT: 0×80005006 “”System.Runtime.InteropServices.COMException (0×80005006): Exception from HRESULT: 0×80005006 Server stack trace: at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.PutEx(Int32 lnControlCode, String bstrName, Object vProp) at System.DirectoryServices.PropertyValueCollection.OnClearComplete() at System.DirectoryServices.PropertyValueCollection.set_Value(Object value) at Microsoft.SharePoint.AdministrationOperation.Metabase.ApplicationPool. set_IdentityType(ApplicationPoolIdentityType value) at Microsoft.SharePoint.AdministrationOperation.SPProvisioningAssistant. ProvisionIisApplicationPool(String name, ApplicationPoolIdentityType identityType, String userName, SecureString password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.SharePoint.AdministrationOperation.SPAdministrationOperation. DoProvisionIisApplicationPool(String name, Int32 identityType, String userName, String password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Microsoft.SharePoint.AdministrationOperation.SPAdministrationOperation. DoProvisionIisApplicationPool(String name, Int32 identityType, String userName, String password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.SharePoint.Administration.SPMetabaseManager.ProvisionIisApplicationPool(String name, Int32 identityType, String userName, SecureString password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.Office.Server.Administration.SharedWebServiceInstance.Synchronize() at Microsoft.Office.Excel.Server.ExcelServerSharedWebServiceInstance.Synchronize() at Microsoft.Office.Server.Administration.ApplicationServerJob. ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob) “
7/8/2008 3:48:17 PM 1 1328 7076 Office SharePoint Server N/A SHAREPOINT “Exception from HRESULT: 0×80005006 “”System.Runtime.InteropServices.COMException (0×80005006): Exception from HRESULT: 0×80005006 Server stack trace: at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.PutEx(Int32 lnControlCode, String bstrName, Object vProp) at System.DirectoryServices.PropertyValueCollection.OnClearComplete() at System.DirectoryServices.PropertyValueCollection.set_Value(Object value) at Microsoft.SharePoint.AdministrationOperation.Metabase.ApplicationPool.set_UserName(String value) at Microsoft.SharePoint.AdministrationOperation.SPProvisioningAssistant. ProvisionIisApplicationPool(String name, ApplicationPoolIdentityType identityType, String userName, SecureString password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.SharePoint.AdministrationOperation.SPAdministrationOperation. DoProvisionIisApplicationPool(String name, Int32 identityType, String userName, String password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [0]: at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Microsoft.SharePoint.AdministrationOperation.SPAdministrationOperation. DoProvisionIisApplicationPool(String name, Int32 identityType, String userName, String password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.SharePoint.Administration.SPMetabaseManager.ProvisionIisApplicationPool(String name, Int32 identityType, String userName, SecureString password, TimeSpan idleTimeout, TimeSpan periodicRestartTime) at Microsoft.Office.Server.Administration.SharedWebServiceInstance. CreateSharedWebServiceApplicationPool(SharedResourceProvider srp) at Microsoft.Office.Server.Administration.ApplicationServerJob. ProvisionLocalSharedServiceInstances(Boolean isAdministrationServiceJob) “
7/8/2008 3:48:17 PM 1 964 6398 Windows SharePoint Services 3 N/A SHAREPOINT “Microsoft.Office.Server.Administration.ApplicationServerAdministrationServiceJob “”35ab9824-b085-44e4-a199-21f83e7d941a “”Exception from HRESULT: 0×80005006 “
Once again we are getting the Exception from HRESULT: 0×80005006 appearing and this vividly is starting to look like a past case I encountered. We seem to be coming across a lot of these errors at the moment specifically to do with this;
FIX: You may be unable to manage IIS 6.0 by using Server Manager if two threads access IIS 6.0 at the same time
http://support.microsoft.com/kb/946517
If you read at article it mentions the OWSTIMER.EXE may experience those Event ID errors. It’s private download for this fix, so I sent the customer this fix along with the problem description. One reboot later, voila! We have search results appearing in all their glory.
Case closed.
Kristof Kowalski | kristof@kowalski.ms



