Publishing HAP+ through TMG Forefront 2010

[tomearnshaw]

Hi all,

 

Was just wondering if anybody had set up HAP+ behind Microsoft TMG Forefront and if so, did anybody else experience issues with file uploads?

 

When trying to upload files from 'MyFiles', I get the following error;

 

Upload of

has failed!

Value cannot be null.

Parameter name:No File Attached!

 

However this only happens if I connect using the external domain name, if I do it using the internal name or IP address, it works fine. All I can assume is that TMG is blocking the file, making HAP+ think that no file was attached.

 

I have tried many different browsers and operating systems, but it always seems to be the same when accessing externally.

 

I have the very latest version of HAP+ patched with V9.1.0501 running on Windows Server 2008 R2 on IIS 7.5

 

Any ideas?

[minimoo]

What type of authentication are you using within HAP?

 

What are type of authentication are you using on TMG + IIS ?

[nickbro]

HAP+ uses the X_FILENAME http header, make sure you allow that

[cmorgan]

I may be late to the party here a bit, but my setup here is published through TMG 2010. (Still annoyed that they are discontinuing it! )

 

I have had no reported problems with file uploads or downloads from students or staff and I cant remember changing anything from the default bit. If I did it was to fix a problem I was getting where the modernizer.js was not loading which turned out to be a problem on the server running IIS.

 

If you do have any other problems though I can try seeing what we have our options set to and get back to you.

 

Thanks

[tomearnshaw]

Hi All,

 

Apologies for the delay in coming back.

 

Still having issues with uploading files using the external address (and therefore going through TMG) but no issues at all when uploading locally (bypassing TMG).

 

I am pretty confident that HAP+ is setup correctly as it does work perfectly well internally.

 

Looking through TMG at the firewall policy settings I have setup for HAP+ (which are identical to OWA and a OSTicket install), all looks as I think it should;

 

Action - Allow

From - Anywhere & Internal

To - Internal DNS name of server

Traffic - HTTPS (within this, all methods are allowed)

Listener - HTTPS (within this, basic HTTP authentication)

Authentication Delegation - Basic authentication

 

Nothing really stands out as being the cause of files getting blocked from uploading which I presume is TMG, here is the event log from the server when it happens;

 

Event code: 3005

Event message: An unhandled exception has occurred.

Event time: 08/07/2013 16:05:27

Event time (UTC): 08/07/2013 15:05:27

Event ID: 66bf32e3def548af83a59ccdea4e1ef4

Event sequence: 52

Event occurrence: 1

Event detail code: 0

 

Application information:

Application domain: /LM/W3SVC/1/ROOT/HAP-1-130177694966984618

Trust level: Full

Application Virtual Path: /HAP

Application Path: C:\inetpub\wwwroot\HAP\

Machine name: ADITO

 

Process information:

Process ID: 2960

Process name: w3wp.exe

Account name: IIS APPPOOL\HAP

 

Exception information:

Exception type: ArgumentNullException

Exception message: Value cannot be null.

Parameter name: No File Attached!

at HAP.Web.API.MyFiles_Upload.ProcessRequest(HttpContext context)

at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 

 

 

Request information:

Request URL: https://***************************:443/HAP/api/myfiles-upload/H/

Request path: /HAP/api/myfiles-upload/H/

User host address: **************

User: *****************

Is authenticated: True

Authentication Type: Forms

Thread account name: IIS APPPOOL\HAP

 

Thread information:

Thread ID: 14

Thread account name: IIS APPPOOL\HAP

Is impersonating: False

Stack trace: at HAP.Web.API.MyFiles_Upload.ProcessRequest(HttpContext context)

at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 

 

Custom event details:

 

 

When I attempt this and put logging on in TMG, lots of allowed connections and now denied, so not very helpful at all!

 

Any help would be greatly received!

[nickbro]

Looks like TMG is stripping the file out of the post, or the filename header

[jrink]

I have this working through TMG without issue. Didyou try creating a server publishing rule instead of a web publishing rule instead? I believe that's how mine is setup.