Topic
  • 2 replies
  • Latest Post - ‏2011-09-14T15:31:18Z by reddz
SystemAdmin
SystemAdmin
2014 Posts

Pinned topic Omnifind 9.1.0.2 - Portal 6.0.1.2 secure search not working

‏2011-05-25T03:03:27Z |
Hi,

I am having loads of trouble getting Omnifind and Portal to play nicely with each other. We are using Omnifind 9.1.0.2 and Portal 6.0.1.2.

I've configure a collection with security turned on and set up two crawlers - one seedlist crawler for Portal and 1 WCM crawler for WCM in the same Portal. I've turned post-filtering off and have pre-filtering turned on. Both Omnifind and Portal are connected to same LDAP, but SSO is not setup.

When searching with both post and pre filtering off, search returns results. When turning pre-filtering on, search return no results. I have following the instructions at https://www-304.ibm.com/support/docview.wss?uid=swg21414486 and it confirms that pre-filtering is the problem.

I've turned show extra Query to true and when running from the portlet, it displays the following text:

ACL constraints:<identities id="omniwcm"><cookies><cookie name="LtpaToken2">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</cookie><cookie name="WT_FPC">id=26bc907c3cf7b25d0e11306290646443:lv=1306290646443:ss=1306290646443</cookie><cookie name="portalOpenFlyout"></cookie><cookie name="JSESSIONID">0000wEfrimNEtnhVi8xQiGAhS0D:14fifg0u4</cookie><cookie name="portalFlyoutIsOpen"></cookie></cookies><identity id=":null"><username>uid=omniwcm,ou=users,o=cml</username><type>wp</type><password encrypt="no">null</password><groups><group id="uid=omniwcm,ou=users,o=cml"/><group id="all authenticated portal users"/><group id="acl:allauthenticated"/><group id="cn=wpsadmins,ou=groups,o=cml"/><group id="cn=wcmadmins,ou=groups,o=cml"/></groups><properties><property name="aclvl">1</property><property name="enable">true</property><property name="connectionid">1306193414059002479824066</property><property name="crwid">col_98100.WCM_52510</property><property name="spaceid">CrawlerWps_WCM1306193225889</property><property name="ssoenabled">false</property></properties></identity></identities>

From that I can see that username is determined correctlt as are the group memberships and it shows that SSO is disabled.

Runnig DumpIndex with --security shows the following for most of the relevant documents

Security: on
$sec$ldportweb01:25330: 1 1 1 1 1 1 1 1 1

Looking at the SearchServer logs, the following entry is made:

INFO: search - collection: col_98100
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction search
INFO: search - accessing searchable with application ID: Search
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - entered
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - queryString = Test
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - queryLanguage = en
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - queryID = __$SYSTEM_QUERY$__
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - sortLocale = enGB
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - sortOrder = -1
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - multipleSortKeys = relevance;
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - multipleSortLocales = enGB;
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - multipleSortOrders = -1;
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - ACLConstraints = @SecurityContext::'<identities id="b21uaXdjbQ=="><cookies><cookie name="THRwYVRva2VuMg==">MlU5ZDNzcGxaMnZlSmpRYXQxcHN0ZFJCaHB0ZjM0TUhjSzlBMmd0eWlhMjMwdnZtdFJycW1adkowWXNHekFZUUNieFB3bC8wR1dvU3hxb2I4YXZTNkhCRjVWUEs3M0JVazZqMXVsazR1a2RoV3kvYVRmN2xTaHNYR2p3Tkd5MjIrQzVzVTZlZEtERktwVklZb1paejREeDNIWVV0MzhzZzZoVTlOcHRPc3pOdU53TGZKNGxWaHJmMW9FbU9GMHYxYWxnaS9yRmFsc2loY2VuS3ZnVmd6dmNIODVRcUFyMUhTdDJ6U2JEQTRtcGhlb3FtbWppWldTNFNSTmh0dGZZSERLYXBCUUR6eFpZNVk2eE92YkpmK0I4b0hKUGlnc1lFdXdlNkhvM3pZM0d6UjRvSHJmbXc3Rk8yUXk4ZHJNMmNHMDQ4L1FwMmh3ZGF5WjcxWjF3TFhMbGJzdXQxaktGb0JvZnRueEI2bTN0L0ZpZzJEc2U5YktJU1JRTW9oN2ZmbGFsY1ZJWkY0OXRhNU83eldZN0t3UGdxejVEL0dYbWp5dnFNcVl4ZC8xQjc2UDVUdzhucWpnTFl1ZGlVYjExMUxVOEFVQmQybkpVdXg0Wkw4WFk4aDlVQUtQMENHNlE5ZUdQOG8yOFlFbEpER21MTEljWU5mdDlibFJGWldCbzA3MmI3enZDcHdaTzZCRFlGNHRtOFd0emFBZmtILzRpTXhmK0NmOG55MVcyTDFvUFoxNWtOMWFwaThPb282WmpOVFJzVkRrN1RRRzZ5Qjc3L1phMzEzWTVaQy9RZUZhbGNqL3dFb01TUGJkcFc3bVlTNjhqaFR0R0pBd3NraUVzbVVGRlE5c1NDOVM1Z1hIWkU0VTVCbG5oSGQ5VE5WalEwb0Fqa3VLa0Qva1RNQ3ZUbDdNa3kvaFFtd3ZlZUN6VVU=</cookie><cookie name="V1RfRlBD">aWQ9MjZiYzkwN2MzY2Y3YjI1ZDBlMTEzMDYyOTA2NDY0NDM6bHY9MTMwNjI5MDY0NjQ0Mzpzcz0xMzA2MjkwNjQ2NDQz</cookie><cookie name="cG9ydGFsT3BlbkZseW91dA=="></cookie><cookie name="SlNFU1NJT05JRA==">MDAwMHdFZnJpbU5FdG5oVmk4eFFpR0FoUzBEOjE0ZmlmZzB1NA==</cookie><cookie name="cG9ydGFsRmx5b3V0SXNPcGVu"></cookie></cookies><identity id="Om51bGw="><username>dWlkPW9tbml3Y20sb3U9dXNlcnMsbz1jbWw=</username><type>wp</type><password encrypt="no">null</password><groups><group id="dWlkPW9tbml3Y20sb3U9dXNlcnMsbz1jbWw="/><group id="YWxsIGF1dGhlbnRpY2F0ZWQgcG9ydGFsIHVzZXJz"/><group id="YWNsOmFsbGF1dGhlbnRpY2F0ZWQ="/><group id="Y249d3BzYWRtaW5zLG91PWdyb3VwcyxvPWNtbA=="/><group id="Y249d2NtYWRtaW5zLG91PWdyb3VwcyxvPWNtbA=="/></groups><properties><property name="aclvl">MQ==</property><property name="enable">dHJ1ZQ==</property><property name="connectionid">MTMwNjE5MzQxNDA1OTAwMjQ3OTgyNDA2Ng==</property><property name="crwid">Y29sXzk4MTAwLldDTV81MjUxMA==</property><property name="spaceid">Q3Jhd2xlcldwc19XQ00xMzA2MTkzMjI1ODg5</property><property name="ssoenabled">ZmFsc2U=</property></properties></identity></identities>'
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - getSortPoolSize = 3000
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - getResultCategoriesDetailLevel = -1
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - getSynonymExpansionMode = -14
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - getLinguisticMode = -18
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - result range = 0-0
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - isSiteCollapsingEnabled = false
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - isPredefinedLinksEnabled = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - isSpellCorrectionEnabled = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 0 type = -4, isReturned = false
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 1 type = -9, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 2 type = -1, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 3 type = -3, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 4 type = -8, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 5 type = -10, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 6 type = -7, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 7 type = -2, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 8 type = -6, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - attribute #: 9 type = -11, isReturned = true
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - query property name: FacetResultSize = 16
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - query property name: SummaryLength = 100
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - query property name: ShingleDuplicateDetection = Yes
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - query property name: FacetResultDepth = 2
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction prepareFacetedQuery
INFO: prepareQuery - returning
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction search
INFO: search - submitting the search to the search process
May 25, 2011 1:01:54 PM com.ibm.es.api.srv.actions.FacetedSearchAction executeRequest
INFO: executeRequest - search process returned 0 available results

Can someone please help with suggestions on where to look next?
Updated on 2011-09-14T15:31:18Z at 2011-09-14T15:31:18Z by reddz
  • SystemAdmin
    SystemAdmin
    2014 Posts

    Re: Omnifind 9.1.0.2 - Portal 6.0.1.2 secure search not working

    ‏2011-05-25T03:07:44Z  
    The DumpIndex output is

    $sec$ldportweb01:25330:
    (uid=wpsadmin,ou=users,o=cml|1|0 ]
    (uid=smcburne,ou=users,o=cml|1|0 ]
    (all authenticated portal users|1|0 ]
    (cn=wcmadmins,ou=groups,o=cml|1|0 ]
    (cn=wpsadmins,ou=groups,o=cml|1|0 ]
    (anonymous portal user|1|0 ]

    I've replaced the [ with ( to get this to post.
  • reddz
    reddz
    23 Posts

    Re: Omnifind 9.1.0.2 - Portal 6.0.1.2 secure search not working

    ‏2011-09-14T15:31:18Z  
    Hi all,

    Wanted ur help,
    we are have crawled WCM 7.0 using Seed list Crawler.I have created secured collection also.
    But when i crawl & checked whether respective ACLS are getting indexed using dumpindex -<col_id> --security command. It is returning Security is off.

    I have attached seedlist for reference
    Also Which tag in Seedlist exposes ACL Information