Skip to content

WSS 3.0 Search Error 2436 on SBS 2008

Cause

You receive above warning events because WSS 3.0 Search service is trying to crawl the WSS content via the URL – remote.domain.com, which is mentioned in above event.  Windows Small Business Server 2008 includes a loopback check security feature that is designed to help prevent reflection attacks on your computer.  Therefore, Kerberos authentication on the Default Content Access Account fails if this URL does not match the local computer name and is not registered in the system as an additional Service Principle Name (SPN).

Resolution

To resolve this issue, it is recommended to manually register the URL in your system. To register this URL, please use the following steps,

Note: We recommend that first backup your registry settings.

Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
Right-click MSV1_0, point to New, and then click Multi-String Value.
Type BackConnectionHostNames, and then press ENTER.
Right-click BackConnectionHostNames, and then click Modify.
In the Value data box, type the URL mentioned in the above warning event (e.g., remote.domain.com), and then click OK.
Quit Registry Editor, and then restart the IIS service.

You may experience SharePoint Search issue when browsing https://companyweb on SBS 2008 server and specifically, you are seeing below 2436 errors in your Application event log every several minutes.

Log Name:      Application
Source:        Windows SharePoint Services 3 Search
Date:          4/29/2009 4:20:05 PM
Event ID:      2436
Task Category: Gatherer
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      server.domain.local
Description:
The start address <sts3s://remote.Domain.com:987/contentdbid={d4078aab- ce82-4581-8d4f-973e1e6eac23}> cannot be crawled.

Context: Application 'Search index file on the search server', Catalog 'Search'

Details:
Access is denied. Check that the Default Content Access Account has access to this content, or add a crawl rule to crawl this content.   (0x80041205)

No comment yet, add your voice below!


Add a Comment

Your email address will not be published. Required fields are marked *