none
/_vti_bin/client.svc/ProcessQuery POST 401 RRS feed

  • Question

  • All,

    This issue is killing me and I'm quite lost now, I've run procmon and I can't see any file level denies, I'm watching the developer console on IE and keep seeing POST's to /_vti_bin/client.svc/ProcessQuery return a 401, I've seen the same thing using Kerberos, Claims, Forms, NTLM.

    Navigating http://intranet.pf/_vti_bin/client.svc just throws up authentication prompts and rejects my login until a 401. 

    Beyond lost, would anyone have a helpful hint?


    Simon Stearn - Militant South - Agile Architecture

    Thursday, December 13, 2012 5:47 PM

All replies

  • Hi Simon,

    you can also access by using http://intranet.pf/_api/client.svc. Did you try this?


    Raghavendra Shanbhag | Blog: www.SharePointColumn.com
    Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
    Disclaimer: This posting is provided "AS IS" with no warranties.

    Friday, December 14, 2012 4:25 AM
  • check this out http://msdn.microsoft.com/en-us/library/fp142385.aspx. Given below are the access points

    Few examples can be found here http://www.silver-it.com/node/113

    Area

    Access point

    Site

    http://server/site/_api/site

    Web

    http://server/site/_api/web

    User Profile

    http:// server/site/_api/SP.UserProfiles.PeopleManager

    Search

    http:// server/site/_api/search

    Publishing

    http:// server/site/_api/publishing


    Raghavendra Shanbhag | Blog: www.SharePointColumn.com
    Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
    Disclaimer: This posting is provided "AS IS" with no warranties.


    Friday, December 14, 2012 1:30 PM
  • Hi Raghavendra

    Sorry for my belated reply and thanks for yours, I just wanted to reaffirm that It's SharePoint making the call not me, for example, when I fist open the portal the  _vti_bin/client.svc is called and I get an authentication prompt that refuses to take my credentials ultimately ending in a 401 when I close the dialog.

    I did try the _api/client.svc and get the same authentication prompt, do you know where this might be secured? as obviously it's not on the file system and I've watched procmon for any IIS Access Denied's on the file system.

    Thanks

    Si


    Simon Stearn - Militant South - Agile Architecture

    Monday, December 17, 2012 8:41 AM
  • Ohh.. weired not sure though, i am able to access it perfectly fine, without any issues.

    Raghavendra Shanbhag | Blog: www.SharePointColumn.com
    Please click "Propose As Answer " if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
    Disclaimer: This posting is provided "AS IS" with no warranties.

    Monday, December 17, 2012 10:39 AM
  • I am seeing this error on a  List using Sharepoint 2013 (create new list, add item).  Screen Response Text

    is "Can not save item at this time", Fiddler shows a 401 on GET /_vti_bin/client.svc/ProcessQuery

    then a couple of 302's and finally:

    401 on GET /_windows/default.aspx?ReturnUrl=%2f_vti_bin%2fclient.svc%2fProcessQuery

    If I try to RENAME  a field I fall into this loop:

    GET /_vti_bin/client.svc/ProcessQuery  302 redirect to:

    /_login/default.aspx?returnUrl=%2f_vti_bin%2fclient.svc%2fProcessQuery

    This redirect gives back a 302 redirect to:

    /_windows/default.aspx?ReturnUrl=%2f_vti_bin%2fclient.svc%2fProcessQuery

    This redirects back to:

     /_vti_bin/client.svc/ProcessQuery

    And this looping continues until I see the on screen message

    Unexpected response from server.  The status code of response is '0'.  The status text of response is ''

    YOUR MOVE.  Thanks.


    Tuesday, January 8, 2013 3:16 PM
  • I realize I'm a little late to this thread but I had the same issue and there is really is no information out there on how to fix it.  This is what we did to get this working:

    1) Set up your environment for Kerberos as you normally would and make sure Kerberos works end to end.  This means that Anonymous and Forms authentication are disabled.  Don't forget that Kernel mode authentication must be enabled.

    2) Go back to IIS and enable Anonymous and enable Forms Authentication. 

    3) Don't change anything else about authentication configuration.

    But it has to be done in this order.  If you reverse the order or try to set this up hapzardly it will not work.  You will continue to suffer the credentials challenge.

    One thing I'd like to mention here as well is that we did have to alter the web.config.  In the appSettings section, we had to disable the key aspnet:AllowAnonymousImpersonation by setting it to false.

    Let me know if this helps anyone out there.

    • Proposed as answer by JorgeER Monday, March 11, 2013 4:34 PM
    Monday, March 11, 2013 4:24 PM
  • Basically what is happening is that services are asking for authentication.

    To fix: Open IIS Manager. 

    Inside Sharepoint-80 application select  _vti_bin. This is where the services are.

    On the right side double click on Authentication. Make sure that Basic, Digest, Forms, and Windows are disabled and Anonymous or ASP.NET Impersonation are Enabled.

    Friday, April 19, 2013 4:08 PM
  • While hardening SharePoint, I ran into this issue and thought I would pass along what I found for anyone else who finds themselves facing the same issue.

    The requirement that I working towards meeting was that "SharePoint Sites must not use NTLM". In order to meet this requirement, NTLM needed to be removed from the Windows Authentication Providers list for the Web Application and replaced with Negotiate . Once this change was implememented, SharePoint Designer would no longer connect the the Web Application.

    Using Fiddler and WireShare, I tracked the issue down to the request for /_vti_bin/client.svc; as Boris noted, the service was asking for authentication and could not or would not authenticate through Kerberos.

    In order to enable SharePoint Designer to connect to the site, I selected the _vti_bin folder in the Web Application and added NTLM to the Windows Authentication Providers list for this virtual directory. This corrected the problem for SharePoint Designer, however I'm still stuck with a virtual directory in the Web Application using NTLM.

     


    Kevin Scott

    Wednesday, January 29, 2014 3:03 PM
  • Direkt Calls to Client.svc are not supported. You have to choose the Client SharePoint Object Model (.NET Managed Code Assemblies, Silverlight Assemblies or Javascript)
    In SharePoint 2013 you can choose the REST API

    • Proposed as answer by lexschulz Wednesday, August 27, 2014 11:51 AM
    Wednesday, August 27, 2014 11:51 AM