Searches in Compliance Accelerator or Discovery Accelerator fails with 'Access Denied'

book

Article ID: 100034184

calendar_today

Updated On:

Description

Error Message

Event log contains the error with Event ID 297

Type : Error
Event : 297
Source : Accelerator Service Processor
Category : None
APP AT - Customer ID: 2 - Error processing Vault to Search off the queue: Searching Vault Thread - worker thread for index server: 1 (0)
Vault ID: 30
Number of tries: 5
Cause: Access is denied.  (0x80070005)

Dtrace of AcceleratorService contains:
(AcceleratorService)    <4896>    EV:L    WinHttpRequest::OnCallback. WINHTTP_CALLBACK_STATUS_HEADERS_AVAILABLE.
(AcceleratorService)    <4896>    EV:L    WinHttpRequest::OnCallback. WINHTTP_CALLBACK_STATUS_HEADERS_AVAILABLE. Status code=403
(AcceleratorService)    <4896>    EV:H    WinHttpRequest::OnCallback. HTTP request returned 'access denied' or 'forbidden'.  Is the service running?
(AcceleratorService)    <4896>    EV:H    WinHttpRequest::OnCallback exit. ERROR HR=0x80070005.
(AcceleratorService)    <4896>    EV:M    WinHttpRequest::Callback from WinHttp. pRequest->OnCallback failed with HR=0x80070005. Calling pRequest->OnResponseComplete.
(AcceleratorService)    <4896>    EV:M    IndexQueryServerRequest: OnResponseComplete - HR=Access is denied.  (0x80070005)
(AcceleratorService)    <256>     EV:L    IndexQueryServerRequest: WaitForSingleObject returned 0.
(AcceleratorService)    <256>     EV:M    Response received. Result = Access is denied.  (0x80070005), Status = 403
(AcceleratorService)    <256>     EV:H    CIndexQueryServerSearch::Search2. Request FAILED HR=0x80070005.
(AcceleratorService)    <256>     EV:L    WinHttpRequest::Shutdown entry. Closing Winhttp handle



Cause

This issue could be caused if the DA or CA servers do have a winhttp proxy defined, where the output of the command 'netsh winhttp show proxy'  would produce a similar output:
Current WinHTTP proxy settings:

    Proxy Server(s) :  proxyserver.ev.local:8080
    Bypass List     :  (none)


Resolution

In this scenario it is possible to either reset the winhttp proxy or configure a bypass-list (refer to Microsoft documentation https://technet.microsoft.com/en-us/library/cc731131(v=ws.10).aspx)

Proxy reset:

1. From a command prompt with administrator privileges type the command ' netsh winhttp reset proxy '.
2. The command produces the output:
Current WinHTTP proxy settings:

    Direct access (no proxy server).

3. Restart the Enterprise Vault Accelerator Manager Service (EVAMS).
4. Verify / resubmit the previously failing searches.

Configure bypass-list (only in case the winhttp proxy reset is not possible):

1. From a command prompt with administrator privileges type the command 'netsh winhttp set proxy proxy-server="proxyserver.ev.local:8080" bypass-list="*.ev.local"'
2. The command produces the output:
Current WinHTTP proxy settings:

    Proxy Server(s) :  proxyserver.ev.local:8080
    Bypass List     :  *.ev.local

2. Restart the EVAMS.
3. Verify / resubmit the previously failing searches

Issue/Introduction

Searches in Compliance Accelerator (CA) or Discovery Accelerator (DA) fails with "Access Denied" after having been in "Searching" for hours