FAQs
Specific
Can the Security Pre-Trimmer be hosted on a separate server?
It is not recommended. There are content sources, such as Lotus Notes, that use Intersection ACLs, which requires that Group Expansion is executed in the same server where the content source is.
Reconfiguring the Security Pre-Trimmer
To reconfigure the Pre-Trimmer follow the next steps:
- Retrieve the current settings in the SharePoint Management Shell
PS C:\> $ssa = Get-SPEnterpriseSearchServiceApplication PS C:\> Get-SPEnterpriseSearchSecurityTrimmer -SearchApplication $ssa SearchApp : SearchServiceApplication Name=Search Service Application Id : 1 TypeName : AspireSecurityTrimmer.AspireSecurityPreTrimmer, AspireSecurityTrimmer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=e87e053e181b45ec Properties : ge~http://localhost:50505/groupExpansion~geTimeout~15000~claimIssuer~aspire~useDomain~false~ IsPrePhase : True CrawlRulePath : {0}{}
2. Remove the Security Pre-Trimmer using the Id from the previous step as Identity by running the following command:
Remove-SPEnterpriseSearchSecurityTrimmer -SearchApplication $ssa -Identity <id goes here>
3. Re-register the Security Pre-Trimmer with the necessary changes (i.e. increased timeout)
New-SPEnterpriseSearchSecurityTrimmer -Id 1 -TypeName "AspireSecurityTrimmer.AspireSecurityPreTrimmer, AspireSecurityTrimmer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=e87e053e181b45ec" -SearchApplication $ssa -Properties "ge~http://localhost:50505/groupExpansion~geTimeout~2000~claimIssuer~aspire~useDomain~false~"
Restart the SharePoint Search Host Controller service (spsearchhostcontroller) now.
Troubleshooting
Security Pre-Trimmer is never invoked
Solution
Overview
Content Tools