Issues reported with the MCMS security update (updated: 17.04.2007)

Stefan Goßner posted this article in his blog

Customers reported the following problems with the MCMS security update:

Issue 1

Symptoms:

• Resource Gallery Items show up as red-X after installing the update
  
• the DCA does not start
  
• Site Manager won’t start and throws an error indicating a missing satellite dll (NrMsgRes.dll) when done locally.
  
• Site Deployment results in an unspecified XML parser error when done from a remote machine.

Reason:

• The fix will overwrite certain registry keys underneath HKLM\NCompass and point them to C:\...

Workaround:

• If the server portion of CMS is installed:
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\CmsInstallLocation
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\SatelliteDLL
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\Resolution Content Server\dir
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\Resolution Content Server\Database Manager\PhysicalExecPrefix
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\Resolution Content Server\Database Manager\PhysicalReadPrefix
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\MCMS\EventMessageFile
  
  
• If the client portion is installed:
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\NCompass Resolution Client\Dir
  
  
• if Site Stager is installed:
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\Staging Server\ExePath
  HKEY_LOCAL_MACHINE\SOFTWARE\NCompass\Staging Server\LogsDirectory
  

Issue 2

Symptom:

• The following error message shows up on the CMS site:
  
  Description: Could not load file or assembly
  'Microsoft.ContentManagement.Common, Version=5.0.1200.0, Culture=neutral,
  PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system
  cannot find the file specified.
  Severity: 5
  Source: AEJavaProxy
  Debug info: N/A
  Extra info: N/A
  Client Source: Login::ctlLogin_Click
  Recommended Action: N/A

Reason:

• in some situations the fix seems to remove the Microsoft.ContentManagement.Common dll from the GAC.
   

Workarounds

• manually add the DLL to the GAC.

Issue 3

Symptom:

• the fixes addressed by the hotfixes 923755 and 914782 show up again after installing the security fix.

Reason:

• the security fix reverts the fixed files to the SP2 version 

Workarounds

• install the hotfixes again after installing the security fix.

MCMS Ad Rotator Control has been adapted for MOSS 2007

William Cornwill has published an article on how to modify the MCMS AdRotator control to work with MOSS 2007.

Support for changes to the databases that are used by Office server products

The Microsoft Office server products that are listed in the "Applies to" section store data in Microsoft SQL Server databases. These products use various stored procedures for regular processing. Therefore, the Microsoft SQL Server databases are important to the successful operation of these products.
Read More

Security fix for MCMS 2001 and 2002 has been released (Microsoft Security Bulletin MS07-018)

Microsoft release a security update for MCMS 2001 and 2002, This update resolves two newly discovered, privately reported vulnerabilities. Each vulnerability is documented in the "Vulnerability Details" section of this bulletin.
The 2 problems are
1 - CMS Memory Corruption Vulnerability
2 - CMS Cross-Site Scripting and Spoofing Vulnerability
Read More

Again Win2003 with CMS Arabic problems

Radwa came to me asking for a problem she has on a live site, the client added the posts with Arabic names. OpppppppS , now they can’t browse it, I mentioned this problem before http://shadiesm.blogspot.com/2006/11/arabic-post-name-problems-with-windows.html , the problem is Win2003 cant parse the Arabic encoding in right format to CMS so it can’t open it, the solution is to open the posts with GUID not post.url.

Backup the CMS DB (SDO file)

a. Open the root folder in the IIS
b. You will find a file called web.config cut this file and paste it on the desk top (please note that this will make the site down so you have to put under maintenance page during the backup operation)
c. Open the site manager
d. From the file menu choose package > export
e. A new window will appear click include
f. In the end of this window there is button called browse click on it and select the destination to save the file
g. After that click export
h. A new small window will open click yes to view the report
i. A new page will open with a report about all the objects make sure in the end of it that all channels, templates and resources are exported completely
j. Click export again this will export the database.
k. Go to the desktop and take the web.config file then place it again on the root

Congratulations Hus for MVP for the second time

Man, you always did great in serving the community so I just wanna congratulate you for taking the MVP for the second time, really you deserve it and I’m waiting for more and more from you.

Microsoft Content Management Server MVP

I got a confirmation mail that I got the MVP for Microsoft Content Management Server 2002 , Really I’d like to thank all the people who helped me , special thanks to Hanan Abdel Meguide , Mohamed Wahby , Khaled Hnidak, Nader Torki and Hussien Zahran.
Thank you all and from success to another soon isa