InfoPath Dev

I have a form with qrules that works as a sandboxed solution but the qrules do not work as an admin approved solution. 

Unfortunately, in our evironment, we will need to have the form published as an Admin Approved solution.  We're still evaluating qrules (trial) and have not purchased it yet due to this issue.  We appreciate any help the forum users may be able to provide.

As mentioned previously, when the form is executed as a sandboxed solution, the qrules data connections submit successfully to the SharePoint List.  When we take the same form and publish it as an Admin Approved form and then execute the qrules data connections do not work correctly.

There are no SSL connections, everything is http.

Here is the error from the form:

Result:  <null>

Success:  <null>

Error: Failed to submit to SharePoint. URL = 'http://mysite.com/sites/hr/_vti_bin/lists.asmx'.

Where "mysite.com" is a fictitious domain name.

I've attached the template.

We appreciate any help that you may be able to provide.

Hi, there -- I know I've asked this before, but I think last time it was in a scenario where you were using https:

Can you call other SharePoint web service methods from your browser form in your environment? What about CheckOutFile (which I know you and I talked about / tried in a previous form and I think in your https enviro)? I really think you need to verify that SharePoint web service methods are working in your environment from browser forms first ....

Can you remind me how to do that.  I remember doing something from my computer and I was able to see the page successfully.  Do I need to do this from the server instead?

To answer your question (since I did not answer it previously).  We've abandoned https and are strictly using http.

Add a data connection to your form that receives data. Use the lists webservice: http://myserver/_vti_bin/lists.asmx and select the CheckOutFile method. The query parameters are:

pageUrl
A string that contains the full path to the document to be checked out.

checkoutToLocal
A string containing "true" or "false" that designates whether the file is to be flagged as checked out for offline editing.   lastmodified
A string in RFC 1123 date format representing the date and time of the last modification to the file; for example, "20 Jun 1982 12:00:00 GMT".

Leave lastmodified blank. Set pageUrl to an existing library document, set checkoutToLocal to false.

Set the query to not run on load. Add the query and data fields to your form, and add a button that runs the query. Set postback to always on your controls. Make sure this all works in client first, then publish up as an admin approved tempate.

Worked fine from my client.  The file was checked out.

Uploaded as an admin form.  Tried from the browser

Error 5566

The following query failed: CheckOutFile (User: 0#.w|corporate\simpsonc, Form Name: SDTP21, IP: , Connection Target: , Request: http://mysite.com/sites/hr/_layouts/FormServer.aspx?XmlLocation=/sites/hr/SDTP/SIMPSON_ CHARLES LESLIE.xml&Source=http://partner.corporate.act.org/sites/hr/SDTP/Forms/MyItems.aspx?InitialTabId=Ribbon%252EDocument&VisibilityContext=WSSTabPersistence&DefaultItemOpen=1, Form ID: urn:schemas-microsoft-com:office:infopath:SDTP21:-myXSD-2011-05-29T17-56-43 Type: DataAdapterException, Exception Message: The remote server returned an error: (401) Unauthorized. The remote server returned an error: (401) Unauthorized.)

Searching on this brought me to this KB on specifying host names or disabling loopback: http://support.microsoft.com/?scid=kb;en-us;896861&x=14&y=17

Yeah, we have already disabled the loopback check during our SharePoint installation.  I just checked and verified it in the registry.

I wonder why it works from the client but not from the browser.

I think the browser handles permissions differently than the client... I'm going to ask Clayton Cobb if he knows a solution for this.

It is very common for data connections not to work in the browser even if they work in the Filler, because Filler calls are made from your workstation as you.  Browser data calls are made by the WFE from the server as the app pool that impersonates you.

Correct me if I'm wrong, but didn't you say this was working when in the sandbox but not as admin-approved?  Does this mean that this exact solution works in the browser when published to the sandbox?  I thought that was what your original post was saying, so please correct me if I'm wrong.  If it works in the browser in the sandbox but not as admin-approved, then it's a much different situation than what I'm expecting.

If it doesn't ever work in the browser, then it's an authentication issues, which is what the 401 is telling you.  That is typically a Kerberos issue.  Do you have multiple WFEs by chance?

Yes.  In sandboxed mode this works from the browser.

I did turn on verbose logging and now I have more information on the error during the attempt to checkout the document:

____SQL Query Count=4 5887e041-a103-4207-8af1-97a0956737fd
____Execution Time=87.422664834206 5887e041-a103-4207-8af1-97a0956737fd
____Current User=i:0#.w|nt authority\iusr 5887e041-a103-4207-8af1-97a0956737fd
____WebPart Events Offsets=0 5887e041-a103-4207-8af1-97a0956737fd
____Service Calls=0 5887e041-a103-4207-8af1-97a0956737fd
____Page Checkout Level=Published 5887e041-a103-4207-8af1-97a0956737fd
____Current SharePoint Operations=1 5887e041-a103-4207-8af1-97a0956737fd
____Critical Events=0 5887e041-a103-4207-8af1-97a0956737fd
____Log Correlation Id=5887e041-a103-4207-8af1-97a0956737fd
Ending correlation.
Access Denied: Authentication is required. 
Web Request:  WebException Caught
Web Request:  Copying response to DOMs
SQM: Datapoint id 4888 marked as Increment datapoint.
Web Request:  Copying response to DOMs
Web Request: Ends url=http://mysite.com/sites/hr/_vti_bin/lists.asmx action=http://schemas.microsoft.com/sharepoint/soap/CheckOutFile
WebServiceQuery: End
The following query failed: CheckOutFile (User: 0#.w|corporate\simpsonc, Form Name: SDTP21, IP: , Connection Target: , Request: http://mysite.com/sites/hr/_layouts/FormServer.aspx?XsnLocation=http://mysite.com/sites/hr/FormServerTemplates/SDTP21.xsn&SaveLocation=http://mysite.com/sites/hr/SDTP&Source=http://mysite.com/sites/hr/SDTP/Forms/MyItems.aspx?InitialTabId=Ribbon%252EDocument&VisibilityContext=WSSTabPersistence&DefaultItemOpen=1, Form ID: urn:schemas-microsoft-com:office:infopath:SDTP21:-myXSD-2011-05-29T17-56-43 Type: DataAdapterException, Exception Message: The remote server returned an error: (401) Unauthorized. The remote server returned an error: (401) Unauthorized.)
Adding event 5566 (category: Runtime - Data Connections, product: InfoPath Forms Services) to spam monitoring list
Calling GlobalStorage.SetItem with index LastExceptionLogged value type DataAdapterException.
PostbackPage.PlayEventLog:http://mysite.com/_layouts/Postback.FormServer.aspx finished in:00:00:00.1288989.

 It looks like "Access Denied: Authentication is required" is coming after it says "Current User=i:0#.w|nt authority\iusr" and all of this is before it mentions my credentials "The following query failed: CheckOutFile (User: 0#.w|corporate\simpsonc"

Go to the IIS settings of the server, click on this site, click Authentication, then disable ASP.NET authentication and try it again.

If I disable ASP.NET authentication, then would my external users who use FBA still be able to authenticate?

I don't know - you never mentioned FBA and external users that I know of..

You'll have to test it.