I have a strange issue with the SDL Media Manager connector on 2013 SP1. I've had it all installed and working perfectly until recently.
The CME is sitting behind SSO and Core Services/Content Porter work correctly after being configured to authenticate against an LDAP directory. However the configuration of Core Service for LDAP seems to inadvertently knocked out Media Manager and for the life of me I can not figure out why. The Media Manager logs seem to state it can't find the certificate in the certificate store, yet no access rights have been changed.
Exception has been thrown by the target of an invocation. Unable to load the configuration from Scope number 1 in the configuration file D:\Apps\SDL\Tridion\config\TridionSTS.xml. Unable to load the certificate from the element "SigningCertificate". No valid certificate was found.
StackTrace Information Details:
Server stack trace: at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter) at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc) at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object ins, Object outs, TimeSpan timeout) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at : at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) at Tridion.ExternalContentLibrary.Service.Client.ISessionAwareEclService.GetList(String parentItemUri, Int32 pageIndex, EclItemTypes itemTypes, IEnumerable`1 basedOnSchema) at Tridion.ExternalContentLibrary.UI.Model.Services.GeneralImpl.GetList(String id, Int32 pageIndex, Filter filter, Int32 columns) at Tridion.ExternalContentLibrary.UI.Model.Services.General.GetList(String id, Int32 pageIndex, Filter filter, Int32 columns) at SyncInvokeGetList(Object , Object , Object ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object inputs, Object& outputs) at Tridion.Web.UI.Core.Extensibility.DataExtenderOperationInvoker.Invoke(Object instance, Object inputs, Object& outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)
My assumption is, because Core Services is now using LDAP authentication from the SSO implementation it's caused Media Manager to try using a different username to access the certificates. Unfortunately the server itself is not part of a domain so adding that user would be tricky, but really after some ideas to atleast identify what the user is for which the MM connector is using.