https://login.veeam.com/en/oauth?client_id=nXojRrypJ8&redirect_uri=https%3A%2F%2Fwww.veeam.com%2Fservices%2Fauthentication%2Fredirect_url&response_type=code&scope=profile&state=eyJmaW5hbFJlZGlyZWN0TG9jYXRpb24iOiJodHRwczovL3d3dy52ZWVhbS5jb20va2IyODIxIiwiaGFzaCI6IjViMzdmZjZiLTQ1NDAtNDA4Ni04NmY5LTM1ZWM3YjBhYTAzYSJ9
1-800-691-1991 | 9am - 8pm ET
EN

“For security reasons DTD is prohibited in this XML document” error in Veeam Backup for Microsoft Office 365

Challenge

Any interactions with either SharePoint Online or OneDrive for Business within Veeam Backup for Microsoft Office 365 fail with “For security reasons DTD is prohibited in this XML document”

Cause

To communicate with SharePoint online Veeam Backup for Microsoft Office 365 uses Microsoft CSOM library.
When the library receives an authorization request it, among other things, tries to resolve and reach msoid.onmicrosoft.com and msoid.<your-organization-domain>.onmicrosoft.com.
Most internet service providers cannot resolve those names.
CSOM library can ignore those sites being unreachable and keep working on your request, but only if it has received an HTTP error code (e.g. 404, 500, 503 etc).
However, some ISPs redirect unresolved DNS calls to their own DNS helper page which then returns status code 200 OK.
The library tries to authenticate through this "helper" page and fails with error “For security reasons DTD is prohibited in this XML document”.

Solution

While the issue is out of Veeam’s support scope, there are a few workarounds you can try.
  1. Depending on your ISP you can request to have this DNS relay feature disabled.
  2. Add 2 records to C:\Windows\System32\drivers\etc\hosts binding msoid domain with localhost IP 127.0.0.1
    User-added image
  3. Add a CNAME record on your DNS server as seen below:
    User-added image
KB ID:
2821
Product:
Veeam Backup for Microsoft Office 365, Veeam Backup for Microsoft Office 365 Community Edition
Version:
2.0
Published:
2018-12-11
Last Modified:
2020-08-13
Please rate how helpful this article was to you:
5 out of 5 based on 1 ratings
Thank you for helping us improve!
An error occurred during voting. Please try again later.

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.
Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Spelling error in text

Knowledge base content request
By submitting, you agree that your personal data will be managed by Veeam in accordance with the Privacy Policy.

ty icon

Thank you!

We have received your request and our team will reach out to you shortly.

OK

error icon

Oops! Something went wrong.

Please go back try again later.