steps to set fba for share point 2010

19
Steps to set FBA for SharePoint 2010 1. Go to “C:\Windows\Microsoft.NET\Framework\v2.0.50727”. 2. Open file “aspnet_regsql.exe” (with Run as Administrator). I. You will get an installation form. Hit “Next” button.

Upload: qwerasdf

Post on 21-Feb-2015

32 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Steps to Set FBA for Share Point 2010

Steps to set FBA for SharePoint 2010

1. Go to “C:\Windows\Microsoft.NET\Framework\v2.0.50727”.

2. Open file “aspnet_regsql.exe” (with Run as Administrator).

I. You will get an installation form. Hit “Next” button.

Page 2: Steps to Set FBA for Share Point 2010

II. Click on “Configure SQL Server for application services” then hit “Next” button.

Page 3: Steps to Set FBA for Share Point 2010

III. Now provide server name to connect & install new database for Membership. Now hit “Next” button.

Page 4: Steps to Set FBA for Share Point 2010

IV. Now you get a summary page on which you will get server name & its new database name called “aspnetdb”. Click on “Next” button.

Page 5: Steps to Set FBA for Share Point 2010

V. Now database has been created. Click on “Finish” button.

3. Install FBA tool.

4. Create a new Site collection (suppose we called it “A”).

5. Extend this site (Suppose we called it “B”).

I. Open Central Administration.

II. Click on Application Management.

III. Click on Manage Web application.

Page 6: Steps to Set FBA for Share Point 2010
Page 7: Steps to Set FBA for Share Point 2010

IV. Click on “Site A” & then hit Extend button on ribbon.

1. Click on Create a new IIS web site.

2. Provide name & port number (optional).

3. Provide host header (optional)

4. Select Anonymous Access to –No

5. Use Secured Socket layer – No

Page 8: Steps to Set FBA for Share Point 2010

6. Check on Enable Windows Authentication. Check On Integrated windows authentication & select “NTLM”.

Page 9: Steps to Set FBA for Share Point 2010

7. Check Enable Forms Based Authentication. In “ASP.NET Membership provider name” put “SqlMember” & in ASP.NET Role manager

name put “SqlRole”.

Page 10: Steps to Set FBA for Share Point 2010

8. Select – Default Sign in Page.

9. Select Zone.

10. Click OK.

11. After creating this site, Test this site.

6. Make changes in web.config files.

I. Open inetmgr.

II. Explore Site A & take back up of web.config file.

1. Open web.config file.

2. Put this connection string just after </configSections>

<connectionStrings>

Page 11: Steps to Set FBA for Share Point 2010

<clear />

<add name="AspNetSqlMembershipProvider" connectionString="data source=test-

share3\sharepoint;Integrated Security=SSPI;Initial Catalog=aspnetdb"

providerName="System.Data.SqlClient" />

</connectionStrings>

3. Search for entry <PeoplePickerWildcards> & put this entry within this tag.

<add key="SqlMember" value="%" />

<add key="SqlRole" value="%" />

4. Search for entry <membership> & < roleManager> replace whole entry with :

<membership defaultProvider="i" userIsOnlineTimeWindow="15" hashAlgorithmType="">

<providers>

<clear />

<add connectionStringName="AspNetSqlMemberShipProvider" enablePasswordRetrieval="true"

enablePasswordReset="true" requiresQuestionAndAnswer="true" passwordAttemptWindow="10"

applicationName="/" requiresUniqueEmail="false" passwordFormat="Encrypted" name="SqlMember"

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0,

&#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<add name="i"

type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider,

&#xD;&#xA;Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral,

PublicKeyToken=71e9bce111e9429c" />

</providers>

</membership>

<roleManager enabled="true" cacheRolesInCookie="false" cookieName=".ASPXROLES"

cookieTimeout="30" cookiePath="/" cookieRequireSSL="false" cookieSlidingExpiration="true"

cookieProtection="All" defaultProvider="c" createPersistentCookie="false"

maxCachedResults="25">

<providers>

<clear />

<add connectionStringName="AspNetSqlMemberShipProvider" applicationName="/"

name="AspNetSqlRoleProvider" type="System.Web.Security.SqlRoleProvider, System.Web,

Version=2.0.0.0, &#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<add applicationName="/" name="SqlRole"

type="System.Web.Security.WindowsTokenRoleProvider, System.Web, Version=2.0.0.0,

&#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<add name="c"

type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider,

&#xD;&#xA;Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral,

PublicKeyToken=71e9bce111e9429c" />

</providers>

</roleManager>

Page 12: Steps to Set FBA for Share Point 2010

5. Now save & close this web.config file.

III. Explore Site B (Extended new site) & take back up of web.config file.

1. Open web.config file.

2. Put this connection string just after </configSections>

<connectionStrings>

<clear />

<add name="AspNetSqlMembershipProvider" connectionString="data source=test-

share3\sharepoint;Integrated Security=SSPI;Initial Catalog=aspnetdb"

providerName="System.Data.SqlClient" />

</connectionStrings>

3. Search for entry <PeoplePickerWildcards> & put this entry within this tag.

<add key="SqlMember" value="%" />

<add key="SqlRole" value="%" />

4. Search for entry <membership> & < roleManager> replace whole entry with :

<membership defaultProvider="i" userIsOnlineTimeWindow="15" hashAlgorithmType="">

<providers>

<clear />

<add connectionStringName="AspNetSqlMemberShipProvider" enablePasswordRetrieval="true"

enablePasswordReset="true" requiresQuestionAndAnswer="true" passwordAttemptWindow="10"

applicationName="/" requiresUniqueEmail="false" passwordFormat="Encrypted" name="SqlMember"

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0,

&#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<add name="i"

type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider,

&#xD;&#xA;Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral,

PublicKeyToken=71e9bce111e9429c" />

</providers>

</membership>

<roleManager enabled="true" cacheRolesInCookie="false" cookieName=".ASPXROLES"

cookieTimeout="30" cookiePath="/" cookieRequireSSL="false" cookieSlidingExpiration="true"

cookieProtection="All" defaultProvider="c" createPersistentCookie="false"

maxCachedResults="25">

<providers>

<clear />

<add connectionStringName="AspNetSqlMemberShipProvider" applicationName="/"

name="AspNetSqlRoleProvider" type="System.Web.Security.SqlRoleProvider, System.Web,

Version=2.0.0.0, &#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

Page 13: Steps to Set FBA for Share Point 2010

<add applicationName="/" name="SqlRole"

type="System.Web.Security.WindowsTokenRoleProvider, System.Web, Version=2.0.0.0,

&#xD;&#xA;Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

<add name="c"

type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider,

&#xD;&#xA;Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral,

PublicKeyToken=71e9bce111e9429c" />

</providers>

</roleManager>

5. Now save & close this web.config file.

IV. Explore Central Administration Site & take back up of web.config file.

1. Open web.config file.

2. Put this connection string just after </configSections>

<connectionStrings>

<clear />

<add name="AspNetSqlMembershipProvider" connectionString="data source=test-

share3\sharepoint;Integrated Security=SSPI;Initial Catalog=aspnetdb"

providerName="System.Data.SqlClient" />

</connectionStrings>

3. Search for entry <PeoplePickerWildcards> & put this entry within this tag.

<add key="SqlMember" value="%" />

<add key="SqlRole" value="%" />

4. Search for entry <membership> & < roleManager> replace whole entry with :

<roleManager enabled="true" cacheRolesInCookie="false" cookieName=".ASPXROLES" cookieTimeout="30"

cookiePath="/" cookieRequireSSL="false" cookieSlidingExpiration="true" cookieProtection="All"

defaultProvider="AspNetWindowsTokenRoleProvider" createPersistentCookie="false"

maxCachedResults="25">

<providers>

<clear />

<add connectionStringName="AspNetSqlMembershipProvider" applicationName="/" name="SqlRole"

type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.0.0,&#xD;&#xA;

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

Page 14: Steps to Set FBA for Share Point 2010

<add applicationName="/" name="AspNetWindowsTokenRoleProvider"

type="System.Web.Security.WindowsTokenRoleProvider, System.Web, Version=2.0.0.0,&#xD;&#xA;

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

</providers>

</roleManager>

<membership defaultProvider="SqlMember" userIsOnlineTimeWindow="15" hashAlgorithmType="">

<providers>

<clear />

<add connectionStringName="AspNetSqlMembershipProvider" enablePasswordRetrieval="false"

enablePasswordReset="true" requiresQuestionAndAnswer="true" passwordAttemptWindow="10"

applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed" name="SqlMember"

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0,&#xD;&#xA;

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

</providers>

</membership>

5. Now save & close this web.config file.

Page 15: Steps to Set FBA for Share Point 2010

V. Now click on “SharePoint web services” & then click on “SecurityTokenServiceApplication” and explore it.

Page 16: Steps to Set FBA for Share Point 2010

1. Search for tag </system.net> & paste this just after </system.net> tag

<connectionStrings>

<clear />

<add name="AspNetSqlMembershipProvider" connectionString="data source=test-

share3\sharepoint;Integrated Security=SSPI;Initial Catalog=aspnetdb"

providerName="System.Data.SqlClient" />

</connectionStrings>

<system.web>

<membership defaultProvider="SqlMember">

<providers>

<add connectionStringName="AspNetSqlMembershipProvider"

enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true"

passwordAttemptWindow="10" applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed"

name="SqlMember" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0,

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

</providers>

</membership>

<roleManager defaultProvider="SqlRole" enabled="true">

<providers>

<add connectionStringName="AspNetSqlMembershipProvider" applicationName="/"

name="SqlRole" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.0.0,

Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />

</providers>

</roleManager>

</system.web>

2. Now Save & Close this. Web.config file.

7. Go to Center Administration, Click on Manage Web Application.

Page 17: Steps to Set FBA for Share Point 2010

8. Select Site “A” & Click on User Policy.

I. You will get a dialog box

II. Click on “Add Users”, you will see the below dialog box, which will ask you to select the zone for which you want to add the users. Select zone

and click next

Page 18: Steps to Set FBA for Share Point 2010

III. In the next window, “Choose Users” then “Choose Permission” for those users and click Finish.

Page 19: Steps to Set FBA for Share Point 2010

Important Note: Don’t forget to grant “dbOwner” access to NT/AUTHORITY user on aspnetdb database.