( 16 ) Office 2007 Create An Extranet Site With Forms Authentication
Download as DOC, PDF0 likes237 views
The document provides instructions for creating an extranet site that uses Forms Authentication in SharePoint. The steps include: 1) Creating an IIS web application and site collection for the extranet site. 2) Modifying the web.config files for the extranet site and Central Administration site to connect to the ASP.NET membership database. 3) Configuring authentication for the extranet site to use Forms Authentication and adding the first administrator user.
( 16 ) Office 2007 Create An Extranet Site With Forms Authentication
- 1. Lab 16: Create an Extranet Site Objectives After completing this lab, you will be able to: • Create an extranet site with Forms Authentication based on ASP.Net Membership and Role providers. • Modify web.config files of both Extranet and Office SharePoint 2007 Server Administration sites • Add the first Administrator user for the Extranet site using Form Authentication Prerequisites Before working on this lab, you must have: • Labs 1, 2, and 15 fully completed Scenario In this lab you will create a new site targeting your extranet audience(s). You will configure your extranet site to use Forms Authentication. Estimated time to complete this lab: 45 minutes Exercise 1 Create the Internet Web Application Create a new web application for the purpose of applying a different authentication provider. ∑ Open the Microsoft SharePoint 3.0 Central Administration site. 1. Login as Administrator and click “Start” on your desktop. 2. Select “All Programs” 3. Select “Microsoft Office Server” 4. Select “SharePoint 3.0 Central Administration” 5. Select “Application Management” 6. Click “Create or Extend Web Application”
- 2. Lab 16: Create an Extranet Site 7. Click “Create a new Web Application” In the Create New Web Application page… 8. In the Create a new IIS Web Site section, enter the following: IIS Web Site (section): Description: <your initials> Extranet Port: Keep the default Port (Write the port number here: __________ ) Host Header: leave blank Path: C:Inetpubwwwroot<your initials>Extranet Security Configuration (section): Authentication Provider: NTLM Allow Anonymous: Keep as is (No) Use Secure Sockets Layer (SSL): Keep as is (No) Load Balanced URL (section): Keep as is Application Pool (section): Create new application pool: <your initials> ExtranetAppPool Select a security account for this application pool: click the “Configurable” radio button Name: litwareincAdministrator Password: pass@word1 Reset Internet Information Services (section): Keep as is. Database Name and Authentication (section): Database Server Name: OS Database Name: WSS_Content_<your initials> Extranet Database Authentication: Windows Authentication Search Server: OS IMPORTANT: Before Clicking Ok – please verify that all options are configured properly as indicated above. This site will be deployed to another farm in a later exercise thus the needs to use your own initials for differentiation between you and the other attendees’ site. 9. Click Ok (takes about 3 – 4 min to complete) Once completed, the “Application Created” page appears. Exercise 2 Create the Internet web application’s site Collection Create a new site collection
- 3. Lab 16: Create an Extranet Site 3 1. In the “Application Created” page, click the “Create Site Collection” link. Make sure the Web Application is: http://os:<port number entered in step 8 of exercise 1 above> 2. In the Title and Description section enter the following: Title: <Your Initials>litware Inc. Extranet Site Description: This is the main Extranet site of the Litware Inc. fictitious company. Web Site Address section: Select Create site at this URL: (root) “/” Template Selection: Click on the “Publishing” tab and select the “Publishing Portal” template. Primary Site Collection Administrator: litwareincAdministrator (check mane to make sure it is entered correctly) Secondary Site Collection Administrator: litwareincbrianc (check mane to make sure it is entered correctly) Select a quota template: “no quota” (default). 3. Click OK 4. Click Ok again once the Top-Level site was successfully created. To test the new extranet site simply launch you browser and point it to: “http://os:<portnumber entered in step 8 of exercise 1 above”> Exercise 3 Prep the site for Form Authentication - Modify Web.Config of the Extranet site In this exercise you will modify the extranet site web.config to indicate to the web application that a new membership and role provider is available. ∑ We now need to modify web.config of the Extranet site to apply Forms Authentication. Note: The Extranet site web.config needs to be modified to allow the site to communicate to the new Memberships and Roles providers. 1. Locate the Extranet web.config file and edit it using Visual Studio. 2. Add the following 3. Click Start, Windows Explorer, navigate to the following folder C:Inetpubwwwroot<Your Initials>Extranet. 4. Right click on web.config and open with Visual Studio. 5. Insert the following lines in web.config between </configSections> and <SharePoint> tags. <connectionStrings> <remove name="LocalSqlServer" />
- 4. Lab 16: Create an Extranet Site <add name="LocalSqlServer" connectionString="Data Source=localhost;Initial Catalog=aspnetdb;Integrated Security=True" providerName="System.Data.SqlClient"/> <add name="AspNetSqlMembershipProvider" connectionString="server=OS; database=aspnetdb; Trusted_Connection=True" /> </connectionStrings> 6. Insert the following text after the </httpHandlers> tags to add the Membership and Role provider. <!-- Start - Added by “Your Initial Here” for Forms Authentication --> <membership defaultProvider="AspNetSqlMembershipProvider"> <providers> <remove name="AspNetSqlMembershipProvider" /> <add connectionStringName="AspNetSqlMembershipProvider" passwordAttemptWindow="10" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" applicationName="Extranet" requiresUniqueEmail="false" passwordFormat="Hashed" description="Stores and retrieves membership data from the Microsoft SQL Server database" name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </membership> <roleManager enabled="true" defaultProvider="AspNetSqlRoleProvider"> <providers> <remove name="AspNetSqlRoleProvider" /> <add connectionStringName="LocalSqlServer" applicationName="Extranet" description="Stores and retrieves roles data from the local Microsoft SQL Server database" name="AspNetSqlRoleProvider" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </roleManager> <!-- End Added by “You Initial Here” for Forms Authentication --> 7. Save the file.
- 5. Lab 16: Create an Extranet Site 5 Exercise 4 Modify web.config of the Central Administrator site The Central Administration site web.config will also need to be modified to allow it to select users from the newly created membership database and have them become Administrator on the Extranet site. The “Role” provider is not required and should not be use by The Central Administrator site. ∑ We now need to modify web.config of the Extranet site to apply Forms Authentication. 1. Locate the appropriate web.config file and edit it. 2. Add the following 3. Click Start, Windows Explorer, navigate to the following folder C:InetpubwwwrootwssVirtualDirectories4e4b73d4-1f9b-42f9-bd71-d931872a00c1. 4. Right click on web.config and open it up with Visual Studio. 5. Insert the following lines in web.config between </configSections> and <SharePoint> tags. <connectionStrings> <remove name="LocalSqlServer" /> <add name="LocalSqlServer" connectionString="Data Source=localhost;Initial Catalog=aspnetdb;Integrated Security=True" providerName="System.Data.SqlClient"/> </connectionStrings> 6. Add a second connection string to the access the new aspnetdb database. <add name="AspNetSqlMembershipProvider" connectionString="server=OS; database=aspnetdb; Trusted_Connection=True" /> 7. Insert the following text after the </httpHandlers> tags. Please notice that there is no Role provider required for the Administration site. <!-- Start - Added by “You Initial Here” for Forms Authentication --> <membership defaultProvider="AspNetSqlMembershipProvider"> <providers> <remove name="AspNetSqlMembershipProvider" /> <add connectionStringName="AspNetSqlMembershipProvider" passwordAttemptWindow="10" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" applicationName="Extranet" requiresUniqueEmail="false" passwordFormat="Hashed" description="Stores and retrieves membership data from the Microsoft SQL Server database" name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </membership> <!-- End Added by “You Initial Here” for Forms Authentication -->
- 6. Lab 16: Create an Extranet Site 8. Save the file and close Visual Studio and Windows Explorer. 9. Perform an IISRESET Exercise 5 Configure the Extranet site for anonymous access and assign the first Administrator. Form Authentication requires that the web application has anonymous access enabled. 1. In the Central Administration. (Start, All Programs, Microsoft Office Server, SharePoint 3.0 Central Administration) 2. Select “Application Management” (in the main Central Administration site) 3. In the “Application Security” section, select “Authentication Providers” Make sure the Web Application is “OS: <portnumber entered in step 8 of exercise 1 above”>” 4. Click “Default” just below the “Zone” in the main content section. 5. In the “Authentication Type” section, select Forms 6. Locate the “Anonymous Access” section and check the “Enable anonymous access” box. 7. In the “Membership Provider Name” section, enter the following in the text box “AspNetSqlMembershipProvider”. 8. In the “Role Manager Name” section, enter the following in the text box “AspNetSqlRoleProvider”. 9. In the “Client Integration” section, select No. 10. Click Save. Once saved the Authentication Providers page should now indicate “AspNetSqlMembershipProvider” under the Membership Provider Name. 11. To assign the first administrator user to the Extranet site, click on the “Application Management” in the breadcrumb, then click “Policy for Web Application” in the “Application security” section. 12. Make sure the Web Application is set to os:<portnumber entered in step 8 of exercise 1 above> and click Add Users. 13. In the Add Users page, Select the “Default” zone and click Next 14. Click Browse in the Choose Users section 15. In the “Add People and Groups” dialog box, enter the “musera” user and click search (right hand side magnifier glass image) 16. There should be only one account name displayer – musera. Click Add and then click OK. 17. Apply “Full Control – Has full control” to the “musera” user and click Finish.
- 7. Lab 16: Create an Extranet Site 7 You now added you first Administrator to your Extranet site! Exercise 6 Add the first user of the Form Authentication Provider In this exercise you will add the first user (from the membership provider) which will become the Administrator of the Extranet site. This user will then be able to add other users to different roles. 1. In the Central Administration. (Start, All Programs, Microsoft Office Server, SharePoint 3.0 Central Administration) under the “Application Security” section, select “Policy for Web Application”. 2. Click “Change Anonymous Access Permission Policy” link located in the left navigation. 3. In the “Anonymous User Policy” page, make sure the “Web Application” is http://os:<portnumber> 4. In the Select the Zones section, select the Default zone. 5. In the Permissions section, select Deny Write – Has no write access. 6. Click Save 7. Launch you browser and test the site access http://os:<port number> 8. In the form, enter “musera” as the user id and “pass@word1” as the password 9. Once authenticated, the home page of the extranet site will be displayed. 10. Browse the Extranet site 11. To add more users click the “Site Actions” link and add People and Groups by selecting any of the users you added in the aspnetdb membership database. 12. Close all Browser sessions Lab Completed!