On SharePoint side - other than enabling Kerberos at web application level - is there any other step needed? What?

Hi there
My Network guy says that he has taken all necessary steps to roll out Kerberos.
In the scope of SharePoint - I have extended our web application and this has Kerberos enabled (instead of NTLM). <-- Other than this any more steps are needed on SharePoint side? Which ones?
Thank you so much.

Microsoft has released the Kerberos configuration guide : http://www.microsoft.com/en-us/download/details.aspx?id=23176
note: it's long... 100 pages long.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Similar Messages

  • Business Catalyst will not allow me to add more than 11 items to Web Map? Is there any fix for this?

    Basically I cannot add more than 11 items on to a web app map. If I add more than 11 than the rest of the items appear of the coast of Africa for some reason. I am not sure why this happens but I was wondering if anyone else has had a similar problem and found a fix.

    Basically I cannot add more than 11 items on to a web app map. If I add more than 11 than the rest of the items appear of the coast of Africa for some reason. I am not sure why this happens but I was wondering if anyone else has had a similar problem and found a fix.

  • Primarily using the ipad air as an art portfolio but photos i upload in order get rearranged. other than changing the date they were shot, is there any solution to this? can they be reorganized in iphoto on the ipad?

    primarily using the ipad air as an art portfolio but photos i upload in order get rearranged. other than changing the date they were shot, is there any solution to this? can they be reorganized in iphoto on the ipad?

    You are welcome.
    Sorting and organizing photos on IOS devices is one of the things that really need to be improved. It looks like the developers simply did not expect the users to want to keep large photo libraries on an IOS device, where the ordering would matter. I'd send feedback to the developer team, so that they see, what the users want and need:
    You can use this form:  Apple - iPhoto - Feedback

  • How to grant anonymous access on sharepoint document library/list only not for web application

    Hello
    How to grant anonymous access on sharepoint document library/list only not for web application.I have claim based sharepoint site and has to be but i want to grant access on document library/list only.Is this possible?
    Thanks
    Rajesh Kumar "Changing the Face" can change nothing.But "Facing the Change" can change everything.

    As i am using following code
    SPSite site = SPContext.Current.Site;
                SPWeb web = SPContext.Current.Web;
                SPSecurity.RunWithElevatedPrivileges(delegate()
                    using (SPSite ospSite = new SPSite(site.ID))
                        using (SPWeb webs = ospSite.OpenWeb(web.ID))
                            // Enable anonymous access on web application
                            webs.AllowUnsafeUpdates = true;
                            SPUrlZone urlZone = SPUrlZone.Default;
                            SPWebApplication specifiedWebApplication = ospSite.WebApplication;
                            SPIisSettings iisSettings = specifiedWebApplication.IisSettings[urlZone];
                            //iisSettings.AuthenticationMode = AuthenticationMode.Windows;
                            iisSettings.AllowAnonymous = true;                       
                            specifiedWebApplication.Update();
                            // Get document library collection here and fetch all the document urls
                            SPDocumentLibrary docLib = (SPDocumentLibrary)web.Lists["Documents"];
                            if (docLib != null)
                                docLib.BreakRoleInheritance(true, false);
                                docLib.AllowEveryoneViewItems = true;
                                docLib.AnonymousPermMask64 = SPBasePermissions.ViewPages | SPBasePermissions.OpenItems | SPBasePermissions.ViewVersions
                                    | SPBasePermissions.Open | SPBasePermissions.UseClientIntegration | SPBasePermissions.ViewFormPages | SPBasePermissions.ViewListItems;
                                //docLib.AnonymousPermMask64 = SPBasePermissions.EmptyMask;
                                docLib.Update();
    Should working but getting access denied......i am totally stuck at this point.
    Rajesh Kumar "Changing the Face" can change nothing.But "Facing the Change" can change everything.

  • Why the ios7 made my iphone  4 slowest than before and it made it stucking , os there any way to downgrade it ? Please i need solution

    Why the ios7 made my iphone  4 slowest than before and it made it stucking , os there any way to downgrade it ? Please i need solution

    No way to downgrade... Apple does Not support downgrading.
    However... Try these Troubleshooting tips...
    Try this First...
    Press and Hold the Sleep/Wake Button and the Home Button at the Same Time...
    Wait for the Apple logo to Appear...
    Usually takes about 15 - 20 Seconds... ( But can take Longer...)
    Release the Buttons...
    http://support.apple.com/kb/ht1430
    2)  Connect to iTunes on the computer you usually Sync with and “ Restore “...
    http://support.apple.com/kb/HT1414
    Note:
    Also consider Deleting any Apps you have Purchased / Downloaded but you now never use..
    More Info here  >  http://news.cnet.Make your Old Phone run like New)

  • Create Server-side WebService un an ADF Fusion-Web application

    Hello,
    I have a Fusion Web application with a model having several entities / VOs.
    I saw in the Application Module options that I can expose some of the methods as a Web Service. Since I may need to use this model in a remote way (from another application for instance) I tried to do this.
    But once I add the module as a WS, it does not deploy anymore in test environment. Another point, I don't have the WSDL file to generate the client-side proxy.
    I can't find a how-to for helping me fix that. I think I forgot something but I don't know what.
    Any input ?

    I come back to this thread because I got an error while creating a WS from an application module...
    Steps I did :
    - Create a generic application
    - create a generic project
    - add ADF BC technology to project
    - add an entity to the project
    - add the related VO
    - create an application module with Java class
    - create a simple method (no parameter, return the string "OK")
    - in the AM interface, enable use of WS with addition of the single method
    When I right-click on the AppModuleServiceImpl.java and select "test web service" I got :
    [09:25:24 AM] java.lang.NullPointerException
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.jaxws.AssemblerProcessor.getClassNamesFromEjb(AssemblerProcessor.java:180)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.jaxws.AssemblerProcessor.processEjb(AssemblerProcessor.java:149)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.jaxws.JaxwsEjbAssembler.processEjb(JaxwsEjbAssembler.java:182)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.jaxws.JaxwsEjbAssembler.ejbAssemble(JaxwsEjbAssembler.java:152)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.cli.Processor.jaxwsEjbAssemble(Processor.java:630)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.cli.Processor.execute(Processor.java:327)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.cli.Processor.execute(Processor.java:230)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.Main.mainNoSystemExit(Main.java:84)
    [09:25:24 AM]      at oracle.j2ee.ws.tools.wsa.Main.main(Main.java:49)
    [09:25:24 AM] WARNING: Error while processing ejb-jar.xml for EJB module at "C:\JDeveloper\system11.1.1.3.37.56.60\o.j2ee\drs\TestWS\ModelEJB.jar".
    [09:25:24 AM] INFO: Unable to load annotation javax.interceptor.Interceptors for parsing.  The annotation is ignored.
    [09:25:24 AM] INFO: Unable to load annotation javax.interceptor.Interceptors for parsing.  The annotation is ignored.
    [09:25:24 AM] INFO: GenericWSWarAnnotationListener.parseAnnotatedClass Adding Servlet Mapping with URL pattern /AppModuleService for annotated WebService class  test.webservices.server.serviceinterface.AppModuleServiceImpl
    [09:25:25 AM] WSA process exited with code 0
    [09:25:25 AM] Deploying Application...I didn't do anything on EJB, do I have to configure anything ?

  • Why does my mac have 100 gb of "back up" and 90 gb of "other" memory used up when I have hardly anything on it. Is there any way to identify what those things are that is consuming so much memory?

    I have 25 gb of music. 20 gb of movies. 5 gb of pictures. 10 gb of apps. 102 gb of "back up. and 85 gb of "other. which leaves less than 70 gb open on my harddrive.. Why? What is that almost 200 gb of memory? How Do i pinpoint it? I use time machine and an external harddrive to back up my files so what is that? any answers or ideas?

    architecture12 wrote:
    I have 25 gb of music. 20 gb of movies. 5 gb of pictures. 10 gb of apps. 102 gb of "back up. and 85 gb of "other. which leaves less than 70 gb open on my harddrive.. Why? What is that almost 200 gb of memory? How Do i pinpoint it? I use time machine and an external harddrive to back up my files so what is that? any answers or ideas?
    Do not worry about the backups.  They will be deleted automatically after a week, or if your HD gets too full.  See #30 in Time Machine - Frequently Asked Questions.
    The "other" stuff is just that -- all sorts of things that don't fall into the few categories listed.  The operating system, system work files, plus lots of your stuff like documents, mail, etc.  See Lion's Storage Display

  • The monitor on my windows XP is concaving. The vertical side middle is moving toward the middle. Does anybody has any suggestions as to what is wrong?

    AS stated the middle of the right side monitor screen is moving toward the middle. Does anyone has a solution. It started this process about five days ago. Thanks.

    try testing with any an other monitor in order to under stand the problem, If it works fine that mean you need to contact Monitor manufacturing / support center to check the problem and get repair. you may also check the manual of that monitor if you bought
    new one and it comes with new pack.
    I am sure you will get some solutions, if you problem still persists that means you can need to check resolution and monitor  in control or try safe mode etc.
    enjoy :)

  • How can we uncheck " send an email invitation" option from people picker of SharePoint 2013 for the specific site collection / Web application?

    Hi,
    Please help.
    Thanks
    srabon

    By default, you can't. This involves making a modification to a file in the 15 hive on all SharePoint WFEs (but this kind of change is not supported/recommended as it can be overridden by any update to SharePoint).
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • SharePoint 2013 : Content organizer rules to move the document across web applications

    Hi,
    I wanted to move  the document in drop off library to another web application based on the metadata values.I am thinking of doing this using content organizer rules but I am not sure it will help across web application.
    Is there any other out of the box or no customization solution to achieve this requirement?

    Hi Prasad,
    According to your description, my understanding is that 
    you want to move documents across web applications and keep the metadata. Is it right?
    For moving documents across web applications, you can use Send To connection to achieve it. However, it may cause some meta data missing.
    More information about how to use Send To connection to route documents:
    http://www.informit.com/articles/article.aspx?p=2131831&seqNum=4
    So, for your issue, I suggest you use a third party tool or solution to do it.
    There is a CodePlex solution, check if it is useful for you:
    https://spdeploymentwizard.codeplex.com/
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • How to upgrade the extended web application for FBA from MOSS 2007 to SharePoint 2010?

    Hi All,
    Currently my farm version is MOSS 2007 with SP3.
    I have a web application on port 80, and is based on windows authentication, and i extend it on the port 90, and the authentication is FBA with SqlServer.
    I know that SharePoint 2010 has a new claims based authentication, and in a single web application you can do both windows authentication and FBA.
    Now i want to know, when i migrate the MOSS 2007 port 80 and port 90, which method should i choose?
    1. in SharePoint 2010 farm, Create  a classic based web application on port 80, and extend it on port 90, enable FBA on port 90. It is the same as MOSS 2007.
    2. in SharePoint 2010 farm, Create a claims based web application, and enable both windows authentication and FBA.
    Thanks.

    FBA requires claims so you'll need to create a claims based web application. Whilst you might extend the site to give you a FBA portal the web application itself will have to be claims based.
    I would definitely be looking at using a database attach upgrade path in your case to give you the opportunity for testing as moving between authentication providers can be painful.

  • Migrating to Sharepoint 2013 from 2010 - Can you use the same URL for the Web Application without affecting the 2010 environment?

    Hi,
    I am currently trying to migrate our SharePoint 2010 environment to SharePoint 2013. The first thing I'm doing is creating a 2013 development environment to verify that this migration goes smoothly. I'm also doing this so that we will have a testing environment
    after the upgrade to 2013 is complete. 
    So here is my question: I have a 3 tier farm including; 1 app server, 1 wfe, and 1 sql server. I have made a copy of our SharePoint 2010 database and installed that on our sql server 2012 sever (This new environment is on 3 completely separate servers from
    our 2010 environment). I have also installed the prereqs and configured SharePoint 2013 on the App server and wfe servers, as well as configuring the necessary service applications (I have created a completely new 2013 database where I will migrate my 2010
    database content when I'm ready).
    I am now at the point where I need to create a new web application on the 2013 app server, where I will be migrating the copied 2010 database.  (Also note that we have a 2010 development site called https://[email protected])
    When I go to create a new web application in our 2013 dev environment, can I use the same url (https://[email protected]) to create this web app, or will this screw up our current 2010 dev environment?
    I'm new to SharePoint migrations, so I apologize if this is a stupid question.
    Thanks in advance for any insight you can share on this!
    Boe Barlage

    So, what you are recommending is that before I create a web application in my new 2013 environment, I need go into my hosts file on my 2013 app server and alter it to point to my 2013 wfe.
    Then after I do that, then I can create my new web application on my 2013 app server with the same url as my 2010 testing environment
    (https://[email protected]). 
    Then after that I should be able to access my new sharepoint 2013 environment at the same URL (https://[email protected])?
    I must be missing something.
    In your first reply, you told me to alter the host file on my 2010 app server and point it to my 2010
    wfe (I guess I thought it probably already is). You also told me to alter the host file on my 2013 app server and point it to my 2013 wfe. 
    so I am confused on after I do this, what url would I access my 2010 test environment, and what url would
    I access my 2013 test environment?
    I am fine with having my test environment as a different URL until I am totally ready to roll everything over and kill the 2010 site. But I want to make sure that when I migrate my database, none of the site links are broken.
    I also want to make sure that if I proceed this way, I want to be sure that I will be able to modify the URL to what my 2010 environment is (without a lot of headaches) when I am ready to kill the 2010 site.
    Thanks again for your help, it's much appreciated!
    Boe Barlage

  • Create Refinement topics for web application in SharePoint 2013 Search

    
    Is there a way we can add available web application name in refinement panel in SharePoint 2013 search. there is a search called Enterprise search which is named as Everything, that search from all the web applications available. is there a way we can have
    a search refinement panel which is the list of web applications so that it allows us to filter the results by web application.
    can we add a refinement panel like below  in SharePoint Search 2013
    here is an image for 
    kukdai

    Hi kukdai,
    To use result source or query rule to distinguish search results, besides adding custom search vertical, you could also consider using result block:
    http://blogs.technet.com/b/mspfe/archive/2013/02/01/how-query-rules-and-result-sources-can-be-used-to-customize-search-results.aspx
    http://www.sharepoint2013.me/Blog/Post/261/SharePoint-2013---Create-and-display-results-blocks
    Quote:
    In SharePoint, result block will display the search results as a group. We can promote result block depending on the query condition as specific result. While configuring query conditions for results block, we can use query variables. We can specify query
    variables as place holders for unknown values in SharePoint query.
    Then we can use Path in query rule to divide search results into several web applications.
    Regards,
    Rebecca Tu
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Is there any way to migrate existing intranet into SharePoint?

    Hi,
    I have currently an intranet sites for hosting data for users to retrieve from. I have a SQL Server and IIS run on the same box. My organisation is planning to use SharePoint soon so I must prepare how to move those intranet sites to SharePoint.
    Is there a way to do that?
    I have also wanted to develop request forms and use sharepoint workflow to route the approval to the require person when save it. Is there any tool that help me to do that?
    Regards
    SAM

    Yes, you can. But I don't think you can use any tool to migrate your existing application to SharePoint. However you can convert your existing Web Application into a Provider-Hosted SharePoint App. Refer to the following article for more information
    http://aymanelhattab.com/2014/01/11/converting-asp-net-web-applications-into-sharepoint-apps-using-visual-studio-2013/
    http://sharepoint.stackexchange.com/questions/122687/asp-net-web-application-into-sharepoint-app
    http://www.codeproject.com/Articles/21465/Converting-an-ASP-NET-site-into-a-SharePoint-site
    Cheers,

  • SNC server side trust based on kerberos - is it possible ?

    Hi all,
    We're trying to make this scenario work:
    Existing SAP system uses ntlm sso in the sapgui.
    We're now in the process of deploying BOE in the company.
    We're using sso with winad to infoview which works
    We're trying to configure server side trust between SAP and BOE due to requirement of 'multipass burst' functionality
    This causes a conflict between sso in the gui and the dll used for setting up SNC server side trust.
    I've tried to figure out how to use the kerberos dll gx64krb5.dll on the SAP server to enable both sso solution in gui and server side trust between SAP and BOE, but I cannot generate the SNC PSE in the SAP trust manager.
    I've not been able to find threads/info in sap notes on how to set SNC PSE using kerberos dll - is it possible.
    Can we have both sapgui sso to SAP and server side trust bewteen SAP and BOE ?
    TIA.
    Torben

    Dear Torben and Ingo,
    For your question: "Can we have both sapgui sso to SAP and server side trust bewteen SAP and BOE ?"
    Have you done implementing those? Because we already have client SNC (between SAP GUI and SAP BW) using Kerberos SSP (since SAP Crypto can only be used for Server SNC).
    And now we're going to implement server SNC (between SAP BW and BOE) using SAP Crypto.
    Is it possible to have these 2 together? Because some of the settings in RZ10 will overlap between the two like below. And if we continue with server side trust between SAP BW and BOE, settings for Client SNC will need to be overwritten and it will stop working.
    1. RZ10 setting
    Kerberos SSP (between SAP GUI and SAP BW)
    snc/gssapi_lib = D:\usr\sap\gx64krb5.dll
    snc/identity/as = p:SAPServiceSID(at)myorgunit.myorg.mycountry
    SAP Crypto (between SAP BW and BOE)
    snc/gssapi_lib =   $(DIR_INSTANCE)\exe\sapcrypto.dll
    snc/identity/as =   p: CN: mybwserver, OU: myorgunit, O: myorg, C: mycountry
    2.
    And also with client SNC using Kerberos SSP we need to tag each user in SU01 with SNC name, whereas this is not needed for server SNC. If i leave this SNC name on each BW user, will that make my server SNC between BW and BOE not working?
    3.
    Overlap in location of file named "ticket" between SAP
    Crypto and Kerberos SSP, which is to be copied to the same location
    below:
    <DRIVE>:\usr\sap\<SID>\<instance>\sec\ directory (on
    Windows).
    4.
    Overlap in environment variable named SECUDIR that points to the
    directory where the ticket resides.
    Is there any documentations that explain how to get these 2 SSO to run together?
    Thank you very much.
    Kind regards,
    aswin
    Edited by: Aswin Setyawan Margono on Jan 5, 2011 7:15 AM
    Edited by: Aswin Setyawan Margono on Jan 5, 2011 7:18 AM

Maybe you are looking for

  • Sales Invoice Issue

    Hello all, The case is if we are going to raise an Invoice for example of Rs. 100.50 and the amount recieved against this order is Rs. 100 the SAP would not permit us to invoice that particular order. Is there any method in SAP where we can define th

  • Return to Vendor 161 with outbound delivery

    Hello I have a problem when trying to return stock to a vendor.  I have created a return PO and checked the Return to vendor flag. I have changed a delivery type to pick up movement type 161 The delivery is created and picking up the correct movement

  • Objects modified by a patch

    Hi, Please let me know how to find the objects modified by a patch. In OAM I'm able to see only the files modified by a patch. I need modified objects. Thanks \RK

  • HT201342 My icloud email address is misspelled.  How can I correct this?

    My icloud email address is misspelled.  How can I correct this?

  • Windows 8 - Can My PC Run IT? Check My CPU Coreinfo Report

    Hi Dear Friends, Can anyone tell me can my CPU Run Windows 8 x86 and Windows 8 x64 thanX in advance, my CPU Coreinfo Report is here: Coreinfo v3.31 - Dump information on system CPU and memory topology Copyright (C) 2008-2014 Mark Russinovich Sysinter