Windows Authentication by using HTMLDB and Active directorty (AD)

Is it possible to write an application by using HTMLDB to use windows authentication by using Active Directory (AD) ?
Thanks!

Hi Tanya,
The IS_MEMBER routine won't necessarily work with AD since it actually checks for the sort of user/group relationship that is stored in OID (AD can store the relationship in a different way).
To check group membership you will need to write your own code which checks the group and/or user to determine whether they are in a specific group or not. I believe there are already some examples of that code in this forum, if you search for 'group and ldap' you should be able to find some examples.
If not, then post back and I'll try and dig something out.

Similar Messages

  • In windows cmd lueo used \ \ server and get to the pc but mac as done

    in windows cmd lueo used \ \ server
    and get to the pc but mac as done

    Your question (if it is one) makes no sense whatever.
    Please describe your problem in greater detail, and include details of what Mac you have and what version of OS X.

  • If you bought a used ipod and activation icloud is locked and can not get the owner how do you fix the ipod

    If you bought a used ipod and activation icloud is locked and can not get the owner how do you fix the ipod

    Hi Blands02!
    Here is an article that will help you troubleshoot this issue:
    Find My iPhone Activation Lock: Removing a device from a previous owner’s account
    http://support.apple.com/kb/ts4515
    Thanks for being a part of the Apple Support Communities!
    Cheers,
    Braden

  • I allocated too much space on the Windows side when using bootcamp and want to take some space back for the Mac side is there any easy way to do this?

    I allocated too much space on the Windows side when using bootcamp and want to take some space back for the Mac side is there any easy way to do this?

    Purchase and use Paragon Camp Tune

  • Operations error occured when executing LDAP query to read members of AD group in windows 8 operating system using javascript and active-x

     My code javascript script  is
     objConnection = new ActiveXObject("ADODB.Connection");
     objConnection.Provider="ADsDSOObject";
     objConnection.Open("ADs Provider");
     objCommand = new ActiveXObject("ADODB.Command");
     objCommand.ActiveConnection = objConnection;
       objCommand.CommandText = "SELECT sAMAccountName,displayName, givenName, SN,CN,    mail,distinguishedName,primaryGroupToken,member,ADsPath,MemberOf FROM 'LDAP://"+GrpDomain+".corp.com' WHERE objectCategory='group'
    and objectClass='group' and sAMAccountName='"+GrpName+"'";
    objRecordSet = objCommand.Execute();
    This code executes successfully on window 2008 server machine,
    but gives "Operations error occurred" on windows 8 operating system
    on line of code highlighted above

    Hi,
    In regard to scripts related issue, I suggest you refer to The Official Scripting Guys Forum to get professional support:
    The Official Scripting Guys Forum
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    Thank you for your understanding and support.
    Best Regards,
    Amy Wang

  • Problems using JavaMail and activation with Java 1.6

    Hi,
    I have developed an application with a SOAP architecture using Axis. Everything worked fine until I upgrade the JRE version from 1.5 to 1.6. Since then a "javax.activation.UnsupportedDataTypeException: no object DCH for MIME type multipart/related; type="text/xml" " exception is thrown every time I try to connect to the webservices.
    Debugging the code I've found that the problem is a null value in the "dch" attribute of the ObjectDataContentHandler object returned by the getInputStream method in the DataHandler class.
    When I launch the application using JRE 1.5 this attribute value is "text_plain" and everthing woks ok but when I launch it with JRE 1.6 the attribute has a wonderful "null" value...
    Anybody knows what could be the reason for that "null" value?
    I've looking for this problem in diferent forums and I believe that could be some kind of incompatibility between the activation version provided with the JRE 1.6 and the JavaMail 1.4 version but I'm not sure.
    Thanks in advance!

    My application also stopped working and sadly is a production application (is in a production environment and production depends heavily on it since it contains Standard Operation Procedures documents).
    I've tried so far uninstalling jre 1.6 from server, opening the jnlp with jre 1.5.13 and nothing yet. the curious thing is that the jre 1.6 update took place some time ago and today I'm getting the error. Not sure i the server went down recently which might explain some of it.
    Here's my error:
    java.lang.reflect.InvocationTargetException
            at sun.reflect.GeneratedConstructorAccessor4.newInstance(Unknown Source)
            at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27) 
    at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
            at org.apache.axis.Message.setup(Message.java:352)
            at org.apache.axis.Message.<init>(Message.java:235)
            at org.apache.axis.transport.http.HTTPSender.readFromSocket(HTTPSender.java:779)
            at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144)
            at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
            at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
            at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
            at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
            at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
            at org.apache.axis.client.Call.invoke(Call.java:2767)
            at org.apache.axis.client.Call.invoke(Call.java:2443)
            at org.apache.axis.client.Call.invoke(Call.java:2366)
            at org.apache.axis.client.Call.invoke(Call.java:1812)
            at com.bluecubs.xinco.client.XincoExplorer.doDataWizard(XincoExplorer.java:2788)
            at com.bluecubs.xinco.client.XincoExplorer$8.mousePressed(XincoExplorer.java:1437)
            at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:263)
            at java.awt.Component.processMouseEvent(Component.java:6035)
            at javax.swing.JComponent.processMouseEvent(JComponent.java:3265)
            at java.awt.Component.processEvent(Component.java:5803)
            at java.awt.Container.processEvent(Container.java:2058)
            at java.awt.Component.dispatchEventImpl(Component.java:4410)
            at java.awt.Container.dispatchEventImpl(Container.java:2116)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4322)
            at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3983)
            at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3916)
            at java.awt.Container.dispatchEventImpl(Container.java:2102)
            at java.awt.Window.dispatchEventImpl(Window.java:2429)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.EventQueue.dispatchEvent(EventQueue.java:599)
            at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:273)
            at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:183)
            at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:173)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:168)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:160)
            at java.awt.EventDispatchThread.run(EventDispatchThread.java:121)
    Caused by: Error reading data stream:  Error in MIME data stream, start boundary not found, expected:  ------=_Part_5_13931643.1192823865125
            at org.apache.axis.attachments.MultiPartRelatedInputStream.<init>(MultiPartRelatedInputStream.java:339)
            at org.apache.axis.attachments.AttachmentsImpl.<init>(AttachmentsImpl.java:119)
            ... 39 more
    AxisFault
    faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
    faultSubcode:
    faultString: java.lang.RuntimeException
    faultActor:
    faultNode:
    faultDetail:
            {http://xml.apache.org/axis/}stackTrace:java.lang.RuntimeException
            at org.apache.axis.Message.setup(Message.java:361)
            at org.apache.axis.Message.<init>(Message.java:235)
            at org.apache.axis.transport.http.HTTPSender.readFromSocket(HTTPSender.java:779)
            at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144)
            at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
            at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
            at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
            at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
            at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
            at org.apache.axis.client.Call.invoke(Call.java:2767)
            at org.apache.axis.client.Call.invoke(Call.java:2443)
            at org.apache.axis.client.Call.invoke(Call.java:2366)
            at org.apache.axis.client.Call.invoke(Call.java:1812)
            at com.bluecubs.xinco.client.XincoExplorer.doDataWizard(XincoExplorer.java:2788)
            at com.bluecubs.xinco.client.XincoExplorer$8.mousePressed(XincoExplorer.java:1437)
            at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:263)
            at java.awt.Component.processMouseEvent(Component.java:6035)
            at javax.swing.JComponent.processMouseEvent(JComponent.java:3265)
            at java.awt.Component.processEvent(Component.java:5803)
            at java.awt.Container.processEvent(Container.java:2058)
            at java.awt.Component.dispatchEventImpl(Component.java:4410)
            at java.awt.Container.dispatchEventImpl(Container.java:2116)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4322)
            at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3983)
            at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3916)
            at java.awt.Container.dispatchEventImpl(Container.java:2102)
            at java.awt.Window.dispatchEventImpl(Window.java:2429)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.EventQueue.dispatchEvent(EventQueue.java:599)
            at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:273)
            at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:183)
            at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:173)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:168)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:160)
            at java.awt.EventDispatchThread.run(EventDispatchThread.java:121)
            {http://xml.apache.org/axis/}hostname:PRAII1371900
    java.lang.RuntimeException
            at org.apache.axis.AxisFault.makeFault(AxisFault.java:101)
            at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:154)
            at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
            at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
            at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
            at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
            at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
            at org.apache.axis.client.Call.invoke(Call.java:2767)
            at org.apache.axis.client.Call.invoke(Call.java:2443)
            at org.apache.axis.client.Call.invoke(Call.java:2366)
            at org.apache.axis.client.Call.invoke(Call.java:1812)
            at com.bluecubs.xinco.client.XincoExplorer.doDataWizard(XincoExplorer.java:2788)
            at com.bluecubs.xinco.client.XincoExplorer$8.mousePressed(XincoExplorer.java:1437)
            at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:263)
            at java.awt.Component.processMouseEvent(Component.java:6035)
            at javax.swing.JComponent.processMouseEvent(JComponent.java:3265)
            at java.awt.Component.processEvent(Component.java:5803)
            at java.awt.Container.processEvent(Container.java:2058)
            at java.awt.Component.dispatchEventImpl(Component.java:4410)
            at java.awt.Container.dispatchEventImpl(Container.java:2116)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4322)
            at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3983)
            at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3916)
            at java.awt.Container.dispatchEventImpl(Container.java:2102)
            at java.awt.Window.dispatchEventImpl(Window.java:2429)
            at java.awt.Component.dispatchEvent(Component.java:4240)
            at java.awt.EventQueue.dispatchEvent(EventQueue.java:599)
            at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:273)
            at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:183)
            at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:173)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:168)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:160)
            at java.awt.EventDispatchThread.run(EventDispatchThread.java:121)
    Caused by: java.lang.RuntimeException
            at org.apache.axis.Message.setup(Message.java:361)
            at org.apache.axis.Message.<init>(Message.java:235)
            at org.apache.axis.transport.http.HTTPSender.readFromSocket(HTTPSender.java:779)
            at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144)
            ... 32 moreAnd the related code:
    Message m = null;
                                MessageContext mc = null;
                                AttachmentPart ap = null;
                                Call call = (Call)xincoClientSession.xinco_service.createCall();
                                call.setTargetEndpointAddress(new URL(xincoClientSession.service_endpoint));
                                call.setOperationName(new QName("urn:Xinco", "downloadXincoCoreData"));
                                Object[] objp = new Object[2];
                                objp[0] = (XincoCoreData)newnode.getUserObject();
                                objp[1] = xincoClientSession.user;
                                //tell server to send file as attachment
                                //(keep backward compatibility to earlier versions)
                                ap = new AttachmentPart();
                                ap.setContent(new String("SAAJ"), "text/string");
                                call.addAttachmentPart(ap);
                                //invoke actual call
                                byte_array = (byte[])call.invoke(objp);
                                //get file from SOAP message or byte array
                                mc = call.getMessageContext();
                                m = mc.getResponseMessage();
                                if (m.getAttachments().hasNext()) {
                                    ap = (AttachmentPart)m.getAttachments().next();
                                    in = (InputStream)ap.getContent();
                                } else {
                                    in = new ByteArrayInputStream(byte_array);
                                }The stack trace point the error to the line:
    *byte_array = (byte[])call.invoke(objp);*
    Edited by: javydreamercsw on Oct 19, 2007 1:08 PM

  • How can i get windows 7 to use plug and play features

    I am trying to load a game using windows 7 and no matter what I do I cannot get the game to install or load up!

    Try to right click on the game install and tell it to run as administrator.
    Reminder: Please select the "Accept as Solution" button on the post that best answers your question. Also, you may click on the white star in the "Kudos" button for any helpful post to give that person a quick thanks. These feedback tools help keep our community active, so you receive better answers faster.

  • Problem in adding "TableLayoutPanel" control array type functionality on windows form dynamically using drag and drop

    Environment: -
     (Application Machine)
    OS Name             : -
    Microsoft Windows 7 Professional/XP SP2/SP3            
    OS Bit Version      : -
    32 Bit                     
    Application Name: - Designer.exe                                  
    IDE                  
        : - Visual Studio 2008                        
    EXE Application development: -
    VB. Net
    Application Type: -
    Application “Designer.exe” was designed in vb6.0 and now, it has been upgraded to Visual Studio 2008 and it works properly.
    Product Description: -
                 We have an application Designer.exe, which is used for designing “Forms”.
    It has menu option with following option like Panel, Text Box, Combo Box, Button etc. We drag any of this menu items and place it to form.
    Requirement: -
    We have
    critical requirement in product. In Designer.exe, we need to align form margin, while we increase or decrease window. And for that we have searched that 
     “TableLayoutPanel” components can be helpful.
    Problem description: -
    Earlier code was in vb6.0, now it has upgraded to Visual Studio 2008. In vb6.0, we have used control array for memory utilization with Combo Box, Group Box, and Text
    Box etc.
    But, for alignment we have to use “TableLayoutPanel”
    control array type functionality on form.
    Code Snippet: - For earlier designing component e.g. Frame
    'Required by the Windows Form Designer
    Public WithEvents Frame1 As Microsoft.VisualBasic.Compatibility.VB6.GroupBoxArray
    <System.Diagnostics.DebuggerStepThrough()> Private Sub InitializeComponent()
    Me.components = New System.ComponentModel.Container
    Me.Frame1 = New Microsoft.VisualBasic.Compatibility.VB6.GroupBoxArray(Me.components)
    CType(Me.Frame1, System.ComponentModel.ISupportInitialize).BeginInit()
    . Kindly suggest approach for implementing requirement.
    Kindly help us to complete the requirement. I will be really
    thankful for any assistance.

    Hi S.P Singh,
    Welcome to MSDN.
    I am afraid that as Renee Culver said, these forums donot support VB6, you could refer to this thread:
    Where to post your VB 6 questions
    You could consider posting this issue in these forums below:
    These forums do not support Visual Basic 6, however there are many third-party support sites that do. If you have a VB6-related question please visit these popular forums:
    VB Forums
    VB City
    Thanks for your understanding.
    Best Regards,
    Youjun Tang
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How to use offline map for windows store app using c# and xaml

    Hi friends,
    I want to integrate offline map in my windows store app but I am not able to achieve that.
    Below is my requirement:
    When a user wants to go somewhere where she/he doesn't want to use wi-fi or mobile data but wants to use map to assist her/him to roam around. For this I want to give an option to download the map for that region/area before leaving for that place and there
    she/he can use map even in offline.
    Is it possible that I can achieve this using Bing maps?
    If yes then tell me the processes to follow.
    If no then can I achieve this using "Here" or by using any other API or by tweaking any way?
    Note: I am showing maps in case of online and user can search for directions or any places in that. I am using Bing maps for that.
    Thanks,
    S.Sandeep

    Hi Sandeepmsandy,
    There is no available code sample for this scenario. You may write your own.
    Step 1: Get pdf URL from sqlite database. Please refer to the following MSDN blog and see a code sample.
    http://blogs.msdn.com/b/robertgreen/archive/2012/11/13/using-sqlite-in-windows-store-apps.aspx. Note, you need to retarget the project to 8.1 and then get two sqlite packages from NuGet before building this sample.
    Step 2: Use some special classes to get file from serer.
    HttpWebRequest can help download small pdf files. For more information to see
    https://social.msdn.microsoft.com/Forums/windowsapps/en-US/de96a61c-e089-4595-8349-612be5d23ee6/download-file-with-httpwebrequest?forum=winappswithcsharp. It’s easy for use, but if you want to download the larger or many files, it’s recommend to use
    BackgroundTransfer namespace. The classes in this namespace provide a power way to transfer files in the background. See a code sample from MSND.
    https://code.msdn.microsoft.com/windowsapps/Background-Transfer-Sample-d7833f61.
    Regards,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. Click HERE to participate
    the survey.

  • Saving image in windows 8.1 using stream and bitmap encoder id

    Hi
    var renderTargetBitmap = new RenderTargetBitmap();
    await renderTargetBitmap.Render(myElementTree);
    var pixels = await renderTargetBitmap.GetPixelsAsync();
    var picker = new FileSavePicker();
    // Picker setup
    var file = await picker.PickSaveFileAsync();
    // File validation
    using (var stream = await file.OpenAsync(FileAccessMode.ReadWrite))
    var encoder = await
    BitmapEncoder.CreateAsync(BitmapEncoder.BmpEncoderId, stream);
    encoder.SetPixelData(BitmapPixelFormat.Rgba8, 100, 0, 96, 96,
    await renderTargetBitmap.GetPixelsAsync());
    await encoder.FlushAsync();
    I have already used the code snippet. Could you please tell me how to save UIElement tree by having the stream and bitmap encoder id as input?
    Thanks
    Satheesh

    Here you go. Set up the file picker and call our CaptureElementToFile function. In this case it's passing the page to capture the whole screen:
    FileSavePicker picker = new FileSavePicker();
    picker.SuggestedStartLocation = PickerLocationId.PicturesLibrary;
    picker.SuggestedFileName = "capture.bmp";
    picker.FileTypeChoices.Add("Bitmap File",new List<string>() { ".bmp" });
    StorageFile file = await picker.PickSaveFileAsync();
    CaptureElementToFile(this, file);
    And here's CaptureElementToFile. The BitmapEncoder needs to know information about the size and shape of the pixel buffer and it needs to have the pixels as an Array. If you want to encode to a different size you can include a BitmapTransform.
    async void CaptureElementToFile(UIElement element, StorageFile file)
    RenderTargetBitmap renderTargetBitmap = new RenderTargetBitmap();
    await renderTargetBitmap.RenderAsync(element);
    IBuffer pixelBuffer = await renderTargetBitmap.GetPixelsAsync();
    DisplayInformation dispInfo = DisplayInformation.GetForCurrentView();
    using (var stream = await file.OpenAsync(FileAccessMode.ReadWrite))
    var encoder = await BitmapEncoder.CreateAsync(BitmapEncoder.BmpEncoderId, stream);
    encoder.SetPixelData(BitmapPixelFormat.Rgba8, BitmapAlphaMode.Straight,
    (uint)renderTargetBitmap.PixelWidth,
    (uint)renderTargetBitmap.PixelHeight,
    dispInfo.LogicalDpi,dispInfo.LogicalDpi,
    pixelBuffer.ToArray());
    await encoder.FlushAsync();
    --Rob

  • Export Grid to PDF file In windows Store app using Xaml and C#

    I am working on windows store and have multiple data field  which I have to export to PDF  file 
    In wpf  project i easily export gridview data to pdf file but need help to do same thing in windows metro app.
    Thanks in Advance

    There is no in-box PDF writing API. You will need to find a third party component. If you search the forum there are several threads (as recent as yesterday) with discussing this with component suggestions.

  • How to get the identity claim encoding types of windows and forms authentication providers using API?

    Hi,
    We have to get all the claims providers associated with a web application and its identity claim encoding type using API.
    For example:
    If the identity claim of windows authentication is user name and the user name is a string, then we should get
    "i:0#.w".
    If the identity claim of forms authentication is
    email and the provider name is "fba" , then we should get "i:0!.f|fba|".
    The below link shows us to get all claims providers associated with a web application, but how do we get the identity claim encoding type of each provider?
    http://msdn.microsoft.com/en-us/library/gg650432(v=office.14).aspx#SP_WCP_Tip3
    using (SPSite theSite = new SPSite("http://someContosoUrl"))
    // Get the web application.
        SPWebApplication wa = theSite.WebApplication;
        // Get the zone for the site.
        SPUrlZone theZone = theSite.Zone;
        // Get the settings that are associated with the zone.
        SPIisSettings theSettings = wa.GetIisSettingsWithFallback(theZone);
        // Get the list of authentication providers that are associated with the zone.
        foreach (SPAuthenticationProvider prov in
            theSettings.ClaimsAuthenticationProviders)
        {   // Need to get the identity claims encoding type using the SPAuthenticationProvider
    Is windows authentication's identity claim encoding type always i.0#.w or the identity claim is always the user name?
    Thanks & Regards,
    Kalai.

    If the requirement is to be able to convert claim identities to windows identities that can be used with other LOB/legacy application that still relies on NTLM/Windows Auth, then I would recommend to explore C2WTS.
    Here are some references:
    http://msdn.microsoft.com/en-us/library/office/ee539739(v=office.14).aspx
    http://blah.winsmarts.com/2013-11-Use_C2WTS_to_get_a_classic_windows_identity_from_a_claims_identity.aspx
    http://henrymcclain.blogspot.in/2013/05/claims-to-windows-token-service-c2wts.html
    http://blogs.msdn.com/b/rodneyviana/archive/2011/02/20/claims-to-windows-token-service-c2wts-may-not-start-automatically-when-you-reboot-your-server-don-t-blame-sharepoint-for-that.aspx
    http://blogs.msdn.com/b/russmax/archive/2010/05/27/understanding-sharepoint-2010-claims-authentication.aspx
    Thanks!
    These postings are provided "AS IS" with no warranties, and confers no rights.

  • Exchange 2013 CU6 OWA - FBA and Windows Authentication (coexistence)

    Hi,
    Is it possible to run FBA for outside clients and Windows Authentication for inside clients?
    I have tried to setup FBA and WA on different WebSites without luck :-(
    Best regards - NH
    [Edit, typo]

    Hi,
    I recommend you create the second OWA/ECP virtual directories in a new IIS web site with a different IP address, and using it for internal client access.
    You need to prepare the secondary IP address for CAS server, and then in the IIS manager, create a new Web Site. Create the second
    OWA/ECP virtual directories in this new IIS Web Site.
    You will also need to ensure that whatever name the internal use will be using to connect to the new
    OWA/ECP site is present on the installed certificate and the name resolves to the correct IP address.
    Then you can enable integrated windows authentication for internal users and enable forms-based authentication for external users.
    Best regards,
    Belinda Ma
    TechNet Community Support

  • PM Order Confirmation using Personnel's Cost Center and Activity Type

    Hi All,
    Is it possible to have PM Order confirmation (IW41) using Cost Center and Activity type from Personnel instead of default from Work Center?  If it is, can it be done with some configuration or user exit?  Please advise.  Thank you.
    Dai

    Hi friend,
    Order confirmation will be done for order operations.While doing confirmation we post the actual work done by the repective work center and respective activity type assigned to the same workcenter.
    But these activity types are assigned to cost center for cost calculation.confirming the respective operation in maintenance order through workcenters gives the report of planned work and actual work done by the respective workcenter.
    We cannot confirm the operation using costcenter and activity type directly through transaction IW41.
    If you want to develop new confirmation screen and making confirmation of the respective order operation with only costcenter and activity type fields, you can do it .
    Regards,
    Pardhreddyc
    Edited by: Pardhreddyc on May 17, 2011 12:45 PM

  • Windows authentication failure on SharePoint 2013 zone

    I am attempting to set up a Windows authentication zone in a SharePoint 2013 installation for use by the search crawler.  The zone has been configured to use NTLM in order to eliminate Kerberos from the equation.  The result of my
    attempts to access the Windows authentication zone is a 403 error.  Central Administration is working on the same server, and of course is using Windows authentication.
    I know about the issue of using Windows authentication to localhost, and have configured the backconnectionhostnames entry in the registry.  To prove that I can use Windows authentication using the intended host name for the SharePoint zone, I have
    set up a test IIS site that binds to the host name used by the zone, and successfully authenticated using Windows authentication.
    From monitoring the ULS logs it's obvious that I'm actually successfully completing Windows authentication, and getting a SharePoint claim, but from that point I'm being denied by SharePoint.  I do know that my Windows credentials has site collection
    administrator privileges.  The most interesting failure in the ULS log appears to be:
    SPApplicationAuthenticationModule: Authorization header doesn't contain Bearer, can't try to perform application authentication.
    Another odd thing is that after the ULS indicates I have failed authentication, I'm redirected to /_layouts/AccessDenied.aspx instead of the login page defined in web.config.  I have tried many things, including enabling Kernel-mode authentication. 
    Below is an excerpt from my ULS logs:
    SPApplicationAuthenticationModule: There is no Authorization header, can't try to perform application authentication.
    Non-OAuth request. IsAuthenticated=False, UserIdentityName=, ClaimsCount=0
    [Forced due to logging gap, cached @ 12/01/2014 15:48:32.53, Original Level: Verbose] Value for isAnonymousAllowed is : {0}
    [Forced due to logging gap, Original Level: Verbose] Value for checkAuthenticationCookie is : {0}
    Claims Windows Sign-In: Sending 401 for request 'https://crawler.my.host/' because the user is not authenticated and resource requires authentication.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:32.56, Original Level: VerboseEx] Sending HTTP response {0} - {1}:{2}.
    [Forced due to logging gap, Original Level: Verbose] SPRequestModule.PreSendRequestHeaders
    Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=5320.19544383434
    Name=Timer Job SchedulingApproval
    Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=16.4101862108173
    Name=Timer Job SchedulingApproval
    Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=14.9021733209109
    Name=Timer Job SchedulingApproval
    [Forced due to logging gap, cached @ 12/01/2014 15:48:32.95, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, Original Level: VerboseEx] SPFederationAuthenticationModule.OnEndRequest: Start
    SPFederationAuthenticationModule.OnEndRequest: User was being redirected to authenticate.
    Leaving Monitored Scope (Timer Job SchedulingApproval). Execution Time=17.2175513927049
    Claims Windows Sign-In: Sending 401 for request 'https://crawler.my.host/' because the user is not authenticated and resource requires authentication.
    Name=Request (GET:https://crawler.my.host:443/)
    Micro Trace Tags: 0 nasq
    Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=9.54646470431298
    Name=Request (GET:https://crawler.my.host:443/)
    SPTokenCache.ReadTokenXml: Successfully read token XML 'mydomain\myuser'.
    Token Cache: Failed to get token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
    Token Cache: Reverting to local cache to get the token for '0).w|s-0-0-0-0-0-0-1234'.
    Token Cache: Entry missing for user 'mydomain\myuser'.
    Token Cache: Failed to get token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
    Token Cache: Reverting to local cache to get the token for '0).w|s-0-0-0-0-0-0-1234'.
    Claims Windows Sign-In: User 'mydomain\myuser' for request url 'https://crawler.my.host/' does not have a cached SessionSecurityToken.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:33.24, Original Level: VerboseEx] We are in claims windows only mode for for request url '{0}'.
    [Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
    [Forced due to logging gap, cached @ 12/01/2014 15:48:33.71, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    SPSecurityContext: Added JsonWebSecurityTokenHandler to trust channel factory
    SPSecurityContext: Replaced WSTrustRequestSerializer with SPTrust13RequestSerializer
    SPSecurityContext: The SecurityTokenServiceBehavior is attached to the TrustChannel.
    SecurityTokenServiceSendRequest: RemoteAddress: 'http://localhost:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'Microsoft.IdentityModel.Protocols.WSTrust.IWSTrustChannelContract' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue'
    MessageId: 'urn:uuid:f175f6ef-a93d-4efe-9173-1fba74b1eed2'
    SecurityTokenServiceReceiveRequest: LocalAddress: 'http://servername:32843/SecurityTokenServiceApplication/securitytoken.svc' Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue' MessageId:
    'urn:uuid:f175f6ef-a93d-4efe-9173-1fba74b1eed2'
    Entering monitored scope (ExecuteSecurityTokenServiceOperationServer). Parent No
    STS Call: Issuing new security token.
    SPSecurityTokenServiceManager!EnsureSharePointLogonRequestClaims: Found primary sid claim. Value: 's-0-0-0-0-0-0-1234'.
    Using claim provider 'System' for operation because it is default and it is visible.
    Excluding claim provider 'AD' for operation because it is not default and .
    Using claim provider 'AllUsers' for operation because it is default and it is visible.
    Excluding claim provider 'Forms' for operation because it is not default and .
    Using claim provider 'User Profile Claim Provider' for operation because it is default and it is visible.
    STS Call Claims Windows: Setting cookie lifetime to: Microsoft.IdentityModel.Protocols.WSTrust.Lifetime
    STS Call Claims Windows: Successfully requested sign-in claim identity for user 'mydomain\myuser'.
    STS Call: Successfully issued new security token.
    Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationServer). Execution Time=13.187150880908
    [Forced due to logging gap, cached @ 12/01/2014 15:48:34.87, Original Level: Verbose] The SecurityTokenServiceHeaderInfo including the correlation ID was added.
    Leaving Monitored Scope (ExecuteSecurityTokenServiceOperationCaller:http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue). Execution Time=719.713539011243
    [Forced due to logging gap, cached @ 12/01/2014 15:48:35.60, Original Level: Verbose] ____{0}={1}
    Claims Windows Sign-In: Siginging in the the user 'mydomain\myuser' for request url 'https://crawler.my.host/'.
    Updating X.509 certificate validation policy
    [Forced due to logging gap, cached @ 12/01/2014 15:48:36.26, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    Adding X.509 certificate thumbprint '493E6806F4178EDD685BE5EA0AAF79ED30FB4A90' to root authority trust
    SPLocalLoginProvider: Initializing and creating S2S Claim Mappings
    SPLocalLoginProvider: Initialized S2S Claim Mappings.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:36.37, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, Original Level: Verbose] Deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:37.17, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, Original Level: Verbose] Deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:37.96, Original Level: Verbose] Completed deserializing the type named {0} and with id {1}.
    [Forced due to logging gap, Original Level: VerboseEx] SPFederationAuthenticationModule.OnSessionSecurityTokenCreated: Start
    [Forced due to logging gap, cached @ 12/01/2014 15:48:38.10, Original Level: VerboseEx] SPSam.SetPrincipalFromSessionToken: End
    [Forced due to logging gap, Original Level: Verbose] Looking up {0} site {1} in the farm {2}
    Token Cache: Failed to add token from distributed cache for '0).w|s-0-0-0-0-0-0-1234'.(This is expected during the process warm up or if data cache Initialization is getting done by some other thread).
    Token Cache: Reverting to local cache to Add the token for '0).w|s-0-0-0-0-0-0-1234'.
    Token Cache: Successfully added token to cache for '0).w|s-0-0-0-0-0-0-1234'.
    SPTokenCache.ReadTokenXml: Successfully read token XML '0).w|s-0-0-0-0-0-0-1234,0#.w|mydomain\myuser,123456789012345,True,dpoRtB/hPcjVrEaJtqVWxhY8Pbfm++oHwWQ5TCB9jBlLx5n2Ky5OqGXM7ntfLB0kqIJNDUkeQrl4wL7xW2m4r0rV1TiOUf+e2mpHq8WOgN67puRViZbCxCkwmmxUpE/1OVNcDFXRCh26tvVFieK99LKZn8BJUtmP8RqxtwtwqBolNjCyZ3rfSSmtFyM3pdWjphdj312R9Lcp9/EhTpvvV1J2lFCig901ZGaPo7zOw3pFyXl1eDs+gF2Bcbc7/mMZw67/gEccsFaekBVH1TK0d9qqr6P/ISeEgzhlK4DChV94ntsw8m8Pb255yTL8WrbTykMFV3jC7R2MvqCmiKGK+g==,https://crawler.my.host/'.
    Claims Windows Sign-In: Not writing a cookie for request 'https://crawler.my.host/'.
    Claims Windows Sign-In: Successfully signed-in the the user 'mydomain\myuser' for request url 'https://crawler.my.host/'.
    Updating header 'LOGON_USER' with value '0#.w|mydomain\myuser' for the request url 'https://crawler.my.host/'.
    Leaving Monitored Scope (SPClaimsCounterScope). Execution Time=4957.74267399907
    SPApplicationAuthenticationModule: Authorization header doesn't contain Bearer, can't try to perform application authentication.
    Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|mydomain\myuser, ClaimsCount=27
    Leaving Monitored Scope (PostAuthenticateRequestHandler). Execution Time=31.2877754016223
    Micro Trace Tags: 0 nasq,69 air4a,1 air4b,22 air4a,0 air4b,1641 aeayb,732 b4ly,654 erv2,58 erv3,1814 air36,0 air37,42 b4ly,5 agb9s,39 b4ly
    Leaving Monitored Scope (Request (GET:https://crawler.my.host:443/)). Execution Time=5101.04328902137
    SPFederationAuthenticationModule.OnEndRequest: User was being redirected to authenticate.
    [Forced due to logging gap, cached @ 12/01/2014 15:48:38.24, Original Level: Verbose] {0}
    [Forced due to logging gap, Original Level: VerboseEx] SPRequestParameters: AppPrincipal={0}, UserName={1}, UserKye={2}, RoleCount={3}, Roles={4}
    Site=/
    [Forced due to logging gap, cached @ 12/01/2014 15:48:38.37, Original Level: Verbose] {0}
    [Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
    [Forced due to logging gap, cached @ 12/01/2014 15:48:38.40, Original Level: VerboseEx] No SPAggregateResourceTally associated with thread.
    [Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
    [Forced due to logging gap, cached @ 12/01/2014 15:48:38.48, Original Level: VerboseEx] No SPAggregateResourceTally associated with thread.
    [Forced due to logging gap, Original Level: VerboseEx] Reverting to process identity
    Access Denied for /. StackTrace:    at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context)     at Microsoft.SharePoint.IdentityModel.SPFederationAuthenticationModule.OnEndRequest(Object sender,
    EventArgs eventArgs)     at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()     at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)    
    at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)     at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)     at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest
    wr, HttpContext context)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr
    rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)    
    at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr
    nativeRequestContext, IntPtr moduleData, Int32 flags)     at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
    Leaving Monitored Scope (SPFederationAuthenticationModule.OnEndRequest). Execution Time=351.625416079418
    Entering monitored scope (Request (GET:https://crawler.my.host:443/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fcrawler%2Emy%2Ehost)). Parent No
     

    I'm extending an existing claims based web application.  The way I'm testing authentication is by attempting to log in to the Windows authentication zone using the browser and an account with site collection administrator privileges.  I've also
    tried using the intended crawler service account, but that also fails authentication.
    With regard to the default zone issue, I've already experimented with using both the default zone and another zone, but neither works.
    BTW, I already have this working in a SharePoint 2013 development environment, and a similar configuration has been in a SharePoint 2010 production environment for over a year, which makes this a particularly maddening problem.
    I have enabled Failed Request Tracing, and get a 401.1, 401.2, then a 403 (which says it was caused by the 401.2).  I'm not sure of the significance, but the 403 trace shows the module for the 401.2 to be UrlAuthorizationModule, while the module for
    the 403 error is FederatedAuthentication.
    Per my ULS trace included in my original post, it appears that I'm actually getting a SharePoint claim.

Maybe you are looking for