MOSS 2007 on Windows Server 2008 behind ISA 2006 with smart card authorization

Robert
  • MOSS 2007 on Windows Server 2008 behind ISA 2006 with smart card authorization Robert

    I am currently trying to upgrade my two WFEs from 32 bit Windows Server 2003 to 64 bit Windows Server 2008. I also have a 64 bit Windows server 2008 in the farm as an index server, and a 64 bit SQL 2005 box running Windows server 2008. I am using kerberos authentication to allow for smart card auth on the ISA 2006 server.

    After upgrading one of the front ends I am unable to access it through ISA. I get the multiple prompts even though I am entering valid credentials. When looking in the sever logs there are numerous kerberos errors referencing a null sid.

    Does anyone else have this configuration working? and if so please help.

  • You are probably having problems with the new "feature" in IIS 7 - Kernel Mode Authentication

    Kernel Mode Authentication uses the SPNs on the computer account, even if the application pool runs on a different service account. This is a problem when you are running a Sharepoint farm with more than one frontend webserver

    http://nico.berlee.nl/sharepoint-using-kerberos-on-windows-2008/

Tags
2007 kerberos
Related questions and answers
  • As the release date for the public beta of SharePoint 2010 is coming closer and closer, I'm wondering how to set up a developer machine for it. I've heard that for developing on SharePoint a 64 bit system is needed and that Microsoft advises to use Windows 7 64 bit and install SharePoint 2010 on it. I think that won't be an option for me as I only have one computer here at work and I don't like to install SharePoint on the same machine that I use for my normal office work (email stuff, writing concept papers, ...). Am I right that I only have two other options? Using Server 2008

  • In order to develop SharePoint 2007 workflows in Visual Studio 2008 on 64 bit, I would create a new (non-SharePoint) Workflow project. Then, I would add the appropriate onWorkflowActivated activities, etc. I have migrated some workflow projects from VS2008 to VS2010 and they seemingly worked fine. I say seemingly because they were able to compile correctly, run correctly, and I was able... the SharePoint workflow project template guid. So, I added it and could no longer load the project. Besides working on 32 bit or developing in 2008, does anyone know any other work arounds?

  • I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise, and I am using publishing portal template. I have created a list in top level site. And I want to use the list in a child site (e.g. adding the list to a page in child site by using Page --> Add Web Parts --> Browse), but can not find the list created in parent site in this way. Any ideas how to use the list (created in parent site) in a child site? BTW: I can use the list (created in parent site) in parent site without any issues.

  • for each stage of ILM certificate creation failure). The system is a multi (3) server farm: WFE Windows 2008 64Bit SharePoint 2010 APP (UPS and UPS Sync Running Here) Windows 2008 64Bit SharePoint 2010 SQL (Default Instance) SQL Server 2008 R2 64 Bit All the necessary steps in Spence's guide (domain accounts, permissions, rights, etc.) have been followed. The two FIM services on the APP... times for other implementations) in this particular instance, starting the user profile synchronization service generates the following errors (these can be found in the windows logs of the server

  • I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise, and I am using publishing portal template. I have two sites of the same site colleciton and I want to use Data Source Library to make site A be able to use lists defined in site B. From site A, I am using "Connect to another library" to add site B. And from Data Source Library of site A, I can see lists defined in site B. My question is how to use such lists in a page of site A? I followed the guide here, http://office.microsoft.com/en-us/sharepointdesigner/HA101191181033.aspx

  • I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise, and I am using publishing portal template. I have created a web application for intranet zone. I want to know how to change the port number of the web application? Could I change it directly in IIS manager (is this way safe)?

  • I am using SharePoint Server 2007 Enterprise with Windows Server 2008 Enterprise. I met with strange SharePoint internal error when click some links on a web site. I have tried to use SPTraceView (http://sptraceview.codeplex.com/) to dump related logs, I find the following error logs, any ideas what is wrong? I am not sure whether in my scenario, using SPTraceView is the best way to diagnose, any better ideas to diagnose? Application Server Job failed for service instance Microsoft.Office.Server.Search.Administrator.SearchServiceInstance(xxxxxxxx-xxx GUID) Reason: access to file "C

  • I am using Windows Server 2008 R2 x64 Enterprise. How can I install SharePoint 2007 on my machine / which version should I used? I have tried SharePoint Server 2007 Enterprise SP1, but the installation failed (error message: version not compatible with OS). thanks in advance!

  • I am using SharePoint Server 2007 with collaboration portal template on Windows Server 2008. The default search address for a site is pointed to /SearchCenter/Pages/Results.aspx. Any ideas how to change the address to some other address? thanks in advance!

Data information