In SharePoint 2003 only Active Directory authentication method was supported. MOSS2007 allow a range of authentication types.
The authentication types available on MOSS2007 are:
Windows
Kerberos
NTLM
Forms
Active Directory Provider
Active Directory Application Mode (ADAM)
SQL Membership Provider
LDAP Provider
Custom Provider
Web Single Sign-On
Active Directory Federation Services (ADFS)
3rd part Identity Management Systems
In these scenario I will use LDAPMembershipProvider to configure Forms authentication.
Follow these steps:
- Identify the subdirectory that is associated with the Central Administration site and associated with your site
- Open web.config files of both sites (the provider information must be added on both files)
- Above the tag <system.web> add following section to define a connection to LDAP
| <membership defaultProvider="LdapMembership"> <providers> <add name="LdapMembership" type="Microsoft.Office.Server.Security.LDAPMembershipProvider, Microsoft.Office.Server, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" server="ldap_srv1.cadario.biz" port="389" useSSL="false" userDNAttribute="distinguishedName" userNameAttribute="cn" userContainer="ou=cadauser,dc=cadario,dc=biz" userObjectClass="user" userFilter="(ObjectClass=user)" scope="Subtree" otherRequiredUserAttributes="sn,givenname,cn" connectionUsername="cn=test_conn,ou=cadauser,dc=cadario,dc=biz" connectionPassword="mypwd&9876" /> <providers> </membership> |
- Save and close both files
- On command prompt execute iisreset
- Open Central Administration site and click on Application Management tab
- Under the Application Security section, click on Authentication Providers
- Be sure that correct web application in selected
- On the Authentication Providers page, click the link associated with the zone
- In the Edit Authentication page, on Authentication Type section select Forms
- In Membership Provider Name section type Membership Provider Name (LdapMembership is the name of the provider that I wrote in the web.config file)
- Click on save button
- Click on Application Management tab
- Under the Application Security section, click on Policy for Web application
- Be sure that correct web application in selected
- Click on Add User
- Select the zone that you previously modify (in the Authentication Providers page)
- In the next page add user (test_conn) and click on check name (note that account name displayed is LdapMembership:test_conn)
- Choose Full Control in the Choose Permission section
- Click on Finish button
