IIS Authentication Blues

5 pts.
Tags:
IIS
IIS authentication
SharePoint 2007
SharePoint Central Administration
SharePoint Server 2007
Windows Server 2003
I recently installed SharePoint Server 2007. My first time. Initially I had no problems using the full SharePoint Central Administration site. The problems began when I set up the portal page; the initial collection site. I couldn't get access to the portal page. I remote desktop into the Server 2003 machine hosting SharePoint. Then to: IIS<ServerName>Web Sites<default website>propertiesdirectory security tabAuthentication and Access ControlEdit... and changed the authentication from Integrated Windows Authentication to Basic Authentication. We use user/pass on our own private network. We are very secure inside of a larger organization. I am not too worried about basic authentication (I know about cleartext passwords) but it is a pain requiring users to input user/pass to get to our intranet SP portal. They can have the browser remember the password, but I wish windows auth. or digest auth. would work. We use Active Directory on another server. Well the portal works, but now I cannot access the Shared Services section of SP Central Administration. I can no longer edit user profiles or get the My Site feature turned on. Shared Services is run under IIS, but as a different Web Site called: Shared Services: 8080. I played around with authentication methods but no luck. None of them grant me access into the Shared Services portion. I tried with my user account and the administrative account on the local machine. I am new at IIS and need to structure authentication more efficiently.

Answer Wiki

Thanks. We'll let you know when a new response is added.

I ran into something similar a little while ago, but I apologise if this is a rather vague answer.

I believe the root of the problem lay in choice of service/admin accounts for the shared services site.

First I created a new shared services provider. Central Administration – Shared Services Administration – New SSP. Make sure you follow Microsoft’s advice on choosing accounts!

I used the opportunity immeadiately after creation to go into the SSP admin and set up things like profile and account import. It’s also worth setting up audiences here because the navigation audiences don’t seem to like using AD groups.

Then back to the Shared Services Admin page and change the associations for the existing sites.

Hope this helps.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following