Re: SharePoint Remote Access Permissions

Tech-Archive recommends: Fix windows errors by optimizing your registry

Stephen,

Unless ISA can workaround the authenticated over internet limitation, then I
think Basic over SSL is the way to go. I think I heard the reference to the
basic/integrated sharepoint authentication in the 'deploying sharepoint as an
extranet' webcast. If you're only using internally within your company, you
should just be able to set up your own certificate authority.

Mike

"studio_two@xxxxxxxxxxx" wrote:

Mike,

Thanks for the tip-off. Here is what I think MIGHT be happening:

[1] I think the Logon box that I am getting is actually generated by
the ISA 2000 Server. The Incoming Web Request Listener is set to accept
"Windows Integrated Authentication". I enter my credentials and it lets
me pass.

[2] The problem happens when I try to do something useful on SharePoint
(I still don't know why the front page is displayed). However,
(apparently) ISA can ONLY pass BASIC authentication details to the
SharePoint server - hence I fail to get any further.

I guess this could be the reason that you had to use BASIC
authentication on the SharePoint / IIS side of things.

I don't think that is particularly clear in the (Microsoft) "SharePoint
Portal Server Deployment Kit". It states the main reaons for this is to
allow "Customer and Business Partners to connect at will". Since I am
not interested in doing that, I thought I might get away with WIA. I
suppose they should have said, "You might want to consider using Basic
Authentication because WIA won't work through ISA Server".

I'm going to be struggling with the SSL now!

Thanks for all your help,
Stephen

Mike Eastaugh wrote:
Hi Stephen,

My understanding is that Integrated won't work through routers, which is why
I needed to use basic over ssl. Or have you implemented something to get
around this limitation?

Mike

"studio_two@xxxxxxxxxxx" wrote:

Hello Mike,

Thanks for your reply.

I read that as well. I don't have a separate site mapping.

However, I ONLY have "Windows Integrated Authentication" enabled.
Everything else is disabled - as I am only intending to allow certain
domain users to access the system from home.

Do you think that will be OK?

TIA,
Stephen

Mike Eastaugh wrote:
Have you got a separate IIS site mapped to the content database, or have you
just used the same site for external access.

When reading up on Sharepoint, I came across advice that is not a good idea
to use basic and integrated authentication on the same site, as search may
not work as expected.


"studio_two@xxxxxxxxxxx" wrote:

Hello,

I am trying to setup my sharepoint server for remote access.

The current setup is as follows:
========================
Hardware Router / Firewall
Small Business Server / ISA 2000 (Multihomed)
Server 2003 Running SharePoint (Published by the ISA Server).

Initially, all seemed to be going to plan.

I can access the system from home and it asks me for my domain username
and password. The front page of the sharepoint server is displayed.

I can access all the configuration options, but as soon as I try to
access any of the shared documents (or use the search facility), I get
the "page not available" screen.

Anonymous access is disabled. Integrated Windows authentication is
enabled.

Could someone give me a few pointers please?

Thanks,
Stephen






.

Relevant Pages

  • RE: Publish Sharepoint behind SBS2000
    ... Clear your Web cache when testing for a new result, otherwise ISA might ... key in your external domain name for the internal SharePoint server. ... >>Despite all the security issues with this configuration, ...
    (microsoft.public.windows.server.sbs)
  • RE: Certificate names and RPC over HTTP for Exchange 2003
    ... Every ISA ... the server in limbo, expecting further requests, thus keeping the channel ... tick "On fast networks, connect using HTTP first..." ... All of my clients use Forms Based Authentication but you are using HTTP ...
    (microsoft.public.isa.configuration)
  • Re: RSA with OWA and FBA
    ... So RSA SecurID running on ISA doesn't support SSO. ... Troubleshooting Unsupported Configurations in ISA Server 2004 ... SecurID authentication on ISA Server: ...
    (microsoft.public.isa)
  • Re: Publish OWA2K3 on single-homed ISA in a DMZ?
    ... server before allowing access to the OWA server. ... I decided to move the ISA ... HTTPS traffic to the ISA server which then "reverse proxies" OWA out to the ... Microsoft will not support AD authentication in a DMZ or internet ...
    (microsoft.public.isaserver)
  • Authentication Problem
    ... Win2k SP4 member server part of a Wink2 Domain but experience the following: ... Set which will allow anonymous software to get updated files like Windows ... If I enable authentication and it's exactly what I want to do (because I ... already setup 2 other ISA servers that way before whitout any problem), ...
    (microsoft.public.isa.clients)