RE: Form Security and WebService



Maybe others will have a better solution, but...

I don't think this has anything to do with the fact that you're using Forms
auth; it has to do with the fact that you have a membership store in SQL
Server, but want data from, I presume, AD (or at least from some other system
that uses windows authentication). You can have Forms Auth with active
directory as the membership store--it doesn't have to be SQL Server.
Admittedly, it's probably most common to use SQL Server with Forms
authentication. I suspect that if you were to successfully authenticate your
batch user with Forms Authentication (which I think you could still do in
code), you'd still have the same problem--the user data is elsewhere.

AFAIK, you can only have one membership provider in WSS, but I don't see why
you can't write your own web service to poll AD to get the user profile you
want, then provision that user in your SQL membership store using the WSS
service. There's nothing to stop you from creating a user principle in code
and authenticating against AD to get the user data you want. Then once you
have that data, call the SharePoint web service to provision the user. This
is the idea behind federation of web services.

It seems to me I saw sample code for a lot of the parts of this referenced
in the whitepaper on "Creating Shared Hosting Solutions onw Windows
SharePoint Services 3.0." Read the section on User Provisioning.

Hope this helps!

Regards,
Mike Sharp

"William Straitt" wrote:

Thanks for the reply,

But this does not resolve my problem.

We are using 'Form Security' for our portal, but I am trying to populate our
user from our HR system through the Sharepoint web services. If I use the
'Form Security' site the web service call fails because I can't authenticate
my batch user. If I use the 'NTLM' site I authenticate, but the user fails to
add because the user is not found in A.D., because they have been added to
SQL membership provider.

Any other ideas?

Thanks,
Bill

"rdcpro" wrote:

This is essentially the same situation when you want to have a search engine
crawl your site. You set up two separate zones, one using forms
authentication for your users, and another one using NTLM for your web
services client to use.

Here's an article that explains how it's done, at least for Search:

http://technet2.microsoft.com/windowsserver/WSS/en/library/378c4673-0814-4255-a79c-7c4b6a4732a51033.mspx?mfr=true

Regards,
Mike Sharp

"William Straitt" wrote:

I have been able to configure Sharepoint Services 3.0 to use Form Security.
But now I can't use the webservices because the login form comes up.

How can I configure Sharepoint to use Form Security but the webservices to
use windows security?

Thanks,
Bill
.



Relevant Pages