Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 2 down vote favorite
1

So I've read a number of other questions on this topic and believe my situation is different. I have a web application with Forms Authentication. It is configured in the web.config files of central admin, the web app, and the security token service. I have the wildcards configured for the membership provider in central admin and the web application.

When I open a document library on the web application (as a fba user), the Key Filters for Created By and Modified By come back with the following error:

No exact match was found. Click the item(s) that did not resolve for more options.

If I type in a partial value it gives me legitimate suggestions, but if I select one I still get the error message and the Key filter does not actually filter anything

Web Application:

<PeoplePickerWildcards>
  <clear />
  <add key="AspNetSqlMembershipProvider" value="%" />
  <add key="MY-MembershipProvider" value="%" />
</PeoplePickerWildcards>
<membership defaultProvider="i">
  <providers>
    <add name="i" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <!--connection string for GCS Customer sql membership authentication with sharepoint-->
    <add connectionStringName="MYMembership" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="MIRHostedSolution" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="MY-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
  </providers>
</membership>
<roleManager defaultProvider="c" enabled="true" cacheRolesInCookie="false">
  <providers>
    <add name="c" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />
    <!--connection string for GCS Customer sql membership authentication with sharepoint-->
    <add connectionStringName="MYMembership" applicationName="MIRHostedSolution" description="Stores and retrieves roles from SQL Server" name="MY-RoleManager" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
  </providers>
</roleManager>

Central Admin

<PeoplePickerWildcards>
  <clear />
  <add key="AspNetSqlMembershipProvider" value="%" />
  <add key="MY-MembershipProvider" value="%" />
</PeoplePickerWildcards>
<roleManager defaultProvider="AspNetWindowsTokenRoleProvider" enabled="true" cacheRolesInCookie="false">
  <providers>
    <add connectionStringName="SQLConnectionString" applicationName="gcsapplication" description="Stores and retrieves roles from SQL Server" name="SQL-RoleManager" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <!-- Role manager provider for GCS Customer -->
    <add connectionStringName="GcsCustomerDbConnectionString" applicationName="MIRHostedSolution" description="Stores and retrieves roles from SQL Server" name="GCS-RoleManager" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <!-- Role manager provider for GCS Customer -->
    <add connectionStringName="GcsMIRForMembership" applicationName="MIRHostedSolution" description="Stores and retrieves roles from SQL Server" name="GCSMIR-RoleManager" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <add connectionStringName="MYMembership" applicationName="MIRHostedSolution" description="Stores and retrieves roles from SQL Server" name="MY-RoleManager" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
  </providers>
</roleManager>
<membership defaultProvider="SQL-MembershipProvider">
  <providers>
    <add connectionStringName="SQLConnectionString" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="gcsapplication" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="SQL-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <!-- Membership  provider for GCS Customer -->
    <add connectionStringName="GcsCustomerDbConnectionString" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="MIRHostedSolution" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="GCS-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <!-- Membership  provider for GCS Customer -->
    <add connectionStringName="GcsMIRForMembership" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="MIRHostedSolution" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="GCSMIR-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    <add connectionStringName="MYMembership" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="MIRHostedSolution" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="MY-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
  </providers>
</membership>

STS Config

<membership defaultProvider="i"> 
    <providers> 
        <add name="i" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" /> 
        <add connectionStringName="SQLConnectionString" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="gcsapplication" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="SQL-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />


    <add connectionStringName="MYMembership" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="MIRHostedSolution" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="MY-MembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
    </providers> 
</membership> 

  <system.web>      
        <webServices>
            <protocols>
                <remove name="HttpGet" />
                <remove name="HttpPost" />
                <remove name="HttpPostLocalhost" />
                <add name="Documentation" />
            </protocols>
        </webServices>
        <httpHandlers>
            <remove verb="*" path="*.asmx"/>
        </httpHandlers>
        <customErrors mode="On"/>
        <authentication mode="None" />
        <identity impersonate="false" />
        <authorization>
          <allow users="*" />
        </authorization>
    </system.web>
share|improve this question
Looks like you're missing the STS config which needs to be done on each server in the farm. Also, CA should not have a default provider. While these are AD LDS examples, it should get you pointed in the right direction for overall configuration. – Trevor Seward Jan 8 at 21:19
see update. The STS configuration was already there, and removing default provider from CA config did not change anything regarding functionality. – Matt Jan 9 at 16:34
Do you happen to know if there's a reason those examples used * instead of % for the wildcard? – Matt Jan 9 at 16:39
The wildcard for SQL is "%", the wildcard for LDAP is "*". – Trevor Seward Jan 9 at 20:24
none of that has actually worked for me, unfortunately. – Matt Jan 14 at 16:05
show 2 more comments

1 Answer

up vote 1 down vote accepted

So, this turned out to be a database permission issue. Apparently the special database roles that come along with the generated ASP.NET membership framework-generated databases are required for all users who wish to do things with the membership database. Farm account has dbo, so that's not a problem and that's why the thing works in Central Administration. However, the app pool account for the web application only had data reader (which I thought should be PLENTY of permission). I must have switched the app pool account from being the same as the farm account (dev server, etc) at some point which would be why I started encountering these issues.

This is the guide I used which explicitly mentioned these permissions.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.