Tag Info

Hot answers tagged

5

In order to consume SharePoint REST service using .NET you could consider the following approaches: HttpClient - Provides a base class for sending HTTP requests and receiving HTTP responses from a resource identified by a URI. (.NET Framework 4.5) WebClient - provides common methods for sending data to and receiving data from a resource identified by a ...


3

The problem is the URL format that you are providing to the net use command. Take a look at the PowerShell script here http://www.lieben.nu/numb3rs/?page_id=129 which automates mapping a drive letter. You will see the format of the parameter is like this: \\domain.sharepoint.com@SSL\DavWWWRoot\sites\codesite\example\Shared Documents If you would ...


2

How to delete SP.Group in SharePoint 2013 via JSOM Use SP.GroupCollection.remove, SP.GroupCollection.removeById or SP.GroupCollection.removeByLoginName methods to remove Group from site. Example var context = SP.ClientContext.get_current(); var groups = context.get_web().get_siteGroups(); groups.removeById(groupId); context.executeQueryAsync( ...


2

OK, found it. The two parameters -AuthenticationProvider and -AuthenticationMethod are from different worlds, not to be used together. The first one works with claims based auth while the second one with Classic Windows auth. To achieve my goal I need to use these commands: $auth = New-SPAuthenticationProvider -DisableKerberos:$false New-SPWebApplication ...


2

Keep me signed in uses cookies to keep a user signed in...so this is only an issue for users who share their computer with other users. In situations where users are sharing computers it should already be standard policy to log out of any sensitive apps and accounts that shouldn't be accessible to other users... I don't see any real security flaw here. ...


1

I dont think Claims is must go for Kerberos. In SharePoint 2013 it is by default but in SharePoint 2010 their is no such restriction. You can use both Claims as well as Classic. In order to Configure the ECS with Kerberos, here are the steps: Create Excel Services service account. Configure a service principal name (SPN) on the Excel Services service ...


1

If i understand your question correctly, "you have setup Kerberos authentication for Excel + SSAS in SharePoint but not in IIS Pool and wondering if its necessary to set it to claim based in IIS pool or it should work with the classic mode?" In this case i would recommend you to have a look here. . It may help you to understand.


1

SharePoint handles redirecting a user to authenticate when they aren't already. Also, Access Denied error page normally means that the user is authenticated and just doesn't have permissions to see the content they are attempting to access. This fits with your scenario since you say the page is private which implies you have already logged in. What you ...


1

To the best of my understanding is that not much has changed. SharePoint Online is now looking for SPOIDCRL cookie rather than FedAuth cookie. The FedAuth cookie was used and depended a lot on ADFS. The new SPOIDCRL is now using Azure AD Sync Service.


1

One alternative is to share your site to external user where user can sign in with a Live-ID account instead. But that really depends on what your non-AD users are supposed to do in SharePoint Online? Document management is fine, but administration of Site Collection isn’t. Ref: Share sites or documents with people outside your organization


1

Both phpSPO and PHP-SharePoint-Lists-API (see SharePointOnlineAuth.php) libraries support claims-based authentication for SharePoint Online. The following diagram illustrates how active authentication to SharePoint Online (SPO) is performed phpSPO client.signIn (username, password) The signin method performs a claims-based authentication: build a ...


1

You can use this library https://github.com/vgrem/phpSPO <?php require_once 'SPOClient.php'; $username = 'username@domain.onmicrosoft.com'; $password = 'password'; $url = "https://domain.sharepoint.com/"; $client = new SPOClient($url); $client->signIn($username,$password); ?>


1

There are many variations you can take with this - and really you need to consider more than just your content. For true separation: I would have a dedicated DC to manage service accounts. I would break up my DMZ behind firewall contexts with a reverse proxy publishing SharePoint at the edge. proxy/firewall -- SP Server -- Firewall -- SQL/DC For true ...


1

Hi Chuck Norris (nice pseudo, btw), In your case (authentication through an external web site), you're probably better off writing a custom Security Token Service and register it with SharePoint. You can find some information about developing such a piece of software at http://msdn.microsoft.com/en-us/magazine/dd347547.aspx. Contact me offline at Info at ...


1

It is claims form of user info stored in SharePoint .w means that it's windows account and after the | character is either login name or SID. SID is typically used for groups. You can try to use PowerShell to translate it to something meaningful: $objSID = New-Object ...


1

I don't think you can actually accomplish this using windows authentication. For the user name portion, if you think about it for a moment, how would you actually know they entered the "wrong" user name? If I enter domain\jsmith but I intended to enter domain\jsmithe, both could actually be valid users. For both the user name and password, the active ...


1

From the technical point of view you can use this one account for this purpose. From a best practice I would not recommend it. Enabling delegation is always a securitry threat. Please check out this Microsoft KB article for all the needed details: http://support2.microsoft.com/kb/2723073 From reading your questions I get the impression you are missing ...


1

The difference is in "authentication mode" settings. Windows authentication provides real windows user and then this would allow us to make resource requests from ASP.NET while impersonating the Windows identity of whoever was logged on. With forms authentication ASP.NET itself makes requests for system resources using the Application Pool account. Look ...


1

if you are SharePoint online, i would suggest that you leverage the AppModel. Register an App Id and App Secret. Have your service build a context to SharePoint. You can use the SharePoint Web Toolkit to build a context to SharePoint in .NET. Using the Client Side Object Model (CSOM), request the current user information from SharePoint Online. You ...


1

You should Create Different AD Account for your Contractors and Partners Different From all your FTE(Full Time Employees) lets call it All_Employees. Add All_Employees into your SharePoint Site which will give your FTE's Access to your site, but not Contractors . You should Contact your AD Vendor and Request this information from their's end to apply these. ...


1

Coming back late to this but if you are still up an running is it because your services are load balanced across your two servers? The errors should tell you which machine is generating the logon attempt. It could be one of the following: Time is off - Kerberos by default requires all servers be within 5 minutes of each other, if the Auth token time ...


1

To configure the Kerberos, you have to perform following steps. Configure SQL Server for kerberos Authentication Create DNS entry for your web application Create SPN for the DNS(you will use to access the SharePoint) Make Changes in Central admin and change authentication To Kerberos. Enable Constrained Delegation here is complete guide and step by step ...


1

In my opinion it is not a problem with the AAMs as you can access http://myserver.domain.com/pages/home.aspx and other pages of this site. It sounds to me as if the problem would be located on your root site. Just as a first step: Did you check if masterpage, style sheets, script files etc. are checked in and published? (although I think that at least ...


1

I would recommend JShare. It is Android and Java library for SharePoint. It supports few authentication options including NTLM.


1

If anyone ever has the same problem, I found a solution to this: instead of hardcoding the wreply parameter, I first access the SharePoint site + "/_forms/default.aspx" with a request that does not follow redirects and has the user agent set. The response has a Location header that I get and which contains a wreply parameter. Only the left part (in the Uri ...


1

The following example demonstrates how to authenticate SharePoint SOAP Services in SharePoint Online using SharePointOnlineCredentials class : public static CookieContainer GetAuthCookies(Uri webUri, string userName, string password) { var securePassword = new SecureString(); foreach (char c in password) { securePassword.AppendChar(c); } var ...


1

First of all, a user must be a site collection administrator to be able to grant an app to use app-only policy. Once you have installed and trusted (granted) an app, you can use app only requests to the site or web. Basically there is an accessToken called App Only Token that you have to create in your code to request app only access. Here is the sample ...


1

ADFS: The TokenLifetime property can be set at the ADFS end using the command upon creation . Below is example is for 2 sec . Set this value to a high number ,so that the session never expires while working on page . Add-ADFSRelyingPartyTrust -Name "abc" -Identifier "https://abc/_trust/" -WsFedEndpoint "https://abc/_trust/" -TokenLifetime 2 ...


1

The following example demonstrates how to authenticate HttpClient in SharePoint Online: public class SPHttpClientHandler : HttpClientHandler { public SPHttpClientHandler(Uri webUri, string userName, string password) { CookieContainer = GetAuthCookies(webUri, userName, password); FormatType = FormatType.Json; } protected ...


1

The solution described here is for SP 2010 but works perfectly fine against SP2013. Summary: You cannot use SharePointOnlineCredentials class. You need to get the FedAuth cookie by making a request against the ADFS server and then attach it to every CSOM request.



Only top voted, non community-wiki answers of a minimum length are eligible