Tag Info

Hot answers tagged

4

If you just want to add all users, just add NT AUTHORITY\authenticated users If you want to add every user individually, you have to get users (maybe as Principals) from AD, and add them to a group in SharePoint. var principal... var loginName = @"MYDOMAIN\" + principal.SamAccountName; var name = principal.DisplayName; ...


3

I hope this may help you http://blogs.msdn.com/b/tehnoonr/archive/2010/11/21/how-to-setup-user-profile-synchronization-between-sharepoint-2010-and-sun-ldap.aspx we used this approach for importing the user profile.


3

Just to add a little more detail here, the SharePoint Farm account should not be the account that is used by FIM to actually perform the sync. The sync account is specified when setting up the sync connection (DOMAIN\spups in Spencer's rational guide), and needs to have the "Replicating Directory Changes" permission in AD. In contrast, the SharePoint Farm ...


2

You need a Windows User CAL to leverage SharePoint Foundation (doesn't matter how your users authenticate to it), that is how Foundation is provided "for free" (it isn't free). For SQL, it depends on how you license it. SQL Express is "free", there are no specific license terms/CALs but there are serious limitations with the product. For SQL ...


1

As you have found, configuring FBA is not trivial. MANY posts I have found just plain don't work. The best I have found is Mirjam's. She has two, I have used the one for SQL FBA and it works every time. Here is the link to her post on AD FBA: http://sharepointchick.com/archive/0001/01/01/configuring-claims-and-forms-based-authentication-for-use-with-an.aspx ...


1

If I understand correctly, you would like to windows authentication users logged in automatically using the popup, while also showing the login page for FBA users. The big issue is that once you ask the browser to authenticate via AD, you won't be able to show a page until they respond to the AD login request - so you have to know in advance if the user ...


1

Configuring the user profile service for Novell eDirectory is not exactly straightforward. The best guide (as usual) can be found on Spence Harbar's blog. He has an article dedicated to configuring this: http://www.harbar.net/articles/sp2010upsedir.aspx


1

To modify the login name of an User I used the SPFarm object. The code looks simple like this: Microsoft.SharePoint.SPSecurity.RunWithElevatedPrivileges(delegate() { using (SPSite elevatedSite = new SPSite(url)) { using (SPWeb web = elevatedSite.OpenWeb()) { ...


1

See the ISPUserMigrator interface.


1

Out of the box no. You would need to create custom code or script that runs thru and captures your LDAP user permissions than assign those to the windows user. Third party administrative products like Axceler ControlPoint and AvePoint DocAve, have this ability. While they are great tools, it's not very cost effective to deploy them for this single ...


1

You need to set up the UPA to sync to AD, as you're aware. On that Sync connection, you need to map the SPS-ClaimID to sAMAccountName.


1

There is an additional step of setting permissions on a registry key (if you have your accounts set up a certain way, i.e. not everything is running a the farm account, etc). The keys are mentioned here: http://blogs.msdn.com/b/jorman/archive/2011/02/16/people-picker-why-don-t-you-trust-me.aspx and the specific step is pasted below for convenience: Set ...


1

It looks like the link provided by Emon is broken, so I thought I'd provide a configuration here: <add name="ldapmembership" type="Microsoft.Office.Server.Security.LdapMembershipProvider, Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" server="xxxx" port="389" useSSL="false" ...


1

I believe you've already asked this question: Please see link Get single user from multiple domain problem


1

Did you try to change the service account by going to Central Admin->Security->Configure Service Account. Select the Windows Service - User Profile Synchronization service from the drop down and change the service account. You can also check out the detailed guide from harbar.net for User Profile Synchronization. ...


1

Not sure if your connection string needs to be a little more specific (point to a container with users in it). However, it sounds like you're not even getting that far. Try removing the 'cn=' from the connectionUsername attribute (i.e. make it <domain>\<username>).


1

I believe your going to need to add ad fs to your plan. This should get you pointed in the right direction. http://technet.microsoft.com/en-us/library/dd857388.aspx


1

Where do you search for the users and roles? Have you already set up providers for both application web.config and Central Administration web.config? To be able to grant users access through Policy for WebApplication in Central Administration > Applications you need to set up membershipprovider in CA as well, and add AspNetWindowsTokenRoleProvider as ...



Only top voted, non community-wiki answers of a minimum length are eligible