Part 1: – How To: Configure and Consume Kerberos for use in SQL Server 2008 R2 and SharePoint 2010 Part1
Part 2: – Configuring Service Applications, Sites, and Verifying our Work
Part 3: – Test out Using Web Parts and Communicating Securely across Web Applications with Kerberos
Synopsis
In Part 1 we covered the installation of SQL, creating SPN’s for SQL, creating and configuring Service Accounts for SharePoint and the requite SPNs for SharePoint Service Applications and Web Applications. In this Part 2 we will pick up from there an build out the following
- Create, Configure Search Service Application
- Create Kerberos Authentication Web Applications for
- Intranet Site – Portal
- Team Site – Teams
- My Site – My
- Create Site Collections for all three
Part 5: How to Make it Work
NEXT I WILL START CREATING SERVICE APPLICATIONS
MY FIRST ONE WILL BE SEARCH SO WHEN I CREATE MY SITES, THEY CAN ALREADY BE SQUARED AWAY FOR CRAWLING AND SEARCHING
So, right now my Service Applications is Naked.. lets get Search done first so when we create or Web Apps they will be added to the Content Source of the Search Service Applicaitons.
Screen clipping taken: 8/14/2010 11:29 AM
Screen clipping taken: 8/14/2010 11:39 AM
Screen clipping taken: 8/14/2010 11:49 AM
Screen clipping taken: 8/14/2010 11:51 AM
Now I will create my Web Apps for
- Portal
- Teams
- My
Right now the only Site is the Admin Site
Screen clipping taken: 8/14/2010 12:01 PM
We begin by creating a new Web App for our Portal
Screen clipping taken: 8/14/2010 12:03 PM
Change the Auth Provider to Kerberos
Screen clipping taken: 8/14/2010 12:04 PM
Create a new App Pool with the Managed Account that we have and already created the SPN for
Name your Content DB appropriately
Screen clipping taken: 8/14/2010 12:05 PM
Accept the other Defaults
Screen clipping taken: 8/14/2010 12:06 PM
Once you click OK you will get prompted about the use of Kerberos
Screen clipping taken: 8/14/2010 12:06 PM
Screen clipping taken: 8/14/2010 12:09 PM
Comfirmation is provided
Screen clipping taken: 8/14/2010 12:10 PM
Verify Auth Provider
Screen clipping taken: 8/14/2010 12:11 PM
Click Default
Screen clipping taken: 8/14/2010 12:14 PM
Screen clipping taken: 8/14/2010 12:14 PM
Now lets create a Site collection
Screen clipping taken: 8/14/2010 12:18 PM
Screen clipping taken: 8/14/2010 12:20 PM
Screen clipping taken: 8/14/2010 12:48 PM
And if all goes well
Screen clipping taken: 8/14/2010 1:22 PM
Let us now verify that Kerberos is what was used to get us to this point
We will use a variety of techniques
FIRST THRU IIS
Screen clipping taken: 8/14/2010 1:27 PM
Screen clipping taken: 8/14/2010 1:31 PM
Screen clipping taken: 8/14/2010 1:32 PM
Screen clipping taken: 8/14/2010 1:39 PM
You can also run Klist on the WFE
Screen clipping taken: 8/14/2010 1:56 PM
This is also what we have as far as Databases created so far based on our configs
Screen clipping taken: 8/14/2010 1:57 PM
Screen clipping taken: 8/14/2010 2:07 PM
Screen clipping taken: 8/14/2010 2:07 PM
Screen clipping taken: 8/14/2010 2:08 PM
Screen clipping taken: 8/14/2010 2:09 PM
DO THE SAME FOR the MySite
Then we should have the following Web Apps Created
Screen clipping taken: 8/14/2010 2:18 PM
Screen clipping taken: 8/14/2010 2:37 PM
Screen clipping taken: 8/14/2010 6:01 PM
On the MySite turn on Self Service Site Creation
Screen clipping taken: 8/14/2010 6:05 PM
Pingback: Tweets that mention How To: Configure and Consume Kerberos for use in SQL Server 2008 R2 and SharePoint 2010 Part 2 « Fabian Williams Blog -- Topsy.com