How To: Configure and Consume Kerberos for use in SQL Server 2008 R2 and SharePoint 2010 Part 2 1

Part 1: – How To: Configure and Consume Kerberos for use in SQL Server 2008 R2 and SharePoint 2010 Part1

Part 2: – Configuring Service Applications, Sites, and Verifying our Work

Part 3: – Test out Using Web Parts and Communicating Securely across Web Applications with Kerberos

Synopsis

In Part 1 we covered the installation of SQL, creating SPN’s for SQL, creating and configuring Service Accounts for SharePoint and the requite SPNs for SharePoint Service Applications and Web Applications.  In this Part 2 we will pick up from there an build out the following

• Create, Configure Search Service Application
• Create Kerberos Authentication Web Applications for
• Intranet Site – Portal
• Team Site – Teams
• My Site – My
• Create Site Collections for all three

Part 5: How to Make it Work

NEXT I WILL START CREATING SERVICE APPLICATIONS

MY FIRST ONE WILL BE SEARCH SO WHEN I CREATE MY SITES, THEY CAN ALREADY BE SQUARED AWAY FOR CRAWLING AND SEARCHING

So, right now my Service Applications is Naked.. lets get Search done first so when we create or Web Apps they will be added to the Content Source of the Search Service Applicaitons.

Screen clipping taken: 8/14/2010 11:29 AM

Screen clipping taken: 8/14/2010 11:39 AM

Screen clipping taken: 8/14/2010 11:49 AM

Screen clipping taken: 8/14/2010 11:51 AM

Now I will create my Web Apps for

1. Portal

1. Teams

1. My

Right now the only Site is the Admin Site

Screen clipping taken: 8/14/2010 12:01 PM

We begin by creating a new Web App for our Portal

Screen clipping taken: 8/14/2010 12:03 PM

Change the Auth Provider to Kerberos

Screen clipping taken: 8/14/2010 12:04 PM

Create a new App Pool with the Managed Account that we have and already created the SPN for

Name your Content DB appropriately

Screen clipping taken: 8/14/2010 12:05 PM

Accept the other Defaults

Screen clipping taken: 8/14/2010 12:06 PM

Once you click OK you will get prompted about the use of Kerberos

Screen clipping taken: 8/14/2010 12:06 PM

Screen clipping taken: 8/14/2010 12:09 PM

Comfirmation is provided

Screen clipping taken: 8/14/2010 12:10 PM

Verify Auth Provider

Screen clipping taken: 8/14/2010 12:11 PM

Click Default

Screen clipping taken: 8/14/2010 12:14 PM

Screen clipping taken: 8/14/2010 12:14 PM

Now lets create a Site collection

Screen clipping taken: 8/14/2010 12:18 PM

Screen clipping taken: 8/14/2010 12:20 PM

Screen clipping taken: 8/14/2010 12:48 PM

And if all goes well

Screen clipping taken: 8/14/2010 1:22 PM

Let us now verify that Kerberos is what was used to get us to this point

We will use a variety of techniques

FIRST THRU IIS

Screen clipping taken: 8/14/2010 1:27 PM

Screen clipping taken: 8/14/2010 1:31 PM

Screen clipping taken: 8/14/2010 1:32 PM

Screen clipping taken: 8/14/2010 1:39 PM

You can also run Klist on the WFE

Screen clipping taken: 8/14/2010 1:56 PM

This is also what we have as far as Databases created so far based on our configs

Screen clipping taken: 8/14/2010 1:57 PM

Screen clipping taken: 8/14/2010 2:07 PM

Screen clipping taken: 8/14/2010 2:07 PM

Screen clipping taken: 8/14/2010 2:08 PM

Screen clipping taken: 8/14/2010 2:09 PM

DO THE SAME FOR the MySite

Then we should have the following Web Apps Created

Screen clipping taken: 8/14/2010 2:18 PM

Screen clipping taken: 8/14/2010 2:37 PM

Screen clipping taken: 8/14/2010 6:01 PM

On the MySite turn on Self Service Site Creation

Screen clipping taken: 8/14/2010 6:05 PM