Local login fails on WSS v3 for me

We have leased our own dedicated server as part of working on getting the back end tech setup for CodeMash 2008. Last year we used Sharepoint 2003 for the planning portal. This year we will be using WSS v3. There are a lot of great enhancements that will help us a lot.

I installed WSS on our server, and then deployed an asp.net application that we are going to use to collect speaker submissions. This app is a simple form, with some validation, that then submits the topic to a list in WSS via the WSS web services.

The app worked great on my laptop connecting to our WSS site on our dedicated server. When I deployed the app however, it was failing the authentication into the WSS web services.

The first step to troubleshoot this was to log into the portal from my machine. That worked. Then, try to login from the server itself (since that is where the web service is being called from.). That didn't work. The portal was working fine, but wouldn't let you login from the local machine.

After weeks of scouring all search engines, I finally stumbled across a blog posting by Robert Bogue. His article talks about this problem, and has all of the details. The short answer is that with IIS and AD, a site with 'integrated authentication' will use NTLM when the user is remote, but Kerberos when the user is local. Kerberos doesn't like web sites with host headers, and fails to log you in. Robert documents a few command line commands that you can use to disable Kerberos on the specific web site, but leave NTLM in place.

That fixed it. Thanks Robert! Turns out his blog has some great Sharepoint content.

ps. Step seven of his instructions has a small typo. NTAuthenticationProvider should be plural, NTAuthenticationProviders

Comments

Anonymous said…
Can't see your page, dude.
Not enough contrast!
4/24/2009 04:15:00 PM
Post a Comment

Popular posts from this blog

Farewell

I don't often explicitly state that I work for Quick Solutions when I post to my blog. Others that work with me talk about QSI all the time. I do this because I want the articles to be what 'I' have to say about technology, not what QSI has to say. I started working for QSI in June of 2003. I was about to start my own consulting company, and they asked me to come in to help them start their solutions business (having built a high quality technical staffing business). I thought, why not? Getting to build what I want to build on someone else's dime definitely reduces my personal risk, and if it didn't work out, I could just pick back up the 'start my own company' thing. Nearly five years have passed, and we have built a great team. A team that is considered one of the leading development shops in our region. Each, and EVERY person on this team would be considered a rock star at any company. We have a great culture for the team, and a deep seated ownership...
Read more

How does an Architect pack?

Today we are packing for the big move. Quick Solutions is moving to some new swanky office space, with an awesome new delivery center. The new center has wall to wall whiteboards, network projectors for group programming (pair programming is so 20th century), a game room, new open seating (shared workspace is the key to productivity), and lots of other new goodies. It is an amazing investment by the company, and shows their commitment to building the best team on the block. As we are packing, we started joking around (not that joking around is rare, and would have occurred regardless of the packing state). How does and architect pack? An architect doesn't pack anymore. He did that ten years ago. He goes to plenty of packing conferences, and has read a lot of books on packing. An architect will map out how the whole enterprise should pack, and even dictate what (clearly out of date) packing supplies and processes should be used. These processes will be the perfect match for some ...
Read more

Job security is a myth, and how IT Pros are Thriving

No matter how you slice it, the economy is definitely in a state of concern. Some call it a recession, some a depression, others it is a crash. Since all of those words are overloaded, I will choose to use the word Grapefruit to represent the current situation. How concerned you are with grapefruit depends on who you are, and your personal situation. It is these times of grapefruit when there is the most opportunity. Crazy, I know. But now is the time to start that crazy idea, to outmaneuver an opponent, or get desperate enough to take risks you normally wouldn’t take (personally, or as a company) during up times. All boats float in the high tide. Only great captains can navigate the low tide. There is no such thing as job security. Surprise. There just isn’t, it is a complete myth. ‘Job Security’ might have made sense two generations ago, but it just doesn’t work now. You make your own security, during good times, and during grapefruits. Through keeping your skills sharp, thro...
Read more