By Chris R. Chapman at July 27, 2010 02:47
Filed Under: claims based auth, sharepoint2010

If you’ve been following this series (Part 1, 2, 3) you know the issue:  I’ve got a SharePoint 2010 VM with three web applications, each enabled for Claims Authentication using three separate ASP.NET Membership SQL Databases.  One out of the three works reliably (ie. login/off/as another user) while the other two require a weird hokey-pokey of authenticating in using Windows credentials before letting the FBA credentials work.

Today, I was on a call with “D”, the Escalation Support Engineer assigned to my customer’s case.  He demonstrated to me how he was able to get three 2010 web apps, each with their own SQL Membership Database all working.  Up and down, left and right, no questions asked.  Baffling to me.

So, we do an EasyShare on my VM and I demonstrate the problem once more:  Port 80, works fine.  Port 85 and 90, only work after using Windows credentials.

“Could you try using the machine name in the browser address bar instead of ‘localhost’ ?”, “D” asks.

“Sure.”

And dammit.  It worked.  Each of the three web apps allowed me to sign-in/out and in again as another user.

“D” isn’t done, however.  He tries using ‘localhost’ on his end.

“They all work on my VM whether I use ‘localhost’ or the machine name,” says “D”.

Raising More Questions than Answered

Well, ain’t that just peachy.  So, the apparent “fix” for my environment is to not use ‘localhost’.  But even that’s not quite right as the port 80 web app works up and down irrespective of the means I put into the addressbar.  So, I’m left even more confused:  Why on Earth is there no consistency in a vanilla environment?

I’ve got homework to do, before I can come to a closer definitive resolution.  “D” has asked me to re-build my web apps using his recommended web.configs – that will take an hour or so.  Then I need to ping him again to see where this goes.

What. Fun.

Comments

7/27/2010 3:50:25 PM #

Steve Young

This is all too fun!!!  Great job on the blog posts.  Technology always throws a land mine in the mix.

Steve Young

Steve Young |

7/27/2010 5:15:39 PM #

Mike B

Ask "D" to look at his hosts file and examine yours.  Maybe there is something with the way the computer and SharePoint are resolving the names.  Does "D" have an alternate access mapping for Localhost?  Is there something in his IIS under host headers?

Great posts BTW... a pleasure to read

Mike B |

7/30/2010 8:04:29 PM #

Neel

Chris,

I am having the asme issue you are having, i can see users in the IIS manager, If sql role and Sql members is selected, now when i go to add users in Userpolicy, it does not even show the form auth users.

I tried creating database using Windows authentication using network service as app pool identity same user for the FBA SQL database creation with dbowner role, this did not work

Next I tried creating Sql database using FormAuth User with sql logina nd password added the same user  to database, still not resolved.

I would appreciate sending me the "recommended web.configs from "D"- THE Microsoft GUY

I have been trying to set up claims from almost a week, nothing working

Thank you

Neel

Neel |

Comments are closed

About Me

I am a Toronto-based software consultant specializing in SharePoint, .NET technologies and agile/iterative/lean software project management practices.

I am also a former Microsoft Consulting Services (MCS) Consultant with experience providing enterprise customers with subject matter expertise for planning and deploying SharePoint as well as .NET application development best practices.  I am MCAD certified (2006) and earned my Professional Scrum Master I certification in late September 2010, having previously earned my Certified Scrum Master certification in 2006. (What's the difference?)