locked
switch authentication providers RRS feed

  • Question

  • Hello.

    Is it possible to switch a site from claims based authentication back to standard windows?

    If not can someone give me a guide to setup the blooddy thing for windows based auth. Becuase with claims based i cannot login to the sharepoint site correctly.

    Wednesday, March 2, 2011 7:18 PM

Answers

  • A quick question.. is there anything really stopping me from just deleting the webapp at port 80, keep the database then create a new webapplication, get ther right auth provider and just do a:

    mount-spcontentdatabase "nameofdb" -webapplication http://intranet 

    Would that work?

     

     

    Going to mark this one as anweared as i tried the above tonight and it worked great.
    • Marked as answer by Klorgas Friday, March 4, 2011 12:35 AM
    Wednesday, March 2, 2011 10:49 PM

All replies

  • Yes, you can change it back if needed. These steps assume SharePoint is installed to a domain.

    Basic steps

    Open Central Admin...

    Click Manage Web APplication... under Application Management

    Click the web app you would like to change

    Once selected above in the ribbon click "Authentication Providers"

    In the popup that appears click the zone you want to change.

    Change the Authentication TYpe to WIndows

    Scroll down to IIS Authentication choose Either Kerberos or NTLM (if you dont know I would start with NTLM)

    CLick Save.

    YOU will now need to change the Site COllection Administrator to someone in that Domain.  Also any sites which have access granted by the FBA provider you may need to set the permissions for at the command line.  Of you will be given No Access.  There is no deney in SP but you must be allowed permissions to access a site.

    To change permissions to a site via the command line ....

    Good overview of how to enumerate all permission you will need to change

    http://geekswithblogs.net/bjackett/archive/2009/04/24/the-power-of-powershell-and-sharepoint-enumerating-sharepoint-permissions-and.aspx

    Setting permissions by powershell

    http://technet.microsoft.com/en-us/library/ee806878.aspx

    Good luck

    Gary


    Gary Newman MCSE, MCT, CCNA MCDBA, MCAD, MCSA MCTS SharePoint 2007 Dev & Admin MCPD SharePoint 2010 Development
    Wednesday, March 2, 2011 7:44 PM
  • Yes, you can change it back if needed. These steps assume SharePoint is installed to a domain.

    Basic steps

    Open Central Admin...

    Click Manage Web APplication... under Application Management

    Click the web app you would like to change

    Once selected above in the ribbon click "Authentication Providers"

    In the popup that appears click the zone you want to change.

    Change the Authentication TYpe to WIndows

    Scroll down to IIS Authentication choose Either Kerberos or NTLM (if you dont know I would start with NTLM)

    CLick Save.

    YOU will now need to change the Site COllection Administrator to someone in that Domain.  Also any sites which have access granted by the FBA provider you may need to set the permissions for at the command line.  Of you will be given No Access.  There is no deney in SP but you must be allowed permissions to access a site.

    To change permissions to a site via the command line ....

    Good overview of how to enumerate all permission you will need to change

    http://geekswithblogs.net/bjackett/archive/2009/04/24/the-power-of-powershell-and-sharepoint-enumerating-sharepoint-permissions-and.aspx

    Setting permissions by powershell

    http://technet.microsoft.com/en-us/library/ee806878.aspx

    Good luck

    Gary


    Gary Newman MCSE, MCT, CCNA MCDBA, MCAD, MCSA MCTS SharePoint 2007 Dev & Admin MCPD SharePoint 2010 Developmen

    Hi and first thank you for your post.

     

    However... when i klick my zone i want to change, "default" is the only one ive got, ive got no option to set authentication to windows i am afraid :/

    Wednesday, March 2, 2011 10:05 PM
  • Select default to get to the screen Gary described.
    SharePoint 2010 Extensions - http://sp2010ext.codeplex.com/ My Blog - http://www.withinsharepoint.com Twitter - http://twitter.com/#!/withnsharepoint
    Wednesday, March 2, 2011 10:22 PM
  • Yes I did that. I am sorry my english gets bad when it gets late.

    I am letting a picture say more then 1000 words atm. This is my screen when ive clicked default.

     

    http://www.valfisken.com/1.jpg

    Wednesday, March 2, 2011 10:31 PM
  • A quick question.. is there anything really stopping me from just deleting the webapp at port 80, keep the database then create a new webapplication, get ther right auth provider and just do a:

    mount-spcontentdatabase "nameofdb" -webapplication http://intranet 

    Would that work?

     

     

    Going to mark this one as anweared as i tried the above tonight and it worked great.
    • Marked as answer by Klorgas Friday, March 4, 2011 12:35 AM
    Wednesday, March 2, 2011 10:49 PM