IT-Spirit Knowledge Base

This Article describes how to set Kerberos for your SharePoint Web Application, we consider that the kerberos is correctly confugured on the SQL side: SQL Service run with an Active Directory Account and the associated SPN is configured...

To create and configure web application with kerberos follow these steps:

1. Create an Active Directory user account to run the IIS application pool.
2. Set the SPN on this account.
3. Trust Kerberos delegation on this account.
4. Grant the rights "Local and Remote Activation" on the application pool account for the following DCOM object: IIS WARMREG ADMIN (for all web front end servers).
5. Add the application pool account into the User Rights Assignments: "Act as a part of Operating System" (for all web front end servers).
6. Create the web application with Host Header and select Kerberos for the authentication methods. Run the application pool with the application pool account created before.
7. Edit the ApplicationHost.Config file on all web front end servers, locate this tag: <local path="name of yoursite">, next locate <windows security...> and modifify this tag as follow: <Windows security=.... UseAppPoolCredentials="TRUE" UseKernelMode="TRUE">
8. Your are done.
   

Prerequisites

First thing when you decide to test MOSS 2010 is to install an W2k8 64 bits, the SQL server must be a SQL 2008 64 bits SP1 with CU2.
After that launch the setup and read the following instructions (In our Case SQL and MOSS are installed on the same machine).
We decide to install the Farm in Kerberos authentication procotol.

Before to begin the MOSS installation you must install the following hotfix:

http://connect.microsoft.com/VisualStudio/Downloads/DownloadDetails.aspx?DownloadID=21953

Good Thing

You can install prerequistes software automaticlally through internet!!!! The setup module Install IIS7 and configure it transparently!!!!
During the installation prerequistes the setup install the following softwares:

• Windows Server 2008 Service Pack 2

• Application Server Role, Web Server (IIS) Role

• Microsoft SQL Server 2008 Native Client

• Microsoft .NET Framework 3.5 SP1

• Windows PowerShell(TM) V2 (CTP3)

• Microsoft "Geneva" Framework Runtime

• Microsoft Sync Framework Runtime v1.0 (x64)

• Microsoft Chart Controls for Microsoft .NET Framework 3.5

• Microsoft Filter Pack 2.0

• Microsoft SQL Server 2008 Analysis Services ADOMD.NET

After Installing the prerequisites softwares, launch the setup installation MOSS program and choose the following options:

_Installation choice step, please choose Server Farm, look the Web Front options is not here....

_Server type step, please choose Complete install and leave the default options.

SharePoint Products Wizzard step

Before to launch the wizzard, please create two Active Directory accounts: One for setup MOSS and another one for Farm Admin purpose, for the Farm Admin account please set the SPN, grant this into IIS WarmReg Dcom object with local and remote activation. Grant the farm admin account local admin of the MOSS server. For the Setup MOSS account grant this into SQL with the following roles: DBCreator, SecuriyAdmin.

After that, log on the MOSS server with the setup account credentials and apply the following procedure:

_Create a New Farm.

_Specify the SQL instance and give theFarm Admin credentials.

_Wait few minutes,the setup is creating your farm.

New Security features during the setup wizzard: Passphrase to secure communication between farm, data and servers:

As you can see no great news about the installation, the new things is just to simplify the setup process with no choice between complete, web front or stand alone, juste Server Farm or Stand Alone and the last thing is the setup process is capable to dowlnload the requirement.

Download the following tools:

_PowerShell for windows 2003: http://www.microsoft.com/downloads/details.aspx?FamilyID=10EE29AF-7C3A-4057-8367-C9C1DAB6E2BF&displaylang=en

_Powergui: http://www.powergui.org/downloads.jspa , this is optional but is a very useful gui for scripting and navigating between methods and class...

_Powerpacks for SharePoint: http://www.powergui.org/kbcategory.jspa?categoryID=354

Install all products and when you are finished to install Powergui, add the SharePoint packages.

Note:Keep in mind, you can write yourscript only on the WSS server because the remote commands does not exists, all tools must be installed on one of WSS server who is member of your farm. 

The basics...

When you write a script for WSS, the first line begin by:

[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint") | Where-Object { $_.GetType().FullName -ne "System.Reflection.Assembly" } --->Recomended

OR

[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.SharePoint") --->In some examples through Internet...

After loading into the GAC the DLL for SharePoint, you must to connect on the site where you need to script...

$SiteUrl = http://yoursite

#Creating your SP site object....

$Site = new-object Microsoft.SharePoint.SPSite($Site)

After that, you can display for example the site properties:

$Site.AllWebs | format-table | URL, LastItemModifiedDate, Created

Note: If you use the SharePoint PowerPack, you can browse through the $Site variable and you can see all propreties and methods.

Create HTTP endpoint can be usefull when you want to retrieve data on database without to install iis or to develop an application, in this exemple we create a Web Service who getdata in XML format by using a web service.

STEP 1: Create the store procedure.

CREATE PROCEDURE [dbo].[GetContacts] -->This store procedure retrieve Contacts from the Contact table...

AS BEGIN SET NOCOUNT ON;

SELECT TOP 20 [FirstName],[LastName] FROM
[Person].[Contact] ORDER BY [LastName];

END

STEP 2: Reserve the HTTP name space.

When you create an HTTP endpoint, you need to check if you don't have an IIS server runing, or if the port 80 is in used, after that youmust reserve the name of yourwebsite by the following command:

sp_reserve_http_namespace N'http://MyServer:80'  --> in this exemple the site http://MyServer is reserved.
GO

STEP 3: Create the HTTP Endpoint.

Select your database and execute this T-SQL script:

CREATE ENDPOINT AW_Contacts

STATE = Started

AS HTTP

(

PATH ='/Contacts',

AUTHENTICATION = (INTEGRATED), --> You can choose NTLM if you want...

PORTS = (CLEAR),

SITE ='http://myserver'

)

FOR SOAP

(

WEBMETHOD 'GetContacts'

(NAME ='AdventureWorks.dbo.GetContacts'),

WSDL = DEFAULT,

DATABASE ='AdventureWorks',

NAMESPACE = DEFAULT

)

Your HTTP Endpoint is created, to access type the following URL: http://myserver/Contacts?WSDL

NOTE: Don't forget to fix the "Connect" right for the accounts who access on this web service.