Moss 2007 - MySite Authentication problem

[faza]

Hi,

 

I have a physical SharePoint 2007 server at my school, which is hosted by our local authority. I have setup my site and the sharedservices portal so i can use MySite. The problem I am having is that when I go to my internal/external URL for my SharePoint site it asks me for my login credentials which I type in, i can browse the site. When I select MySite it requests me to enter my login credentials again.

 

What I would like to happen is to logon once to the site and have access to Mysite and all other features. I have setup Alternate Access Paths so that i can access the site externally etc...

 

I have tried everything permissions, anonymous logon, creating a new ssp but i am unable to logon once and be able to access ALL features.

 

Any help/support appreciated

 

Faza

[LPPLUS_Support]

Are you using an ISA Server in your enviroment?

 

Regards

 

San

[faza]

No i am just using normal authentication.

[LPPLUS_Support]

Could please confirm the following:

 

- is the web application for the portal the same as the mysite?

- what is the url for the portal and for the mysite?

- can you please check the authentication providers for the web application. this can be found in the central adminstration under Application management -> Authentication Providers -> select the web application your require and then click on zone. What is the IIS Authentication set to under this section?

- also from the IIS console can you tell me what the web application directory security is set to?

 

thanks

[faza]

Hi ya,

 

 

- is the web application for the portal the same as the mysite? - I am not to sure

 

- what is the url for the portal and for the mysite? - http://servername:18341/_layouts/MySite.aspx

 

- can you please check the authentication providers for the web application. this can be found in the central adminstration under Application management -> Authentication Providers -> select the web application your require and then click on zone. What is the IIS Authentication set to under this section? Windows

 

- also from the IIS console can you tell me what the web application directory security is set to?Anonymous Logon with the ISUR account and Basic Authentication with my domain name

 

I have also Alternate Access Paths setup for my Internet default address is http://servername/staff but the aap for Internet is http://sharepoint.****.****.**.uk/staff.

 

Also something else that is strange when i just select anonymous logon it still requests for a password. I have reset the password for the ISUR account.

 

Thank You, any help is much appreciated

 

Faza

[LPPLUS_Support]

seems like the problem maybe in the authentication providers in your sharepoint central adminstrator. Could you please change the IIS authentication in the central admin under authentication providers to Basic Authentication from Windows Intergrate. Please note this is the setting in the section IIS Authentication settings which is under the Anonymous Access settings section. The IIS Authentication in Sharepoint needs to be the same as the on in the IIS Manager

 

please try that reset the IIS and test to see if you get the authentication challenge again when clicking on mysite

 

regards

 

san

[faza]

seems like the problem maybe in the authentication providers in your sharepoint central adminstrator. Could you please change the IIS authentication in the central admin under authentication providers to Basic Authentication from Windows Intergrate. Please note this is the setting in the section IIS Authentication settings which is under the Anonymous Access settings section. The IIS Authentication in Sharepoint needs to be the same as the on in the IIS Manager

 

please try that reset the IIS and test to see if you get the authentication challenge again when clicking on mysite

 

regards

 

san

 

 

I have matched both IIS and Authentication Providers but it still requests me for a username and password when clicking MySite.

[LPPLUS_Support]

Hi

 

1) are you using the internal name only ( at the moment its best to test it with the internal name )?

2) i am assuming that it creates the my site sucessfully?

3) when accessing the my site directly using the internal name in the format: http://servername.domain.co.uk/personal/username?

4) when it prompts you for the password the authentication box will display the realm directly above the user name can you provide this?

 

thanks

 

san

[faza]

Hi

 

1) are you using the internal name only ( at the moment its best to test it with the internal name )? - I have tried it with internal and still asking for credentials

 

2) i am assuming that it creates the my site sucessfully? - Creates sites fine and loads the page successfully after credentials have been entered.

 

3) when accessing the my site directly using the internal name in the format: http://servername.domain.co.uk/personal/username?

 

4) when it prompts you for the password the authentication box will display the realm directly above the user name can you provide this? - The server servername at domain name requires a username and password.

 

Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection).

 

thanks

 

san

[LPPLUS_Support]

hi

 

can you please check in IIS Manager expand the web site for your sharepoint portal and make sure all the folder are set to basic authentication in directory security and the domain name is entered.

 

also could you please confirm if the direct url is in the format: http://servername.domain.co.uk/personal/username?

 

thanks

 

san

[faza]

hi

 

can you please check in IIS Manager expand the web site for your sharepoint portal and make sure all the folder are set to basic authentication in directory security and the domain name is entered.

 

also could you please confirm if the direct url is in the format: http://servername.domain.co.uk/personal/username?

 

thanks

 

san

 

 

Yes all folders within the website are set to Basic Authentication with Anonymous NOT ticked.

 

The URL for MySite = http://sharepoint.*****.***.uk:portnumber/personal/ssf2101/default.aspx

[LPPLUS_Support]

hi

 

ok does the url for the sharepoint portal have the same port number?

[faza]

The main site has a different port number to the ssp

[LPPLUS_Support]

I am assuming when you access the portal site using the internal url you dont need the port number. Seems like you are moving from different web applications and dont have SSO therefore you are being challenged for credentials again

 

therefore could you please try the below steps but if the mysites are in production i would advice to backup the my sites:

 

The default site is located at http://yourDomain, but MySite is located at http://yourDomain:5552/personal//default.aspx. The preferred deployment scenario is where users will browse your main site with http://yourDomain, and browse mysite using http://yourDomain/personal//default.aspx. Notice there should be no port number in the url for MySite.

 

 

To address this issue, you need to follow the steps below:

 

 

Step 1: Go to the main application, that is the http://yourDomain application, create two managed path: one Explicit inclusion for path “MySite”; the second one a wildcard inclusion for path “personal”

 

 

Step 2: Create a new site collection using the MySite Host template. Now you both the sites will use the same url

[faza]

Just thought i would try removing the port number before following the steps below

 

If i remove the port number internally/externally i get a 404 not found error

[LPPLUS_Support]

only if sharepoint was that easy and forgiving. If you carry out the steps listed above it will resolve the port number and hopefully remove the second credentials challenge.

[faza]

YES!!!! Thank you very much for all your help and support. It now only asks for my credentials once.

 

The new MySite URL is http://sharepoint.******.******.******.***/personal/ssf2101/default.aspx

 

Just out of interest what did that actually do the instructions above.

 

Once again thank you much appreciated

 

Faza

[LPPLUS_Support]

Hi

 

you are welcome glad that it fixed your problem

 

What happend was that the web application for the portal and the mysite are seperate. Which should be the case

 

when the user tries to access it from http://yourDomain by clicking the they my site it is going to the other web application and therefore it needs to sign in again

 

by doing the steps above you have created the managed paths mysite and personal in http://yourDomain and referenced it to the other web application you created.

 

Therefore now your internal and external access mapping should work fine

 

Hope that explains it.

 

Regards

 

San

LP+ Limited

Edited June 25, 2010 by LPPLUS_Support