1. Select “Claims Based Authentication<\/strong>.”<\/p>\n <\/a>2. Select “Enable Forms Based Authentication<\/strong>” and fill in the provider name and role manager name (Give any name you want, these two names will be used in web.config files later).<\/p>\n <\/p>\n 1. First, open IIS manager and find “SharePoint Central Administration v4” application and explore it.<\/p>\n <\/a>2. Find web.config file, back it up first.<\/p>\n 3. Open web.config again and find the “providers<\/strong>” section under the “roleManager<\/strong>” section and add following node<\/span>:<\/p>\n <add name=”LdapMembershipRole”<\/p>\n type=”Microsoft.Office.Server.Security.LdapRoleProvider,<\/p>\n Microsoft.Office.Server,<\/p>\n Version=14.0.0.0, Culture=neutral,<\/p>\n PublicKeyToken=71e9bce111e9429c”<\/p>\n server=”your server name or ip”<\/p>\n port=”389″<\/p>\n useSSL=”false”<\/p>\n groupContainer=”OU=ou1,DC=sancheng08,DC=com”<\/p>\n groupNameAttribute=”cn”<\/p>\n groupNameAlternateSearchAttribute=”samAccountName”<\/p>\n groupMemberAttribute=”member”<\/p>\n userNameAttribute=”cn”<\/p>\n dnAttribute=”distinguishedName”<\/p>\n groupFilter=”(ObjectClass=group)”<\/p>\n userFilter=”(ObjectClass=person)”<\/p>\n scope=”Subtree” \/><\/p>\n NOTE<\/span><\/strong>: It should look like this.<\/p>\n <\/a>a. The attribute “name<\/strong>” should be the “ASP.NET Role manager name<\/strong>” that was specified previously when we created the Web Application.<\/p>\n b.?The attribute “groupContainer<\/strong>” should be the “distinguishedName<\/strong>” of the object that contains the users to be authenticated in Active Directory. “distinguishedName<\/strong>“ <\/strong>can be found in AD.<\/p>\n c. Here “OU=ou1, DC=sancheng08, DC=com<\/strong>” stands for Organizational Unit “ou1<\/strong>” in domain “sancheng08.com<\/strong>.”<\/p>\n 4. This time, find the “providers<\/strong>” section under the “membership<\/strong>” section, and add following node<\/span>:<\/p>\n <add name=”LdapMembership”<\/p>\n type=”Microsoft.Office.Server.Security.LdapMembershipProvider,<\/p>\n Microsoft.Office.Server.UserProfiles, Version=14.0.0.0,<\/p>\n Culture=neutral, PublicKeyToken=71e9bce111e9429c”<\/p>\n server=” your server name or ip”<\/p>\n port=”389″<\/p>\n useSSL=”false”<\/p>\n userDNAttribute=”distinguishedName”<\/p>\n userNameAttribute=”sAMAccountName”<\/p>\n userContainer=”OU=ou1,DC=sancheng08,DC=com”<\/p>\n userObjectClass=”person”<\/p>\n userFilter=”(ObjectClass=person)”<\/p>\n scope=”Subtree”<\/p>\n otherRequiredUserAttributes=”sn,givenname,cn” \/><\/p>\n a. The attribute “name<\/strong>” should be the “ASP.NET Membership provider name<\/strong>“ <\/strong>previously specified when creating the Web Application.<\/p>\n b. The attribute “userContainer<\/strong>” is the same as the attribute “groupContainer<\/strong>.”<\/p>\n NOTE<\/span><\/strong>: It should look like this.<\/p>\n <\/a>5. Do the same for the web.config of “SecurityTokenServiceApplication<\/strong>.”<\/p>\n a. Under Connections -> Sites -> SharePoint Web Services<\/strong>, right click to Explore the SecurityTokenServiceApplication<\/strong>.<\/p>\n <\/a>6. For the last step, modify the web.config of the application that we newly created previously.<\/p>\n a. Find “providers<\/strong>” under “membership<\/strong>” section and add provider:<\/p>\n <add name=”LdapMembership”<\/p>\n type=”Microsoft.Office.Server.Security.LdapMembershipProvider,<\/p>\n Microsoft.Office.Server, Version=14.0.0.0, Culture=neutral,<\/p>\n PublicKeyToken=71e9bce111e9429c”<\/p>\n server=”your server name or ip”<\/p>\n port=”389″<\/p>\n useSSL=”false”<\/p>\n userDNAttribute=”distinguishedName”<\/p>\n userNameAttribute=”sAMAccountName”<\/p>\n userContainer=”OU=ou1,DC=sancheng08,DC=com”<\/p>\n userObjectClass=”person”<\/p>\n userFilter=”(ObjectClass=person)”<\/p>\n scope=”Subtree”<\/p>\n otherRequiredUserAttributes=”sn,givenname,cn” \/><\/p>\n NOTE<\/span><\/strong>: It should look like this.<\/p>\n![\"\"](\"http:\/\/www.BoostSolutions.com\/blog\/wp-content\/uploads\/2012\/04\/PIC-1-How-to-Configure-Form-Based-Authentication-using-Active-Directory-in-SharePoint-20101.png\")
<\/a><\/p>\n<\/a><\/p>\nII.Configure web.config for CA and SecurityTokenServiceApplication<\/span><\/h2>\n
<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n