一步一步配置Moss 2010 Form 认证

一步一步配置Moss 2010 Form 认证

1.配置一个用户数据库，这里使用Aspnetdb，下面的步聚我们将创建这个数据库

a.启动cmd 并运行 cd C:\Windows\Microsoft.NET\Framework\v2.0.50727

b.执行 aspnet_regsql.exe

c.点击下一步

d.选择 Configure SQL Server for application services 并点击下一步

e.输入Sql server的服务器名称和要新建的数据库名称aspnetdb，并点击下一步

f.点击 Finish 完成

2.在aspnetdb中创建用户

a. 下载 FBA User Management Tool http://fbamanagementtool.codeplex.com/

b. 解压缩MembershipSeeder.zip并启动release目录下的 MembershipSeeder.exe

c. 点击Configure … ,输入Sql server的服务器名称（注意与第一大步中保持一致）

d. 点击Create,这个工具将在aspnetdb中创建 user1 … user50等50个用户，密码为!Passw0rd

3.配置Web.config (建议在配置任何web.config文件之前先备份原文件，以备操作失误使得SharePoint崩溃时用于恢复)

a.配置C:\Program Files\CommonFiles\Microsoft Shared\Web Server Extensions\14\WebServices\SecurityToken\web.config，注<system.net>和<system.web>节点时原有节点，只需更新相应的内容。

<system.net> <connectionManagement> <add address="*" maxconnection="10000" /> </connectionManagement> </system.net> <connectionStrings> <add name="SQLConnectionString" connectionString="Data Source=.;Initial Catalog=aspnetdb; Persist Security Info=True;User ID=fba;Password=cc8866" providerName="System.Data.SqlClient" /> </connectionStrings> <system.web> <roleManager enabled="true" cacheRolesInCookie="false"> <providers> <add name="SqlRoleProvider" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" /> <add connectionStringName="SQLConnectionString" applicationName="/" description="Stores and retrieves roles from SQL Server" name="fbarole" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </roleManager> <membership> <providers> <add name="SqlMembershipProvider" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" /> <add connectionStringName="SQLConnectionString" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="/" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="fbarole" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </membership> <authentication mode="Windows" /> </system.web>

b. 配置管理中心的web.config

在<configuration>节点下添加

<system.net> <connectionManagement> <add address="*" maxconnection="10000" /> </connectionManagement> </system.net> <connectionStrings> <add name="SQLConnectionString" connectionString="Data Source=.;Initial Catalog=aspnetdb; Persist Security Info=True;User ID=fba;Password=cc8866" providerName="System.Data.SqlClient" /> </connectionStrings>

更新roleManager和 membership 节点：

<roleManager defaultProvider="AspNetWindowsTokenRoleProvider" enabled="true" cacheRolesInCookie="false"> <providers> <add name="SqlRoleProvider" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthRoleProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" /> <add connectionStringName="SQLConnectionString" applicationName="/" description="Stores and retrieves roles from SQL Server" name="fbarole" type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </roleManager> <membership> <providers> <add name="SqlMembershipProvider" type="Microsoft.SharePoint.Administration.Claims.SPClaimsAuthMembershipProvider, Microsoft.SharePoint, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" /> <add connectionStringName="SQLConnectionString" passwordAttemptWindow="5" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="true" applicationName="/" requiresUniqueEmail="true" passwordFormat="Hashed" description="Stores and Retrieves membership data from SQL Server" name="fbarole" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> </providers> </membership>

4.新建Web Application （注意选择Claims,并且enableFBA, 填写对应的provider,注意与上面的web.config中的保持一致 ）

5.新建网站集，注意第一管理员是windows 用户 第二管理员是我们在aspnetdb中创建的user1

6.测试, 打开上面新建的网站集，登陆时选择 Forms Authentication

输入用户名user1, 密码!Passw0rd， 点击 Sign In

登陆成功：