Question

Windows Authetication not working in WebAcces after setting up SharePoint Integration with Kerberos configurations

Integrations Web Client Version 10

Updated March 9, 2017

asked on March 7, 2017 • Show version history

We have setup SharePoint (2013) Integration for one of our customer. SharePoint (2013) and Laserfiche 10 are on different servers so we followed the guides for Kerberos configurations which include creating SPNs for Laserfiche server. Everything went fine and we are able to add Repository Browsing & Search web parts in SharePoint and they are perfectly functional.

But after setting up SharePoint Integration, WebAccess fails with windows authentication. Windows authentication works fine in WebAccess if we remove the SPNs. The behavior is as follows.

With SPNs created and SP integration working

When use IE browser & browse WebAccess through Laserfiche server name in URL. Windows Authentiation checked on WebAccess login page displays windows username/password dialog box. It does not authenticate even providing correct credentials.
When use Chrome browser & browse WebAccess through Laserfiche server name in URL. Windows Authentiation checked on WebAccess login page displays windows username/password dialog box. It authenticates and logins if provide credentials.
Browsing WebAccess through Laserfiche Server IP in URL. Windows Authentication checked on WebAccess login page directly authenticates and logins without displaying windows username/password dialog box.

With SPNs deleted

Using any browser when Windows Authentication checked on WebAccess login page, it directly authenticates and logins without displaying windows username/password dialog box. That is what the correct behavior but SP integration won't work in this case because SPNs doesn't exist.

Any idea where the things must be going wrong just to correct windows authentication in WebAccess. Laserfiche client does not have any issue with windows authentication.

0 0

Replies

replied on March 7, 2017

Is Web Access on the same machine as LFS? In this case the HTTP spn will apply to both processes, and if the applications are running as different users (which they should be) this will cause problems. If they are on the same machine you don't need Kerberos, so you might try having just NTLM as the only option under the Providers of Windows authentication for the Web Access application in the IIS manager.

0 0

replied on March 8, 2017 • Show version history

Web Access and LFS are on same machine and doesn't require Kervberos. But SharePoint is on different server which is why I followed the guide "Configuring Kerberos Authentication for the Laserfiche SharePoint Integration".

I have applied just NTLM as the only option under the Providers of Windows authentication for the Web Access application. Now when browsing Web Access directly, it authenticates & logins without asking username/password using windows authentication which is good.

But when I try to open a document from SharePoint Repository Browser web part.

In IE, it opens a blank page in new tab.
In chrome, it keeps asking username/password in new tab.

0 0

replied on March 9, 2017

Figured out somehow, it was the Compatibility View Settings issue in IE. Once disabled, it start opening the document in Web Access from SP web part.

Have another issue of Auto-Login in Web Access. Web Access auto logins using windows authentication only if the repository is set default. Anyhow case has been opened for this and following up with that.

0 0

You are not allowed to follow up in this post.

Question

Question

Windows Authetication not working in WebAcces after setting up SharePoint Integration with Kerberos configurations

Replies

Sign in to reply to this post.