Forefront Server Security TechCenter > Forefront Server Security Forums > Forefront Security for SharePoint > Publishing a site for anonymous access when my listener is set to use FBA.
Ask a questionAsk a question
 

Proposed AnswerPublishing a site for anonymous access when my listener is set to use FBA.

  • Wednesday, September 23, 2009 8:08 PMbwebmasta Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    For some time we’ve been publishing SharePoint sites to the Internet using a listener set for HTML Form Authentication.

     

    We have a new requirement where a SharePoint site to be published to the Internet should have anonymous access. I’m struggling with how to publish that site as I can’t create another listener that uses the same protocol and port.

     

    After reading the docs we’ve tried creating a domain set that includes the ‘exception’ site and assigning that to a SharePoint Publishing Rule that gets processed first, however we still have to use the existing listener so are sent to the FBA page.

     

    Any pointers on what we’re doing wrong and how to configure this?

     

     


    bwebmasta, MCP

All Replies

  • Thursday, September 24, 2009 7:11 AMNick Gu - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Proposed Answer

    Hi,

     

    Thank you for your post.

     

    According to your description, I’d like to confirm whether you want to work in the two sub sites that the homepage (root) has anonymous access and another sub site are still asking for authentication.

     

    Based on my experience, you may create three publishing rules in the same order as mentioned below:

     

    Rule 1: SharePoint publishing rule -> Publish specific Directory in the paths (Default is Root) -> Use the web listener -> Enable "Single Sign on" on the web listener -> Use Authentication

    Rule 2: SharePoint publishing Rule -> Publish the Sub site for anonymous access -> use the same web listener used in the rule 1 -> Under the rule properties, under Users tab, remove "All Authenticated Users" and Add "All Users"

    Rule 3: SharePoint publishing Rule -> Publish the Root directory using "/*" -> use the same web listener used in the rule 1 -> Under the rule properties, under Users tab, remove "All Authenticated Users" and Add "All Users"

    "All users" option in the rule properties bypasses the authentication required on the web listener

     

    Meanwhile, I have list the following articles related to MOSS Authentication.

    http://meiyinglim.blogspot.com/2006/07/part-2-enabling-anonymous-access.html

    http://www.andrewconnell.com/blog/articles/HowToConfigPublishingSiteWithDualAuthProvidersAndAnonAccess.aspx

     

    Hope this helps.


    Nick Gu - MSFT
  • Tuesday, September 29, 2009 2:43 PMbwebmasta Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Nick,

    The site I am wokring with is all one site, no subsites are involved. The site has two pages with webparts that allow for a user to register an account. What I would like to do is setup a rule is ISA that will allow this page to pass through without FBA based on the URL. Can this be done?

    If this is not possible, another route we were looking at is to create a different site with a different URL and make that site anonymous. What rule would we set-up for option 2?

    Thanks in advance for your help.

    Ben
    bwebmasta, MCP