Geek asks and answers

Can a person choose NTLM users on the FBA extended site

We have a SharePoint 2010 extranet web application that uses claims authentication.

  • Intranet zone uses mixed authentication (NTLM versus internal AD and FBA for a separate AD).
  • The Extranet zone uses FBA only against a separate AD.

We have sites with NTLM users in the Members SharePoint group. We have libraries with columns "Personality", which are limited to the group "Members". We would like to allow FBA users to select the NTLM users who are in the Members group when filling out the item metadata. The problem is that FBA users can see NTLM users in the people builder, but when they select them, the user does not dare. I understand that we could get around this by adding NTLM to the Extranet zone, but prefer not to, if possible.

My questions:

Is this a scenario when a suitable requirements provider is appropriate?

Is this a problem that can be solved with the peoplepicker-searchadforests property? (I could not come up with an example of the real world where this property is in the game)

+3
source share
1 answer

This is how I understood that the people picker works. I am not 100% sure, so do not take this for absolute truth :)

Basically, in the context of an Extranet application, all standard builders are completely unaware that internal AD exists. The “hits” you get in the People Picker are in the SiteUsers list and / or database.

" , peoplepicker-searchadforests?" , , , AD , , - , FBA, NTLM. (, NTLM , .)

" , ?" : (

, , (.. - - ), , , . , "WebApplication" , , , , .

, , , NTLM , . , , , .

+1

More articles:


All Articles