How to enable kerberos authentication on your SharePoint Website

Open the central admin website

Go to web application management, select your website and click on authentication providers

Select the provider you want to modify

Change the NTLM to Negotia (Kerberos) authentication mode

Run inetmgr, select your website and configure the authentication providers

Right click on Windows Authentication and select providers

Add the Negociate:Kerberos authentication mode to the list of enabled providers

Move the Negociate:Kerberos provider to the top of the list

Right click on Windows Authentication and select advanced settings

In the extended protection drop down list, select "Accept" and check the "Enable Kernel-mode" authentication checkbox

Now, you can connect to the website using kerberos authentication !

HTTP Error 500.21 - Internal Server Error Handler "PageHandlerFactory-Integrated" has a bad module "ManagedPipelineHandler" in its module list

I just deployed a brand new .Net 4 website in IIS on my machine and get this error:

It seems that some .Net 4 modules have not been installed properly on this machine…

I managed to fix the issue quickly by running those two commands:

%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe -i

%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -i

 

How to generate a self-signed certificate from IIS

For test purposes, it is sometime useful to generate a dummy certificate on your test environment. You can do that by using different ways:

- Create a certificate request and send it to a trusted Certifcate Autority (verisign, thawte etc.).

- Create a Domain certificate. To do that, you will need to setup a Certificate Autority on your domain.

- Create a self signed certificate. IIS has the ability to generate a had oc certificate on your machine. Note that this certificate will only be known and trusted on your machine. For example, you cannot use it over the web to sign your production website.

Here is the procedure to generate a self-signed certificate on IIS 7.x:

1. run inetmgr command

2. Go to the server level and select Server Certificates

3. On the right panel, click on Create Self-Signed Certificate.

4. specify a frendly name for your certificate

5. {Your certificate is beeing signed by your machine and placed in the personal certificate store on your machine}

Now your certificate can be now used on your machine !

Attach Visual Studio to an application using Powershell

This script can be used to run the Visual Studio just in time debugger for debugging your website. It gets the name of the application pool running the website and then attach the JIT to the w3wp process.

$filter = "*MyWebsite*"

$w3wp = get-WmiObject Win32_Process -Filter "Name='w3wp.exe'"
$prid = $w3wp | where { $_.CommandLine -like $filter }

c:\Windows\System32\vsjitdebugger.exe -p $prid.ProcessId