We are attempting to use host named site collections to provide multiple external facing portals for our clients.
We have a new SP 2013 server built and I can get HNSCs working with HTTP but am having issues using HTTP and HTTPS. I am by no means a seasoned SharePoint Admin. Reading through the docs here: http://technet.microsoft.com/en-us/library/cc424952(v=office.15).aspx I came across this passage:
“Host-named site collections are available through any zone. Host-named site collections are not limited to the default zone. If needed, you can implement multiple zones and use zones and host-named site collections to configure different authentication settings or policies.
You can assign up to five URLs to a single site collection by assigning one URL per zone. Even if you follow the recommended architecture by implementing only one zone, you can still assign up to five URLs to host-named site collections. This is because if a zone is not implemented by extending the web application, SharePoint 2013 uses the default zone.”
The way I am interpreting this is that I can use multiple authentication zones with in the web app to set authentication policies. For example:
Create a new WebApp with:
New-SPWebApplication -Name“AppName” -port 80 -ApplicationPoolAppPoolName -ApplicationPoolAccount (Get-SPManagedAccount'domain\ServiceAccount') -AuthenticationProvider (New-SPAuthenticationProvider -UseWindowsIntegratedAuthentication)
Create Root Site Collection:
New-SPSite‘http://servername/’ -Name‘root site collection’ -Description‘our root site collection’ -OwnerAlias'domain\useraccount' -language 1033 -Template'STS#0'
Create First Site collection for end users:
New-SPSite‘http://siteA.internalDom.externalDom.com’ -HostHeaderWebApplication'http://servername’ -Name'SiteA' -Description‘End User Site A’ -OwnerAlias'domain\useraccount' -language 1033 -Template'STS#0'
This seems to work well. I attempted to add https and could not. We do not have production data out here as of yet so I scrapped the entire thing after reading this: http://social.msdn.microsoft.com/Forums/sharepoint/en-US/4a91acfd-9d93-494c-bc79-144fa0180e6d/spsiterename-not-working-from-http-to-https-hnsc and attempted to recreate it with HTTPS and a self-signed certificate until the wild card I ordered becomes available.
The questions I am seeing answers to are these:
- I expect I should be able to add urls for the site collections based on zone for example: Default and or Intranet: https://siteA.internalDom.externalDom.com then for zone Internet: https://siteA.externaldom.com/
- I also believe from what I have read I should be able to adding different authentication mechanisms per zone. We are relying on Kerberos to provide end users with access to back end resources. Internally, we would use Windows Authentication, Externally I had set up FBA to use LDAP as a provider and keep a session cookie on the machine. I can set the URLS with a command like
Set-SPSiteUrl (Get-SPSite'https://siteA.internalDom.externalDom.com') –Url 'https://siteA.externaldom.com'–Zone Internet but am unable to find a way to specify forms based auth anywhere but in the web app’s default zone.
Does anyone out there with a similar config have any thoughts on this? Any help would be most appreciated!