Share via

Login Failed when extending web application with setting both Windows and FBA login

Ryan119 21 Reputation points
2020-07-27T10:37:00.967+00:00

I have already setup a website with windows authentication only. It can login succesfully.
And, I extend a web application with internet zone. and set both FBA login and windows login.
13875-capture.png
13768-capture2.png

If I use default zone url, It can login fine. And When I use internet zone (extended web application) and select windows authentication with farm admin account login, it always show the message "Sorry, this site hasn't been shared with you."
13838-capture3.png
13913-capture4.png

But when I changed the login setting of internet zone from both FBA and Windows login to Windows login only. It can login successfully.
13902-capture5.png

I've tried FBA setting before without extended web application and it worked fine before.
I referenced this video to set FBA login: https://www.youtube.com/watch?v=q3-sg_F96eQ

All the thing I set was same with the video, except the web.config of web application setting was set in extended web application.
Below is what I done about FBA setting:

(1) aspnetDB setting
(2) Set connection string, role, user of provider in IIS.
(3) Change role, user of provider in SecutiryTokenServiceApplication
(4) Change the peoplepicker setting in web.config of central administration and extended web application.
<PeoplePickerWildcards>
<clear />
<add key="SharePointMembership" value="%" />
</PeoplePickerWildcards>

Based on this situation, I cannot login with AD user in internet zone so that I can't gave permission to the FBA user.
Could anyone know why can't I login or how could I give permission to both windows user and FBA user?

SharePoint Server
SharePoint Server
A family of Microsoft on-premises document management and storage systems.
2,382 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jerry Xu 256 Reputation points
    2020-07-28T05:14:06.85+00:00

    I test in my end with exact the same steps in the video you provide, and it works just as expected.

    My step is a bit different, I first edit everything including the web.config file for the default zone IIS site, then I extend the web application to the new zone using FBA. You may have a try to edit the web.config in default zone and then have another try.

    Also please try to remove the AAM zone and add it back again.

    Also you can check the ULS log and event viewer for more information.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.