Allowing external access to a MOSS 2007 site?
I know this has been asked a million times but...Allowing external access to a MOSS 2007 site
I just can't figure it out, here is what I have done so far;
Extended the web application the I want to access externally on port 39397
NTLM Authentication Allow Anon = No Use SSL = No (Ideally I will want to use SSL but just trying to get it to work first)
URL = http://<servername>:39397 Zone = Internet (I really do not understand what these zones do, I have tried extranet and Internet)
Then I have gone to Alternate Access mappings and;
set the Public URL for the Internet zone to be http://<FQDN>:39397 created DNS record internally for <FQDN> to point to <server> for testing purposes
So internally this works and I can navigate the site but on my firewall I have set up NAT for port 39397 to point to <server> but the page never loads...What am I missing?
MOSS 2007 Version 12.0.0.6421
Server 2003 SP2 32bit
Thanks,
Joe
May 17th, 2011 5:28am
Hi,
From "created DNS record internally for <FQDN> to point to <server> for testing purposes", i want to mention that you just can use this public URL if you just add the corresponding DNS record into the DNS server in your domain. If you want to
let users to access to your sharepoint site, you have to register the DNS record in internet service provider company.
Also, you have to configure the form based authentication(FBA) for your sharepoint site if it is for external users out of your domain.
For information about FBA authentication, please refer to:
http://technet.microsoft.com/en-us/library/ee806890.aspx
http://blogs.technet.com/b/mahesm/archive/2010/04/07/configure-forms-based-authentication-fba-with-sharepoint-2010.aspx
Seven Ma
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2011 11:26pm
Hi,
Thanks for that yep I understand that I have to add a DNS record with my hosting company to get it to work externally but I am just testing at the moment. Once I get it working I will definitely be doing that.
I also don't need FBA as I just need to provide domain users access externally.
I believe I am close to figuring this out, I think it is to do with IIS Host Headers for the extended website. As I am doing this through a NAT firewall I am not sure what values to put because normally you would put the public ip, port and public url in
the IIS host headers but it is still not working...getting closer though I think.
Cheers,
Joe
May 18th, 2011 2:01am
Hi,
Since windows authentication need users to login your domain first and then access the sharepoint sites using windows token, users cannot login your domain if they are out of office or access your sharepoint sites externally. in my opinion, you need to configure
FBA authentication connecting to your AD.
Seven Ma
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
May 19th, 2011 5:24am
Hi ,
Would you please let us know where you are about your doubt?
If you need further assistance, please feel free to let us know.
Have a nice day!
Seven Ma
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
May 25th, 2011 2:32am