Anonymous_User Absent Member.
Absent Member.
631 views

Sharepoint via NAM - Windows Explorer and Excel?


Don't ask me why, but I get asked these things.

We have NAM 3.2 front-ending Sharepoint as per Novell's Best Practices
Guide. Things work fine EXCEPT now they want to be able to use Windows
Explorer to access files from Sharepoint through NAM (but apparently
it's interfering with the authentication process??) There's an option
in Sharepoint that has a button that says:

Open with Explorer

And also to use MS Excel 2007 to run a query against Sharepoint (why I
don't know) through NAM. The screenshot shows a:
Microsoft Office Web Query File (owssvr.iqy)


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
14 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

kjhurni wrote:

>
> Don't ask me why, but I get asked these things.
>
> We have NAM 3.2 front-ending Sharepoint as per Novell's Best Practices
> Guide. Things work fine EXCEPT now they want to be able to use
> Windows Explorer to access files from Sharepoint through NAM (but
> apparently it's interfering with the authentication process??)
> There's an option in Sharepoint that has a button that says:
>
> Open with Explorer
>
> And also to use MS Excel 2007 to run a query against Sharepoint (why I
> don't know) through NAM. The screenshot shows a:
> Microsoft Office Web Query File (owssvr.iqy)


I doubt that this will ever work as Excel or explorer will try to
communicate to sharepoint but receive a redirect to the login page as
they can't reuse the session the browser already has and use the same
cookies.

--
Cheers,
Edward
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


Edward van der Maas;12150 Wrote:
> kjhurni wrote:
>
> >
> > Don't ask me why, but I get asked these things.
> >
> > We have NAM 3.2 front-ending Sharepoint as per Novell's Best

> Practices
> > Guide. Things work fine EXCEPT now they want to be able to use
> > Windows Explorer to access files from Sharepoint through NAM (but
> > apparently it's interfering with the authentication process??)
> > There's an option in Sharepoint that has a button that says:
> >
> > Open with Explorer
> >
> > And also to use MS Excel 2007 to run a query against Sharepoint (why

> I
> > don't know) through NAM. The screenshot shows a:
> > Microsoft Office Web Query File (owssvr.iqy)

>
> I doubt that this will ever work as Excel or explorer will try to
> communicate to sharepoint but receive a redirect to the login page as
> they can't reuse the session the browser already has and use the same
> cookies.
>
> --
> Cheers,
> Edward


Apparently it's a defect. Novell sent me a patch, but haven't tried it
yet. Something about WebDav. Require 3.2 IR1 codebase. I'll hopefully
be able to test tomorrow.


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

kjhurni wrote:


> Apparently it's a defect. Novell sent me a patch, but haven't tried it
> yet. Something about WebDav. Require 3.2 IR1 codebase. I'll
> hopefully be able to test tomorrow.


Interesting, keen to know the outcome

--
Cheers,
Edward
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


Edward van der Maas;12211 Wrote:
> kjhurni wrote:
>
>
> > Apparently it's a defect. Novell sent me a patch, but haven't tried

> it
> > yet. Something about WebDav. Require 3.2 IR1 codebase. I'll
> > hopefully be able to test tomorrow.

>
> Interesting, keen to know the outcome
>
> --
> Cheers,
> Edward


You and me both. I put the patch on and made the changes and it
totally broke the MAG. I've been waiting almost 2 weeks for an answer
back from Novell. Sigh


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

kjhurni wrote:

>
> Edward van der Maas;12211 Wrote:
> > kjhurni wrote:
> >
> >
> > > Apparently it's a defect. Novell sent me a patch, but haven't
> > > tried

> > it
> > > yet. Something about WebDav. Require 3.2 IR1 codebase. I'll
> > > hopefully be able to test tomorrow.

> >
> > Interesting, keen to know the outcome
> >
> > --
> > Cheers,
> > Edward

>
> You and me both. I put the patch on and made the changes and it
> totally broke the MAG. I've been waiting almost 2 weeks for an answer
> back from Novell. Sigh


Any updates since?

--
Cheers,
Edward
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


edmaa;216145 Wrote:
> kjhurni wrote:
>
> >
> > Edward van der Maas;12211 Wrote:
> > > kjhurni wrote:
> > >
> > >
> > > > Apparently it's a defect. Novell sent me a patch, but haven't
> > > > tried
> > > it
> > > > yet. Something about WebDav. Require 3.2 IR1 codebase. I'll
> > > > hopefully be able to test tomorrow.
> > >
> > > Interesting, keen to know the outcome
> > >
> > > --
> > > Cheers,
> > > Edward

> >
> > You and me both. I put the patch on and made the changes and it
> > totally broke the MAG. I've been waiting almost 2 weeks for an

> answer
> > back from Novell. Sigh

>
> Any updates since?
>
> --
> Cheers,
> Edward


Not really. The NTS guy spent about 2 hours on elluminate with our SP
admin and it became apparent that nobody at Novell knows how to setup a
Sharepoint server or do basic configuration (even following the NAM
docs). I'll have to ping the SR again and see what the results were.


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

kjhurni wrote:


> Not really. The NTS guy spent about 2 hours on elluminate with our SP
> admin and it became apparent that nobody at Novell knows how to setup
> a Sharepoint server or do basic configuration (even following the NAM
> docs). I'll have to ping the SR again and see what the results were.


sharepoint is a real pain to be honest. I've tried setting it up and I
always get mixed results. Sometimes it works, sometimes it doesn't

--
Cheers,
Edward
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


edmaa;216173 Wrote:
> kjhurni wrote:
>
>
> > Not really. The NTS guy spent about 2 hours on elluminate with our

> SP
> > admin and it became apparent that nobody at Novell knows how to setup
> > a Sharepoint server or do basic configuration (even following the NAM
> > docs). I'll have to ping the SR again and see what the results were.

>
> sharepoint is a real pain to be honest. I've tried setting it up and I
> always get mixed results. Sometimes it works, sometimes it doesn't
>
> --
> Cheers,
> Edward


Fortunately we don't have that problem. Ironically MS has some VERY
good documentation on how to setup and configure with a reverse proxy,
etc. Too bad Novell doesn't know about that.

The only issues we've had with SP are when front-ending with NAM.

I forwarded the docs/info to Novell so hopefully that'll help.

It's just kinda scary when you tell someone that you have the zone
configured to use BLAH authentication and the have no idea what you're
even talking about (even though the actual screen on the SP server says:
ZONES and whatnot).

Given how prevelant SP is, I'd think Novell may want to send some people
to SP training or something.
Either that or the majority of NAM customers aren't using SP or they
are, AND they're using Forefront and not NAM (but then why be a NAM
customer?)


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

On 2012-10-19 18:24:02 +0000, kjhurni said:

> edmaa;216173 Wrote:
>> kjhurni wrote:
>>
>>
>>> Not really. The NTS guy spent about 2 hours on elluminate with our

>> SP
>>> admin and it became apparent that nobody at Novell knows how to setup
>>> a Sharepoint server or do basic configuration (even following the NAM
>>> docs). I'll have to ping the SR again and see what the results were.

>>
>> sharepoint is a real pain to be honest. I've tried setting it up and I
>> always get mixed results. Sometimes it works, sometimes it doesn't
>>
>> --
>> Cheers,
>> Edward

>
> Fortunately we don't have that problem. Ironically MS has some VERY
> good documentation on how to setup and configure with a reverse proxy,
> etc. Too bad Novell doesn't know about that.
>
> The only issues we've had with SP are when front-ending with NAM.
>
> I forwarded the docs/info to Novell so hopefully that'll help.
>
> It's just kinda scary when you tell someone that you have the zone
> configured to use BLAH authentication and the have no idea what you're
> even talking about (even though the actual screen on the SP server says:
> ZONES and whatnot).
>
> Given how prevelant SP is, I'd think Novell may want to send some people
> to SP training or something.
> Either that or the majority of NAM customers aren't using SP or they
> are, AND they're using Forefront and not NAM (but then why be a NAM
> customer?)


Hi kjhurni,

I think you have to change the authentication procedure for your SP
protected resource to not redirect authentications to the IDP.
That is the new feature in 3.1.4 that enables SP access from explorer /
excel, but it is very poorly documented.

Steps:
* go to the Proxy Service that contains the SP config
* open the SP Protected Resource
* Click on the tiny edit button next to "Authentication Procedure"
(remember which one is selected currently)
* Click on the procedure that is currently in use by SP
* Enable "Non-Redirected Login" and click OK
* Save, update, etc etc

HTH,

Mark

--
i d f o c u s
Identity | Access | Security
http://www.idfocus.nl

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


mvreijn;222091 Wrote:
> On 2012-10-19 18:24:02 +0000, kjhurni said:
>
> > edmaa;216173 Wrote:
> >> kjhurni wrote:
> >>
> >>
> >>> Not really. The NTS guy spent about 2 hours on elluminate with our
> >> SP
> >>> admin and it became apparent that nobody at Novell knows how to

> setup
> >>> a Sharepoint server or do basic configuration (even following the

> NAM
> >>> docs). I'll have to ping the SR again and see what the results

> were.
> >>
> >> sharepoint is a real pain to be honest. I've tried setting it up and

> I
> >> always get mixed results. Sometimes it works, sometimes it doesn't
> >>
> >> --
> >> Cheers,
> >> Edward

> >
> > Fortunately we don't have that problem. Ironically MS has some VERY
> > good documentation on how to setup and configure with a reverse

> proxy,
> > etc. Too bad Novell doesn't know about that.
> >
> > The only issues we've had with SP are when front-ending with NAM.
> >
> > I forwarded the docs/info to Novell so hopefully that'll help.
> >
> > It's just kinda scary when you tell someone that you have the zone
> > configured to use BLAH authentication and the have no idea what

> you're
> > even talking about (even though the actual screen on the SP server

> says:
> > ZONES and whatnot).
> >
> > Given how prevelant SP is, I'd think Novell may want to send some

> people
> > to SP training or something.
> > Either that or the majority of NAM customers aren't using SP or they
> > are, AND they're using Forefront and not NAM (but then why be a NAM
> > customer?)

>
> Hi kjhurni,
>
> I think you have to change the authentication procedure for your SP
> protected resource to not redirect authentications to the IDP.
> That is the new feature in 3.1.4 that enables SP access from explorer /
> excel, but it is very poorly documented.
>
> Steps:
> * go to the Proxy Service that contains the SP config
> * open the SP Protected Resource
> * Click on the tiny edit button next to "Authentication Procedure"
> (remember which one is selected currently)
> * Click on the procedure that is currently in use by SP
> * Enable "Non-Redirected Login" and click OK
> * Save, update, etc etc
>
> HTH,
>
> Mark
>
> --
> i d f o c u s
> Identity | Access | Security
> http://www.idfocus.nl


We're using NAM 3.2 and we have setup everything the way that Novell
tells you to in the NAM 3.2 best practices guide for Sharepoint.

the issue isn't with what you described, but rather apparently Novell's
lack of understanding of the most basic of SharePoint setups (they
didn't even know about the different login types).

Further, even if you're using the basic auth stuff and non-redirected
logins (that's a given), there are issues using MS Word/Excel as "web
browsers" outside of IE/Firefox that come into play. (Cookie/session
sharing, etc.)


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

On 2012-11-13 21:34:02 +0000, kjhurni said:

> mvreijn;222091 Wrote:
>> On 2012-10-19 18:24:02 +0000, kjhurni said:
>>
>>> edmaa;216173 Wrote:
>>>> kjhurni wrote:
>>>>
>>>>
>>>>> Not really. The NTS guy spent about 2 hours on elluminate with our
>>>> SP
>>>>> admin and it became apparent that nobody at Novell knows how to

>> setup
>>>>> a Sharepoint server or do basic configuration (even following the

>> NAM
>>>>> docs). I'll have to ping the SR again and see what the results

>> were.
>>>>
>>>> sharepoint is a real pain to be honest. I've tried setting it up and

>> I
>>>> always get mixed results. Sometimes it works, sometimes it doesn't
>>>>
>>>> --
>>>> Cheers,
>>>> Edward
>>>
>>> Fortunately we don't have that problem. Ironically MS has some VERY
>>> good documentation on how to setup and configure with a reverse

>> proxy,
>>> etc. Too bad Novell doesn't know about that.
>>>
>>> The only issues we've had with SP are when front-ending with NAM.
>>>
>>> I forwarded the docs/info to Novell so hopefully that'll help.
>>>
>>> It's just kinda scary when you tell someone that you have the zone
>>> configured to use BLAH authentication and the have no idea what

>> you're
>>> even talking about (even though the actual screen on the SP server

>> says:
>>> ZONES and whatnot).
>>>
>>> Given how prevelant SP is, I'd think Novell may want to send some

>> people
>>> to SP training or something.
>>> Either that or the majority of NAM customers aren't using SP or they
>>> are, AND they're using Forefront and not NAM (but then why be a NAM
>>> customer?)

>>
>> Hi kjhurni,
>>
>> I think you have to change the authentication procedure for your SP
>> protected resource to not redirect authentications to the IDP.
>> That is the new feature in 3.1.4 that enables SP access from explorer /
>> excel, but it is very poorly documented.
>>
>> Steps:
>> * go to the Proxy Service that contains the SP config
>> * open the SP Protected Resource
>> * Click on the tiny edit button next to "Authentication Procedure"
>> (remember which one is selected currently)
>> * Click on the procedure that is currently in use by SP
>> * Enable "Non-Redirected Login" and click OK
>> * Save, update, etc etc
>>
>> HTH,
>>
>> Mark
>>
>> --
>> i d f o c u s
>> Identity | Access | Security
>> http://www.idfocus.nl

>
> We're using NAM 3.2 and we have setup everything the way that Novell
> tells you to in the NAM 3.2 best practices guide for Sharepoint.
>
> the issue isn't with what you described, but rather apparently Novell's
> lack of understanding of the most basic of SharePoint setups (they
> didn't even know about the different login types).
>
> Further, even if you're using the basic auth stuff and non-redirected
> logins (that's a given), there are issues using MS Word/Excel as "web
> browsers" outside of IE/Firefox that come into play. (Cookie/session
> sharing, etc.)


Hm. Well, I hope you make progress on this issue, and keep us posted
here - I am due to protect SP using NAM in my next project 😞

Your comment about cookie/session sharing from MSOffice makes me wonder
how Microsoft makes this work in their Forefront product.
Telepathy? Or are they using NTLM or Kerberos behind the scenes?

M
--
i d f o c u s
Identity | Access | Security
http://www.idfocus.nl

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


mvreijn;222099 Wrote:
> On 2012-11-13 21:34:02 +0000, kjhurni said:
>
> > mvreijn;222091 Wrote:
> >> On 2012-10-19 18:24:02 +0000, kjhurni said:
> >>
> >>> edmaa;216173 Wrote:
> >>>> kjhurni wrote:
> >>>>
> >>>>
> >>>>> Not really. The NTS guy spent about 2 hours on elluminate with

> our
> >>>> SP
> >>>>> admin and it became apparent that nobody at Novell knows how to
> >> setup
> >>>>> a Sharepoint server or do basic configuration (even following the
> >> NAM
> >>>>> docs). I'll have to ping the SR again and see what the results
> >> were.
> >>>>
> >>>> sharepoint is a real pain to be honest. I've tried setting it up

> and
> >> I
> >>>> always get mixed results. Sometimes it works, sometimes it doesn't
> >>>>
> >>>> --
> >>>> Cheers,
> >>>> Edward
> >>>
> >>> Fortunately we don't have that problem. Ironically MS has some

> VERY
> >>> good documentation on how to setup and configure with a reverse
> >> proxy,
> >>> etc. Too bad Novell doesn't know about that.
> >>>
> >>> The only issues we've had with SP are when front-ending with NAM.
> >>>
> >>> I forwarded the docs/info to Novell so hopefully that'll help.
> >>>
> >>> It's just kinda scary when you tell someone that you have the zone
> >>> configured to use BLAH authentication and the have no idea what
> >> you're
> >>> even talking about (even though the actual screen on the SP server
> >> says:
> >>> ZONES and whatnot).
> >>>
> >>> Given how prevelant SP is, I'd think Novell may want to send some
> >> people
> >>> to SP training or something.
> >>> Either that or the majority of NAM customers aren't using SP or

> they
> >>> are, AND they're using Forefront and not NAM (but then why be a NAM
> >>> customer?)
> >>
> >> Hi kjhurni,
> >>
> >> I think you have to change the authentication procedure for your SP
> >> protected resource to not redirect authentications to the IDP.
> >> That is the new feature in 3.1.4 that enables SP access from explorer

> /
> >> excel, but it is very poorly documented.
> >>
> >> Steps:
> >> * go to the Proxy Service that contains the SP config
> >> * open the SP Protected Resource
> >> * Click on the tiny edit button next to "Authentication Procedure"
> >> (remember which one is selected currently)
> >> * Click on the procedure that is currently in use by SP
> >> * Enable "Non-Redirected Login" and click OK
> >> * Save, update, etc etc
> >>
> >> HTH,
> >>
> >> Mark
> >>
> >> --
> >> i d f o c u s
> >> Identity | Access | Security
> >> http://www.idfocus.nl

> >
> > We're using NAM 3.2 and we have setup everything the way that Novell
> > tells you to in the NAM 3.2 best practices guide for Sharepoint.
> >
> > the issue isn't with what you described, but rather apparently

> Novell's
> > lack of understanding of the most basic of SharePoint setups (they
> > didn't even know about the different login types).
> >
> > Further, even if you're using the basic auth stuff and non-redirected
> > logins (that's a given), there are issues using MS Word/Excel as "web
> > browsers" outside of IE/Firefox that come into play. (Cookie/session
> > sharing, etc.)

>
> Hm. Well, I hope you make progress on this issue, and keep us posted
> here - I am due to protect SP using NAM in my next project 😞
>
> Your comment about cookie/session sharing from MSOffice makes me wonder
> how Microsoft makes this work in their Forefront product.
> Telepathy? Or are they using NTLM or Kerberos behind the scenes?
>
> M
> --
> i d f o c u s
> Identity | Access | Security
> http://www.idfocus.nl


Very good question. Forefront is gear specially for SP and OWA (and
pretty much nothing else), which doesn't surprise me.

I'll see if I can post the links that MS has on how to actually setup a
reverse proxy.

Although even changing things in SP break their own product. For
example, changing SP to use Forms authentication breaks a TON of stuff
(or at least it did), so one has to wonder what MS is thinking.


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?

Yes. Using Keberos changes everything. This moves the responsibility
from the application to the workstation.

Jared
Engineer IV at Novacoast
About Me: http://jaredjennings.org

On 11/13/12 4:22 PM, Mark van Reijn wrote:
> Your comment about cookie/session sharing from MSOffice makes me wonder
> how Microsoft makes this work in their Forefront product.
> Telepathy? Or are they using NTLM or Kerberos behind the scenes?

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Sharepoint via NAM - Windows Explorer and Excel?


Jared Jennings;222359 Wrote:
> Yes. Using Keberos changes everything. This moves the responsibility
> from the application to the workstation.
>
> Jared
> Engineer IV at Novacoast
> About Me: http://jaredjennings.org
>
> On 11/13/12 4:22 PM, Mark van Reijn wrote:
> > Your comment about cookie/session sharing from MSOffice makes me

> wonder
> > how Microsoft makes this work in their Forefront product.
> > Telepathy? Or are they using NTLM or Kerberos behind the scenes?


And the end result of this is that Novell has created a bug/defect for
this. I have no idea on an ETA for when it will be resolved.
Guess they don't have a lot of customers using Sharepoint (my guess is
that those SP customers are using Forefront instead of NAM).

😞


--
kjhurni
------------------------------------------------------------------------
kjhurni's Profile: https://forums.netiq.com/member.php?userid=322
View this thread: https://forums.netiq.com/showthread.php?t=2897

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.