554 lines
11 KiB
Markdown
554 lines
11 KiB
Markdown
![]() |
SPTest
|
|||
|
|
|||
|
Donnerstag, 4. April 2019
|
|||
|
|
|||
|
09:02
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Datenbank für Wizdom erstellt.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
User \"svc-sptwizdom\" wurden die Rechte \"owner\" gewährt.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
DNS A Record erstellt wizdom-sptest 10.96.73.102
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\-- Voraussetzungen geprüft \--
|
|||
|
|
|||
|
IIS Application development extensions 4.6 aktiviert
|
|||
|
|
|||
|
asp 4.6 - aktiviert
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Netframework 4.6 installiert
|
|||
|
|
|||
|
|
|||
|
|
|||
|
12 GB RAM
|
|||
|
|
|||
|
4 \* Prozessoren
|
|||
|
|
|||
|
|
|||
|
|
|||
|
DNS - Neue Zone erstellen bkk-mobiloil-appsptest.de; Alias auf sp2019rtmw2016.bkk-mobiloil.de:
|
|||
|
|
|||
|
|
|||
|
|
|||
|
{width="10.78125in" height="5.4375in"}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Erfasster Bildschirmausschnitt: 04.04.2019 09:48
|
|||
|
|
|||
|
|
|||
|
|
|||
|
PIN: YYIB Für die WIZDOM URL <https://wizdom-sptest.bkk-mobiloil.de>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
user: cfg-sptadmin
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Alias anlegen (s.o.)
|
|||
|
|
|||
|
{width="5.604166666666667in" height="8.9375in"}
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Erfasster Bildschirmausschnitt: 04.04.2019 10:00
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Alias anlegen für WA Mobilnet
|
|||
|
|
|||
|
Erstellung von WebApplication - <http://mobilnet-sptest.bkk-mobiloil.de/>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Powershell Befehl zur Erstelllung der SharePoint SC für Wizdom:
|
|||
|
|
|||
|
New-SPSite -url \"<http://mobilnet-sptest.bkk-mobiloil.de/sites/AKP>\" -OwnerAlias \"bkk-mobiloil\\cfg-sptAdmin\" -name \"App-Katalog-Mobilnet-SPTest\" -Template \"APPCATALOG#0\" -Language 1033
|
|||
|
|
|||
|
|
|||
|
|
|||
|
New-SPSite -url \"<http://mobilnet-sptest.bkk-mobiloil.de/>\" -OwnerAlias \"bkk-mobiloil\\cfg-spqadmin\" -name \"Mobilnet\" -Template \"STS#0\" -Language 1033
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Feature per Powershell aktivieren
|
|||
|
|
|||
|
\$site = Get-SPSite <http://mobilnet-sptest.bkk-mobiloil.de/>
|
|||
|
|
|||
|
\$web = Get-SPWeb \$site.url
|
|||
|
|
|||
|
Enable-SPFeature -Identity \"PublishingSite\" -Url \$site.url -Confirm:\$False
|
|||
|
|
|||
|
Enable-SPFeature -Identity \"PublishingWeb\" -Url \$web.Url -Confirm:\$False
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Import \"Search Configuration\"
|
|||
|
|
|||
|
auf <http://mobilnet-sptest.bkk-mobiloil.de> mit einem admin User // cfg Admin funktioniert nicht da dieser lokale Berechtigungen besitzt.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
toDo:
|
|||
|
|
|||
|
|
|||
|
|
|||
|
PS\> new-guid
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Guid ist gleich \$issuer = 9f50c908-321d-45d9-acaa-eeec9522c0e0 **[DIESE MUSS IN DER DeployWizdomConfiguration-SPTest.xml EINGETRAGEN WERDEN !!!!]{.underline}**
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\$issuer = \"9f50c908-321d-45d9-acaa-eeec9522c0e0\"
|
|||
|
|
|||
|
\$publicCertPath = \"C:\\Software\\WizdomHighTrust.cer\"
|
|||
|
|
|||
|
\$siteUrl = \"<https://mobilnet-sptest.bkk-mobiloil.de/>\"
|
|||
|
|
|||
|
\$web = Get-SPWeb \$siteUrl
|
|||
|
|
|||
|
\$certificate = Get-PfxCertificate \$publiccertPath
|
|||
|
|
|||
|
\$realm = Get-SPAuthenticationRealm -ServiceContext \$web.Site
|
|||
|
|
|||
|
\$fullAppIdentifier = \$issuer + \'@\' + \$realm
|
|||
|
|
|||
|
New-SPTrustedRootAuthority -Name \"WizdomApp\" -certificate \$certificate
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\-\-\--Anfang\-\-\-\--
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> \$web = Get-SPWeb \$siteUrl
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> \$certificate = Get-PfxCertificate \$publiccertPath
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> \$realm = Get-SPAuthenticationRealm -ServiceContext \$web.Site
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> \$fullAppIdentifier = \$issuer + \'@\' + \$realm
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> New-SPTrustedRootAuthority -Name \"WizdomApp\" -certificate \$certificate
|
|||
|
|
|||
|
|
|||
|
|
|||
|
**[ZERTIFIKATSDATEN stimmern nicht mehr]{.underline}**
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Certificate : \[Subject\]
|
|||
|
|
|||
|
CN=WizdomHighTrust
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Issuer\]
|
|||
|
|
|||
|
CN=BKKCAv2, DC=bkk-mobiloil, DC=de
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Serial Number\]
|
|||
|
|
|||
|
290000269D5FB90FF4D87FD33800000000269D
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Not Before\]
|
|||
|
|
|||
|
04.04.2019 13:20:26
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Not After\]
|
|||
|
|
|||
|
01.04.2029 13:20:26
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Thumbprint\]
|
|||
|
|
|||
|
E0F2DA5C41E9BA42A47E7A5CD0C2D04607DCEC03
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Name : WizdomApp
|
|||
|
|
|||
|
TypeName : Microsoft.SharePoint.Administration.SPTrustedRootAuthority
|
|||
|
|
|||
|
DisplayName : WizdomApp
|
|||
|
|
|||
|
Id : fa243793-573f-49ba-8b4e-cc8709e15d5c
|
|||
|
|
|||
|
Status : Online
|
|||
|
|
|||
|
Parent : SPTrustedRootAuthorityManager
|
|||
|
|
|||
|
Version : 50799
|
|||
|
|
|||
|
DeploymentLocked : False
|
|||
|
|
|||
|
Properties : {}
|
|||
|
|
|||
|
Farm : SPFarm Name=SPTest_Config
|
|||
|
|
|||
|
UpgradedPersistedProperties : {}
|
|||
|
|
|||
|
\-\-\-\-\--Ende\-\--
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
New-SPTrustedSecurityTokenIssuer -name \"WizdomApp\" -certificate \$certificate -RegisteredIssuerName \$fullAppIdentifier -IsTrustBroker
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\--Anfang\--
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> New-SPTrustedSecurityTokenIssuer -name \"WizdomApp\" -certificate \$certificate -RegisteredIssuer
|
|||
|
|
|||
|
Name \$fullAppIdentifier -IsTrustBroker
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
IsSelfIssuer : False
|
|||
|
|
|||
|
NameId :
|
|||
|
|
|||
|
RegisteredIssuerName : 9f50c908-321d-45d9-acaa-eeec9522c0e0@d2495a2f-6053-44f2-8024-531292d1ae37
|
|||
|
|
|||
|
AuthorizationEndPointUri :
|
|||
|
|
|||
|
EndSessionEndPointUri :
|
|||
|
|
|||
|
TokenEndPointUri :
|
|||
|
|
|||
|
DefaultClientIdentifier :
|
|||
|
|
|||
|
ScopedClientIdentifier : {}
|
|||
|
|
|||
|
IdentityClaimTypeInformation : Microsoft.SharePoint.Administration.Claims.SPTrustedClaimTypeInformation
|
|||
|
|
|||
|
Description :
|
|||
|
|
|||
|
SigningCertificate : \[Subject\]
|
|||
|
|
|||
|
CN=WizdomHighTrust
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Issuer\]
|
|||
|
|
|||
|
CN=BKKCAv2, DC=bkk-mobiloil, DC=de
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Serial Number\]
|
|||
|
|
|||
|
290000269D5FB90FF4D87FD33800000000269D
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Not Before\]
|
|||
|
|
|||
|
04.04.2019 13:20:26
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Not After\]
|
|||
|
|
|||
|
01.04.2029 13:20:26
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\[Thumbprint\]
|
|||
|
|
|||
|
E0F2DA5C41E9BA42A47E7A5CD0C2D04607DCEC03
|
|||
|
|
|||
|
|
|||
|
|
|||
|
AdditionalSigningCertificates : {}
|
|||
|
|
|||
|
MetadataEndPoint :
|
|||
|
|
|||
|
IsAutomaticallyUpdated : False
|
|||
|
|
|||
|
Name : WizdomApp
|
|||
|
|
|||
|
TypeName : Microsoft.SharePoint.Administration.Claims.SPTrustedSecurityTokenService
|
|||
|
|
|||
|
DisplayName : WizdomApp
|
|||
|
|
|||
|
Id : 9f50c908-321d-45d9-acaa-eeec9522c0e0
|
|||
|
|
|||
|
Status : Online
|
|||
|
|
|||
|
Parent : SPSecurityTokenServiceManager Name=SecurityTokenServiceManager
|
|||
|
|
|||
|
Version : 50808
|
|||
|
|
|||
|
DeploymentLocked : False
|
|||
|
|
|||
|
Properties : {}
|
|||
|
|
|||
|
Farm : SPFarm Name=SPTest_Config
|
|||
|
|
|||
|
UpgradedPersistedProperties : {}
|
|||
|
|
|||
|
\-\--Ende\-\--
|
|||
|
|
|||
|
|
|||
|
|
|||
|
PS C:\\Users\\cfg-sptAdmin\> Register-SPAppPrincipal -NameIdentifier \$fullAppIdentifier -site \$web -DisplayName \"WizdomApp\"
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
NameIdentifier EncodedNameIdentifier
|
|||
|
|
|||
|
\-\-\-\-\-\-\-\-\-\-\-\-\-- \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\--
|
|||
|
|
|||
|
9f50c908-321d-45d9-acaa-eeec9522c0e0@d2495a2f-6053-44f2-8024-531292d1ae37 i:0i.t\|ms.sp.ext\|5033750a-760f-4550-a79c-5\...
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Zu erstellen:
|
|||
|
|
|||
|
Host A Eintrag wizdom-sptest auf 10.96.73.102
|
|||
|
|
|||
|
|
|||
|
|
|||
|
folgende url aufrufen
|
|||
|
|
|||
|
<http://mobilnet-sptest.bkk-mobiloil.de/_layouts/15/appregnew.aspx>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
The app identifier has been successfully created.
|
|||
|
|
|||
|
| Client Id: | 5c824c01-8665-433b-a0d9-55ece0aa9820 |
|
|||
|
|------------------|----------------------------------------------|
|
|||
|
| Client Secret: | PA+/6pHz6SoyOS1vANMvN2is4anPFjwsnbHiX5FjZ0Q= |
|
|||
|
| Title: | WizdomApp |
|
|||
|
| App Domain: | wizdom-sptest.bkk-mobiloil.de |
|
|||
|
| Redirect URI: | <https://wizdom-sptest.bkk-mobiloil.de> |
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Aus \<<https://mobilnet-sptest.bkk-mobiloil.de/_layouts/15/AppRegNew.aspx>\>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
wizdom-sptest.bkk-mobiloil.de
|
|||
|
|
|||
|
[http://wizdom-sptest.bkk-mobiloil.de\\](http://wizdom-sptest.bkk-mobiloil.de/)
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Generellen Zugriff kann man testen mit :
|
|||
|
|
|||
|
|
|||
|
|
|||
|
<https://wizdom-sptest.bkk-mobiloil.de/Base/Pages/Dashboard.html>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
[https://wizdom-sptest.bkk-mobiloil.de/Base/Pages/Administration\\ContentProvisioning.html](https://wizdom-sptest.bkk-mobiloil.de/Base/Pages/Administration/ContentProvisioning.html)
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Ich habe folgenden Befehl auf dem PHA Server ausgeführt :
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
.\\DeployWizdom.ps1 -Modus WebAppSetup --XMLPath C:\\Software\\Wizdom\\DeployWizdomConfiguration-SPTest.xml
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Die IIS Seite wurde erstellt,
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Setspn -s \"http/wizdom-sptest\" bkk-mobiloil\\svc-sptWizdom
|
|||
|
|
|||
|
Setspn -s \"http/wizdom-sptest.bkk-mobiloil.de\" bkk-mobiloil\\svc-sptWizdom
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Dann habe ich
|
|||
|
|
|||
|
Folgende Dateien wurden in ein Verzeichnis kopiert:
|
|||
|
|
|||
|
- DeployWizdom.ps1
|
|||
|
|
|||
|
- DeployWizdomConfiguration-SPT.xml
|
|||
|
|
|||
|
- WizdomHighTrust.cer aus dem Wizdom Packet Verzeichnis
|
|||
|
|
|||
|
- Der Ordner Templates mit der App Vorlage
|
|||
|
|
|||
|
|
|||
|
|
|||
|
AppManifest.xml entsprechend angepasst (ClientID und Startpage)
|
|||
|
|
|||
|
|
|||
|
|
|||
|
DeployWizdom.ps1 Befehle per hand ausgeführt ab dem Punkt \"AppSetup\" und ein APP Packet erzeugt.
|
|||
|
|
|||
|
Dieses APP Packet habe ich dann wieder entpackt, und mit dem Explorer neu gezipt.
|
|||
|
|
|||
|
Das Zipen in der Powershell erzeugt fehler !!!!!!
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Wichtig !!:
|
|||
|
|
|||
|
Auf dem Wizdom Server muss im IIS in der Wizdom Seite unter Windows Authentifizierung der Kernel Modus ausgeschaltet werden.
|
|||
|
|
|||
|
Und danach einen IIS Reset
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Packet heist nun Wizdom-SPtest.app
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Dann die Befehle in der DeplayWizdom.ps1 unter dem Punkt \"SharepointSetup\" ausgeführt
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Danach habe ich die App in den App Catalog hochgeladen
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Dann wurde die App auf der Mobilnet-sptest installiert.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Es fehlt nun noch die Lizenz um weiter machen zu können.
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
**[ZERTIFIKATSDATEN stimmern nicht mehr]{.underline}**
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Neu gemacht :
|
|||
|
|
|||
|
The app identifier has been successfully created.
|
|||
|
|
|||
|
| Client Id: | 5c824c01-8665-433b-a0d9-55ece0aa9820 |
|
|||
|
|------------------|----------------------------------------------|
|
|||
|
| Client Secret: | PA+/6pHz6SoyOS1vANMvN2is4anPFjwsnbHiX5FjZ0Q= |
|
|||
|
| Title: | WizdomApp |
|
|||
|
| App Domain: | wizdom-sptest.bkk-mobiloil.de |
|
|||
|
| Redirect URI: | <https://wizdom-sptest.bkk-mobiloil.de> |
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Aus \<<https://mobilnet-sptest.bkk-mobiloil.de/_layouts/15/AppRegNew.aspx>\>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|
|||
|
\<!\-- Issuer ID, value can be changed, but must be a valid GUID \--\>
|
|||
|
|
|||
|
\<IssuerId\>9f50c908-321d-45d9-acaa-eeec9522c0e0\</IssuerId\>
|
|||
|
|
|||
|
\<!\-- ClientId from \--\>
|
|||
|
|
|||
|
\<ClientId\>5c824c01-8665-433b-a0d9-55ece0aa9820\</ClientId\>
|
|||
|
|
|||
|
\<!\-- ClientSecret from \--\>
|
|||
|
|
|||
|
\<ClientSecret\>PA+/6pHz6SoyOS1vANMvN2is4anPFjwsnbHiX5FjZ0Q=\</ClientSecret\>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
Prüfen welche APPS installiert sind
|
|||
|
|
|||
|
|
|||
|
|
|||
|
<https://Siteurl/_layouts/15/AppInv.aspx>
|
|||
|
|
|||
|
|
|||
|
|
|||
|
|