How to Set Forms-Based Authentication for the ArchiveOne Search and Retrieval Website

Use the steps in this article to change the authentication method for the ArchiveOne Search website to forms-based authentication. For example, this method is useful if you wish to have end-users prompted to log in to the ArchiveOne Search website rather than using Windows integrated authentication.

Step 1. Determine the Web Servers Hosting the Search and Retrieval Website

Use the following steps to determine the web server(s) hosting the Search and Retrieval website:

1. On the Archive server, open the ArchiveOne console.
2. Right-click the Status Node, and click Run System Configuration Wizard.
3. In the wizard, click Next until you reach the Search URL page.
4. The address on the Search URL page indicates where the ArchiveOne Search and Retrieval website is hosted. This may be an individual hostname or a DNS alias which represents a number of load balanced web servers.

Step 2. Modify the Web Server Configuration

On each web server identified in the previous set of steps, make the following configuration changes:

For ArchiveOne version 7.3 and higher:

1. Browse to the local configuration store in C:\ProgramData\Barracuda\ArchiveOne\LocalConfigurationStore.
2. Open the Web_AOneSearch.ini in a text editor such as Notepad.
3. Find the line: AuthenticationMode=Windows
4. Edit the line to: AuthenticationMode=Forms
5. Save and close the file.
6. Open IIS Manager and expand Servername > Application Pools.
7. Right-click the application pool Archive One 4.0 and select Recycle.

For ArchiveOne version 7.2 and earlier:

1. Browse to the AOneSearch folder, by default: C:\Program Files (x86)\Barracuda\ArchiveOne\Web\AOneSearch
   1. Version 6 and earlier default location: C:\inetpub\wwwroot\AOneSearch
   2. If you have installed the Search and Retrieval websites in a non-default location, you can browse to the AOneSearch content directory from IIS Manager:
      1. In IIS Manager, expand the Servername > Sites > Default Web Site, and click AOneSearch.
      2. In the central pane, click the Content View and then in the right-hand pane, click Explore from the Actions menu. This will open the directory in Explorer.
2. Make a copy of the web.config file; you can revert to the backup if required.
3. Open the the web.config file in Notepad.
4. Locate the lines:
   <machineKey validationKey=…></machineKey>
   <authentication mode="Windows"/>
   <authorization>
   <deny users="?"></deny>
   <allow users="*"/>
   </authorization>
   <identity impersonate="false"></identity>
5. Replace the lines with:
   <machineKey validationKey=…></machineKey>
   <authentication mode="Forms">
   <forms loginUrl="Login.aspx" name=".C2CFORMSAUTH" timeout="12345678″ protection="All"/>
   </authentication>
   <authorization>
   <deny users="?"/>
   </authorization>
   <identity impersonate="false"></identity> 
6. Save and close the file.
7.  On the Archive server, open Administrative Tools, and double-click Internet Information Services (IIS) Manager.
8. Expand the server name > Sites > Default Website, and click AOneSearch.
9. If using IIS version 6, complete the following steps:
   1. Right-click AOneSearch, and click Properties.
   2. Click the Directory Security tab, and click Edit.
   3. Select Anonymous authentication.
   4. Clear Windows Integrated Authentication.
   5. In the left pane, expand Application Pools.
   6. Right-click the Archive One application pool, and click Recycle.
10. If using IIS version 7, complete the following steps:
    1. In the center pane, in the IIS section, double-click the Authentication icon.
    2. Right-click Anonymous Authentication, and click Enable.
    3. Right-click Forms Authentication, and click Enable.
    4. Right-click Windows Authentication,and click Disable.
    5. In the left pane, click Application Pools.
    6. In the center pane, click the Archive One application pool, and click Recycle.