Disable Kerberos on IE

One of the methods that default all requests to NTLM.

Configure Kerberos for SharePoint

Setup spns for the host headers, e.g. http/sample.com

ensure that the kerberos buffer size on IIS is greater than the max that could possibly be sent from a client. this may also need a buffer size change on client IE

ensure that host file entries on each wfe, point to itself, i.e. 127.0.0.1

ensure that F5 or any load balancer is configured for sticky sessions, i.e. once a client makes a request on server X, it remains on server X for sometime (predefined timeout) and does not get load balanced onto other servers in the F5 pool

bypass proxy in web.config of the applications on all wfe's: attached image

troubleshoot cqwp

If you think cqwp is getting unexpected results then start troubleshooting as below,
1. check query - especially all its fields
2. check viewfieldsoverride or commonfields - for all fields used in query.

SPBasePermissions bitwise OR sharepoint

Very useful

http://jamestsai.net/Blog/post/Understand-SharePoint-Permissions-Part-1-SPBasePermissions-in-Hex2c-Decimal-and-Binary-The-Basics.aspx

Trim Hide controls based on permission

Sharepoint:SPSecurityTrimmedControl runat="server" PermissionsString="AddAndCustomizePages" PermissionContext="CurrentSite"


Any HTML or controls between these tags will only show for users who have the 'AddAndCustomizePages' permission.


/SharePoint:SPSecurityTrimmedControl