Kerberos protocol diagram

Finally going to start setup Sharepoint2010 , need to refresh some memory about kerberos. just share the diagram for basic understand.

information copy from Microsoft:

Typically there are three main reasons to use the Kerberos protocol:

1. Delegation of client credentials — The Kerberos protocol allows a client's identity to be impersonated by a service to allow the impersonating service to pass that identity to other network services on the client's behalf. NTLM does not allow this delegation. (This limitation NTLM is called the "double-hop rule"). Claims authentication, like Kerberos authentication, can be used to delegate client credentials but requires the back-end application to be claims-aware.

2. Security — Features such as AES encryption, mutual authentication, support for data integrity and data privacy, just to name a few, make the Kerberos protocol more secure than its NTLM counterpart.

3. Potentially better performance — Kerberos authentication requires less traffic to the domain controllers compared with NTLM (depending on PAC verification, see Microsoft Open Specification Support Team Blog: Understanding Microsoft Kerberos PAC Validation). If PAC verification is disabled or not needed, the service that authenticates the client does not have to make an RPC call to the DC (see: You experience a delay in the user-authentication process when you run a high-volume server program on a domain member in Windows 2000 or Windows Server 2003). Kerberos authentication also requires less traffic between client and server compared with NTLM. Clients can authenticate with web servers in two request/responses vs. the typical three-leg handshake with NTLM. However, this improvement is typically not noticed on low latency networks on a per-transaction basis, but can typically be noticed in overall system throughput. Remember that many environmental factors can affect authentication performance; therefore Kerberos authentication and NTLM should be performance-tested in your own environment before you determine whether one method performs better than the other.

This is an incomplete list of the advantages of using the Kerberos protocol. There are other reasons like mutual authentication, cross platform interoperability, and transitive cross domain trust, to name a few. However, in most cases one typically finds delegation and security to be the primary drivers in adoption of the Kerberos protocol.

Client Object Model - retrieve document library permission

 public void CheckPermission(string siteUrl, string ListName)

        {
            ClientContext clientContext = new ClientContext(siteUrl);
            List curList = clientContext.Web.Lists.GetByTitle(ListName);

            clientContext.Load(curList.RoleAssignments);
            clientContext.ExecuteQuery();


 foreach(RoleAssignment ra in curList.RoleAssignments)

         {
             var p = ra.Member;
             clientContext.Load(p);
             var q = ra.RoleDefinitionBindings;
             clientContext.Load(q);
             clientContext.ExecuteQuery();
               
       
           foreach (RoleDefinition subq in q)
           {
               Console.WriteLine(p.Title+"=="+subq.Name);
         
           }
                                 
            }

         }

client code : check all the Sharepoint 2010 group Owner

static void Main(string[] args)
       {

           String sURL = "http://xxxxx/sites/yyyyy";
          
          
           ClientContext clientContext = new ClientContext( sURL);
           GroupCollection collGroup = clientContext.Web.SiteGroups;
                     

           clientContext.Load(collGroup);

           clientContext.Load(collGroup);
               //groups => groups.Include(
                //   group => group.Owner));

           clientContext.ExecuteQuery();

           foreach (Group oGroup in collGroup)
           {
               Console.WriteLine(oGroup.Title +"== "+ oGroup.OwnerTitle);
          
           }

          
           Console.ReadLine();

       }

Retrieve all document library View method with console c#

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using Microsoft.SharePoint.Client;
using SP = Microsoft.SharePoint.Client;

namespace ExtractView
{
    class SPView
    {
        public void allview(string siteUrl , string doclib )
       
        {

            ClientContext clientContext = new ClientContext(siteUrl);
            Web site = clientContext.Web;

            List targetList = site.Lists.GetByTitle(doclib);
            ViewCollection collView = targetList.Views;

            ViewCreationInformation viewInfo = new ViewCreationInformation();
          

            clientContext.Load(collView);
            clientContext.ExecuteQuery();

            Console.WriteLine("this is for document lib" + doclib);

            foreach (View oneView in collView)
             Console.WriteLine(oneView.Title);

            
        }

        public void alldoc(string siteUrl)
        {

             ClientContext clientContext = new ClientContext(siteUrl);
            ListCollection collList = clientContext.Web.Lists;                             
          
            clientContext.Load(collList);
            clientContext.ExecuteQuery();

            foreach (SP.List olist in clientContext.Web.Lists)

            {

                allview(siteUrl, olist.Title);
                       
            }

        }

    }
}

=============================================================================================================

to call this method please create static void main to call it.

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using Microsoft.SharePoint.Client;

namespace ExtractView
{
    class Program
    {
        static void Main(string[] args)
        {
               SPView listview = new SPView();

               listview.alldoc(args[0]);         

        }

        
    }
}

=================================================================================================================

run the xxx.exe parameter(URL)

Code to retrieve all the list item detail

using System;
using System.Linq;
using Microsoft.SharePoint.Client;
using SP = Microsoft.SharePoint.Client;

namespace Microsoft.SDK.SharePointServices.Samples
{
    class RetrieveListItemsInclude
    {
        static void Main()
        {
            string siteUrl = "http://MyServer/sites/MySiteCollection";

            ClientContext clientContext = new ClientContext(siteUrl);
            SP.List oList = clientContext.Web.Lists.GetByTitle("Announcements");

            CamlQuery camlQuery = new CamlQuery();
            camlQuery.ViewXml = "<View><RowLimit>100</RowLimit></View>";

            ListItemCollection collListItem = oList.GetItems(camlQuery);

            clientContext.Load(collListItem,
                 items => items.Include(
                    item => item.Id,
                    item => item.DisplayName,
                    item => item.HasUniqueRoleAssignments));

            clientContext.ExecuteQuery();

            foreach (ListItem oListItem in collListItem)
            {
                Console.WriteLine("ID: {0} \nDisplay name: {1} \nUnique role assignments: {2}",
                    oListItem.Id, oListItem.DisplayName, oListItem.HasUniqueRoleAssignments);
            }Console.ReadLine();
        }
    }
}

source code from here