topic Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS ! in Alfresco Archive

Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

karakartal — Wed, 16 Jul 2008 10:45:05 GMT

HelloI am checking out every release from HEAD and recompiling and facing the same following error with a big disappointmentEBUG [smb.protocol.auth] Authenticated user cenap sts=Disallow via PassthruI have a working Active Directory + NTLM + CIFS configuration with Alfresco 2 but I was never able

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

vycitalr — Fri, 18 Jul 2008 10:37:36 GMT

I succesfully use "alfresco" authenticator with NTLM an AD, using version 2.2.dev.

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

karakartal — Fri, 18 Jul 2008 12:13:02 GMT

I succesfully use "alfresco" authenticator with NTLM an AD, using version 2.2.dev.

What about CIFS? Can you also use CIFS?

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

vycitalr — Fri, 18 Jul 2008 12:16:54 GMT

Yes, I can.

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

karakartal — Mon, 21 Jul 2008 11:37:18 GMT

Would you mind posting your configuration XML's here?

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

vycitalr — Mon, 21 Jul 2008 14:57:45 GMT

There is really nothing special.

file-servers.xml



<alfresco-config area="file-servers">

   <config evaluator="string-compare" condition="CIFS Server">
     <serverEnable enabled="true"/>
      <host name="${localname}CIFS"/>
      <comment>Alfresco CIFS Server</comment>

      <!– Set to the broadcast mask for the subnet –>
      <broadcast>255.255.255.255</broadcast>



      <!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux.
       
      To enable native SMB support under Windows requires that the Windows native SMB support is disabled by editing, or creating, the following registry key :-
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
      "SMBDeviceEnabled"=dword:00000000
      –>
      <!–
      <tcpipSMB platforms="linux,solaris,macosx"/>
      <netBIOSSMB platforms="linux,solaris,macosx"/>
     –>
     
     
     <!– Can be mapped to non-privileged ports, then use firewall rules to forward
          requests from the standard ports –>         

      <tcpipSMB port="1445" platforms="linux,solaris,macosx"/>
      <netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,macosx"/>
    
       
      <hostAnnounce interval="5"/>

      <!– Use Win32 NetBIOS interface on Windows, on other platform this is ignored –>
      <Win32NetBIOS/>
      <Win32Announce interval="5"/>

<!–
      <WINS>
         <primary>1.2.3.4</primary>
         <secondary>5.6.7.8</secondary>
      </WINS>
–>
      <sessionDebug flags="Negotiate,Socket"/>
   </config>

   <config evaluator="string-compare" condition="FTP Server">
     <serverEnable enabled="false"/>
<!–      <debug flags="File,Search,Error,Directory,Info,DataPort"/> –>
   </config>
   
   <config evaluator="string-compare" condition="NFS Server">
     <serverEnable enabled="false"/>
   </config>
   
   <config evaluator="string-compare" condition="Filesystems">
     <filesystems>
        
       <!– Alfresco repository access shared filesystem –>
         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

         <!– Add a URL file to each folder that links back to the web client –>
         <urlFile>
               <filename>__AlfrescoClient.url</filename>
               <webpath>http://${localname}:8080/alfresco/</webpath>
            </urlFile>

         <!– Mark locked files as offline –> 
          <offlineFiles/>

         <!– Desktop actions –>
         <!– Uses a client-side application to trigger a server-side action                         –>
         <!–   Echo - displays a message echoed from the server                                     –>
         <!–   URL  - launches a URL via the Windows shell                                          –>
         <!–   CmdLine - launches the Notepad application                                           –>
         <!–   CheckInOut - checks files in/out, drag and drop files onto the application           –>
         <!–   JavaScript - run a server-side script                                                –>
         <!–   JavaScriptURL - server-side script that generates a URL to the folder using a ticket –>
         <!–                   to avoid having to logon                                             –>

<!–
         <desktopActions>
            <global>
                    <path>alfresco/desktop/Alfresco.exe</path>
               <webpath>http://${localname}:8080/alfresco/</webpath>
            </global>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.EchoDesktopAction</class>
               <name>Echo</name>
                 <filename>__AlfrescoEcho.exe</filename>
            </action>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.URLDesktopAction</class>
               <name>URL</name>
                 <filename>__AlfrescoURL.exe</filename>
            </action>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.CmdLineDesktopAction</class>
               <name>CmdLine</name>
                 <filename>__AlfrescoCmd.exe</filename>
            </action>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.CheckInOutDesktopAction</class>
               <name>CheckInOut</name>
                 <filename>__AlfrescoCheckInOut.exe</filename>
            </action>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction</class>
               <name>JavaScript</name>
               <filename>__AlfrescoScript.exe</filename>
               <script>alfresco/desktop/dumpRequest.js</script>
               <attributes>anyFiles, multiplePaths , allowNoParams</attributes>
               <preprocess>confirm, copyToTarget</preprocess>
            </action>
            <action>
               <class>org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction</class>
               <name>JavaScriptURL</name>
               <filename>__AlfrescoDetails.exe</filename>
               <script>alfresco/desktop/showDetails.js</script>
               <attributes>anyFiles</attributes>
               <preprocess>copyToTarget</preprocess>
            </action>

         </desktopActions>
–>          
                    
<!–
            <accessControl default="Write">
               <user name="admin" access="Write"/>
               <address subnet="90.1.0.0" mask="255.255.0.0" access="Write"/>
            </accessControl>
–>
         </filesystem>
        
       <!– AVM virtualization view of all stores/versions for WCM –>
         <avmfilesystem name="AVM">
            <virtualView/>
         </avmfilesystem>
        
      </filesystems>
   </config>

   <config evaluator="string-compare" condition="Filesystem Security">
    
    <!– we use NTLM, so we need alfreosco authenticator –>
    <authenticator type="alfresco"/>
     
    <!– 
      <authenticator type="enterprise">
      </authenticator>
   –>
   
<!–
      <globalAccessControl default="None">
         <user name="admin" access="Write"/>
         <address ip="90.1.0.90" access="Write"/>
      </globalAccessControl>

      <users>
         <localuser name="user">
            <password>user</password>
            <comment>Normal user account</comment>
         </localuser>
   
         <localuser name="administrator">
            <password>admin</password>
            <administrator/>
            <comment>Administrator account</comment>
         </localuser>
      </users>
–>
   </config>


</alfresco-config> 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

ntlm-authentication-context.xml


<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <!– The authentication component.                                      –>

    <!– Use the passthru authentication component to authenticate using    –>
    <!– user accounts on one or more Windows servers.                      –>
    
    <!– Properties that specify the server(s) to use for passthru          –>
    <!– authentication :-                                                  –>
    <!–   useLocalServer   use the local server for authentication         –>
    <!–   domain           use domain controllers from the specified domain–>
    <!–   servers          comma delimted list of server addresses or      –>
    <!–                    names                                           –>
       
    <bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <!–  RVY: comment out this in case of remote server
        <property name="useLocalServer">
            <value>true</value>
        </property>
        –>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="transactionService">
            <ref bean="transactionComponent" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
        
        
         <!– Name of the windows domain \ domain controller hostname or ip –>
       <property name="servers">
            <value>10.10.21.128</value>
       </property>
   
            
    </bean>
    
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

hvyas — Mon, 21 Jul 2008 15:43:16 GMT

I succesfully use "alfresco" authenticator with NTLM an AD, using version 2.2.dev.

What SVN revision you build for 2.2 dev version?

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

karakartal — Thu, 24 Jul 2008 13:24:04 GMT

This seems to be pre 2.2 installation because it would complain about wrong CIFS authentication configuration etc.

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

mikeh — Thu, 24 Jul 2008 14:39:20 GMT

If it's the version I think it is, you should update it before going much further. Did you grab this build just before Christmas?

Version 2.2 dev is actually a very early v2.9 (before the version numbers changed).

Mike

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

hvyas — Thu, 24 Jul 2008 15:50:47 GMT

If it's the version I think it is, you should update it before going much further. Did you grab this build just before Christmas?

Version 2.2 dev is actually a very early v2.9 (before the version numbers changed).

Mike

Mike,

What SVN revision number should we build for stable community 2.1.X or 2.2.x series? Your answer would be appreciated.

Re: Either nobody uses v3.0 or nobody needs AD + NTLM + CIFS !

mikeh — Thu, 24 Jul 2008 19:35:55 GMT

Community v2.1 is rev 929 as mentioned here: http://wiki.alfresco.com/wiki/Release_2.1

v2.2 is Enterprise only, although all the functionality is in HEAD should you wish to grab that instead.

Thanks,
Mike