topic Re: ntlm auth and chaining in Alfresco Archive

ntlm auth and chaining

jos_snellings — Thu, 14 Feb 2008 08:44:45 GMT

Having read http://wiki.alfresco.com/wiki/Talk:Enterprise_Security_and_Authentication_Configurationthe document says:Although NTLM pass-through method is not supported for ChainedAuthentication in 2.0 …Neither it is in 2.1E. Will it be in 2.2E?Furthermore, indication [by naming this bean as "authent

Re: ntlm auth and chaining

andy — Tue, 26 Feb 2008 17:07:19 GMT

Hi

NTLM chaining is supported in V2.1 onwards. There can only be one go at NTLM so it is not so much chaining as use the first one in the list of a given type. In 2.1 and after, there is a ChainingAuthenticationComponent class. See the chaining examples in later releases. It is this bean definition that needs to be named authenticationComponent so it is used in all the places that wire up an authentication component. CIFS is one of them.

Andy

Re: ntlm auth and chaining

jos_snellings — Thu, 28 Feb 2008 08:12:57 GMT

Thank you for the answer. If I get it right then:

As in chaining-authentication-context.xml.sample.

But do you mean that, if we add the authenticationComponent in this file,
<bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ChainingAuthenticationComponentImpl">
   <property name="authenticationComponents">
      <list>
             <ref bean="NTLMAuthenticationComponent"/>
      </list>
   </property>
   <property name="mutableAuthenticationComponent">
      <ref bean="authenticationComponentImplAlfresco"/>
   </property>
</bean>

And that this bean NTLMAuthenticationComponent must be the name of the bean declared/configured in ntlm-authentication-context:

    <bean id="NTLMAuthenticationComponent" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <property name="useLocalServer">
                <value>false</value>
        </property>

….
(this setup brings about configuration errors).
Please confirm that this is the way to go.

Jos

Re: ntlm auth and chaining

andy — Fri, 14 Mar 2008 10:01:32 GMT

Hi

It sounds correct. If you are getting initialisation problems check you have admSearchService wired up for the alfresco authentication bean and not searchService.

Andy

Re: ntlm auth and chaining

maxmax — Fri, 09 Jan 2009 16:40:03 GMT

is there someone with a chaining working who can provide samples ?