topic Re: Problem with CIFS authentication and kerberos in Alfresco Archive

Problem with CIFS authentication and kerberos

lme — Tue, 04 Jul 2006 09:42:35 GMT

We have a problem while trying to authenticate our CIFS users with Kerberos/JAAS.Context :- alfresco-community-tomcat-1.3.0- linux Debian/Sarge- Java 1.5.0_05From a fresh alfresco install, I added these 2 files :- tomcat/shared/classes/alfresco/extension/jaas-authentication-context.xml<?xml versi

Re: Problem with CIFS authentication and kerberos

hfrank — Tue, 18 Jul 2006 07:10:12 GMT

Any Comments from Alfresco team?

Re: Problem with CIFS authentication and kerberos

lme — Tue, 18 Jul 2006 14:36:30 GMT

Hello,

I solved my problem by using samba with ldap backend.

- webclient, webdav and ftp : ldap authentication
- cifs : passthru to samba server which use ldap as a backend

Hope this help.

Laurent

Re: Problem with CIFS authentication and kerberos

hfrank — Tue, 25 Jul 2006 01:40:32 GMT

hi, Laurent
Thanks for your reply.
Could you share your configuration file with us?
Thanks in advance.

Frank

Re: Problem with CIFS authentication and kerberos

andy — Fri, 15 Sep 2006 08:58:06 GMT

Hi

This is now fixed for single sign on as CIFS can authenticate Kerberos tickets.

Regards

Andy

Re: Problem with CIFS authentication and kerberos

dcrossma — Thu, 18 Jan 2007 04:04:02 GMT

CIFS does not work with kerberos authentication.

We have successfully set up chaining authentication using alfresco and jaas/kerberos authentication. We can log in to the web client as local or Active directory users.

I followed the instructions in the wiki for CIFS/kerberos.
http://wiki.alfresco.com/wiki/Configuring_the_CIFS_server_for_Kerberos/Active_Directory_integration

When a user tries to map to the CIFS server we get the following:

13:41:25,224 DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=8, UID=0, PI
D=65279
13:41:25,224 DEBUG [smb.protocol.auth] User  logged on  (type Normal)
13:41:25,224 DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=16, UID=0, P
ID=65279
13:41:25,240 DEBUG [smb.protocol.auth] Null logon
13:41:25,240 DEBUG [smb.protocol.auth] Logged on using NTLMSSP/NTLMv2SessKey
13:41:25,240 DEBUG [smb.protocol.auth] User  logged on  (type Null)
13:41:25,240 DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=32, UID=0, P
ID=65279
13:41:25,240 DEBUG [smb.protocol.auth] User  logged on  (type Normal)
13:41:25,240 DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=40, UID=0, P
ID=65279
13:41:25,240 WARN  [smb.protocol.auth] User does not exist, dcrossma
13:41:29,161 DEBUG [alfresco.smb.protocol] Winsock NetBIOS session request recei
ved, caller=[MILKFISH:WorkStation,Unique,]‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: Problem with CIFS authentication and kerberos

equinoxefr — Thu, 18 Jan 2007 11:13:46 GMT

Hi

This is now fixed for single sign on as CIFS can authenticate Kerberos tickets.

Regards

Andy

Hello,

I have the same problem with Alfresco Community 1.4, how can i fix it ?

Thank's
Pierre

Re: Problem with CIFS authentication and kerberos

gcoleman — Tue, 30 Jan 2007 05:17:16 GMT

(on behalf of dcrossma)

We managed to get it working by getting rid of the chaining authentication and using passthru instead of enterprise.