NTLM Passthru with Alfresco 2.2 Enterprise

aniruddh — Fri, 25 Apr 2008 11:18:37 GMT

Hi, I am trying to get NTLM Passthru work with Alfresco 2.2 Enterprise without much sucess. I followed the steps in http://forums.alfresco.com/viewtopic.php?f=9&t=7750&p=28923&hilit=active+directory+authentication#p32914.I changed the web.xml and ntlm-authentication-context.xml as per

Re: NTLM Passthru with Alfresco 2.2 Enterprise

aniruddh — Wed, 30 Apr 2008 04:09:14 GMT

Can someone from Alfresco answer this please?

Re: NTLM Passthru with Alfresco 2.2 Enterprise

fkratochvil — Tue, 06 May 2008 13:22:50 GMT

I believe I have found solution to this problem (after 2 days of frustration).

The source of this error is Tomcat session persistence, which requires all attributes in the session be Serializable. The NTLMLogonDetails object, that Alfresco stores in the session, is, however, not Serializable.

Therefore, the workaround is to disable Tomcat session persistence. This can be done in a "context.xml" configuration file in Tomcat conf directory:


<Context>

    <!– Default set of monitored resources –>
    <WatchedResource>WEB-INF/web.xml</WatchedResource>
   
    <!– Uncomment this to disable session persistence across Tomcat restarts –>
    <Manager pathname="" />

</Context>
‍‍‍‍‍‍‍‍‍‍‍

However, this was not enough - there is a <distributable/> tag in Alfresco web.xml, which has to be commented out. Otherwise it overrides the settings in context.xml.

see http://tomcat.apache.org/tomcat-5.5-doc/config/manager.html

HTH
Frank

Re: NTLM Passthru with Alfresco 2.2 Enterprise

aniruddh — Tue, 13 May 2008 05:38:30 GMT

Thanks a lot. That did the job.

Re: NTLM Passthru with Alfresco 2.2 Enterprise

archana_bonkanp — Mon, 11 Aug 2008 07:45:48 GMT

hi
we are getting following error in Alfresco 2.1 only to few users

12:24:31,843 ERROR [org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/AppConnect].[externalAccess]] Servlet.service() for servlet externalAccess threw exception
org.alfresco.repo.security.permissions.AccessDeniedException: Access Denied. You do not have the appropriate permissions to perform this operation.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:53)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:256)
   at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:191)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)
   at $Proxy2.createNode(Unknown Source)
   at org.alfresco.web.bean.repository.User.getUserPreferencesRef(User.java:216)
   at org.alfresco.web.bean.repository.User.getPreferences(User.java:168)
   at org.alfresco.web.bean.repository.PreferencesService.getPreferences(PreferencesService.java:69)
   at org.alfresco.web.bean.repository.PreferencesService.getPreferences(PreferencesService.java:60)
   at org.alfresco.web.bean.repository.PreferencesService.getPreferences(PreferencesService.java:50)
   at org.alfresco.web.bean.UserPreferencesBean.getContentFilterLanguage(UserPreferencesBean.java:136)
   at org.alfresco.web.app.servlet.AuthenticationHelper.authenticate(AuthenticationHelper.java:251)
   at org.alfresco.web.app.servlet.AuthenticationHelper.authenticate(AuthenticationHelper.java:109)
   at org.alfresco.web.app.servlet.BaseServlet.servletAuthenticate(BaseServlet.java:147)
   at org.alfresco.web.app.servlet.BaseServlet.servletAuthenticate(BaseServlet.java:117)
   at org.alfresco.web.app.servlet.ExternalAccessServlet.service(ExternalAccessServlet.java:97)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)
   at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
   at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
   at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
   at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
   at java.lang.Thread.run(Thread.java:595)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)

topic Re: NTLM Passthru with Alfresco 2.2 Enterprise in Alfresco Archive

NTLM Passthru with Alfresco 2.2 Enterprise

Re: NTLM Passthru with Alfresco 2.2 Enterprise

Re: NTLM Passthru with Alfresco 2.2 Enterprise

Re: NTLM Passthru with Alfresco 2.2 Enterprise

Re: NTLM Passthru with Alfresco 2.2 Enterprise