topic Authentification passthru automatique in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/authentification-passthru-automatique/m-p/175798#M128928 <HTML><HEAD></HEAD><BODY><SPAN>Bonjour,</SPAN><BR /><BR /><SPAN>J'ai installé la dernière version d'Alfresco community sur un Windows Server 2008R2 SP1 64bit. Mon active directory est également sur un Windows server 2008R2.</SPAN><BR /><BR /><SPAN>J'ai configuré le mode d'authentification passthru comme suit:</SPAN><BR /><BR /><SPAN>passthru-authentication-context.properties:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />passthru.authentication.useLocalServer=false<BR />passthru.authentication.domain=<BR />passthru.authentication.servers=172.16.0.36<BR />passthru.authentication.guestAccess=true<BR />passthru.authentication.defaultAdministratorUserNames=TestAdmin<BR />#Timeout value when opening a session to an authentication server, in millisecondspassthru.authentication.connectTimeout=5000<BR />#Offline server check interval in seconds<BR />passthru.authentication.offlineCheckInterval=300<BR />passthru.authentication.protocolOrder=TCPIP,NetBIOS<BR />passthru.authentication.authenticateCIFS=true<BR />passthru.authentication.authenticateFTP=true<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>J'ai ensuite modifier le fichier alfresco-global.properties:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />passthru.authentication.servers=172.16.0.36<BR />authentication.chain=passthru1:passthru,alfrescoNtlm1:alfrescoNtlm<BR />ntlm.authentication.sso.enabled=true<BR />passthru.authentication.authenticateCIFS=true<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>J'ai configuré dans internet explorer le site comme étant un site intranet de confiance et mis la connexion automatique du site avec les identifiants de l'utilisateur.</SPAN><BR /><SPAN>Comme cela mes utilisateurs n'ont rien à rentrer au niveau de la connexion.</SPAN><BR /><BR /><SPAN>Mais j'obtiens cette erreur :</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />net.sf.acegisecurity.AuthenticationServiceException: Failed to open passthru auth session <BR />at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:783) <BR />at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:554) <BR />at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) <BR />at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) <BR />at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) <BR />at java.lang.reflect.Method.invoke(Method.java:601) <BR />at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:309) <BR />at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183) <BR />at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150) <BR />at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:110) <BR />at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172) <BR />at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202) <BR />at $Proxy222.authenticate(Unknown Source) <BR />at org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.processType1(BaseNTLMAuthenticationFilter.java:377) <BR />at org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.authenticateRequest(BaseNTLMAuthenticationFilter.java:283) <BR />at org.alfresco.repo.webdav.auth.BaseSSOAuthenticationFilter.doFilter(BaseSSOAuthenticationFilter.java:134) <BR />at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) <BR />at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) <BR />at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) <BR />at java.lang.reflect.Method.invoke(Method.java:601) <BR />at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactoryinvoke(ChainingSubsystemProxyFactory.java:103) <BR />at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172) <BR />at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202) <BR />at $Proxy247.doFilter(Unknown Source) <BR />at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82) <BR />at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) <BR />at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) <BR />at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:61) <BR />at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) <BR />at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) <BR />at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222) <BR />at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123) <BR />at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) <BR />at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) <BR />at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99) <BR />at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:929) <BR />at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) <BR />at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) <BR />at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1002) <BR />at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585) <BR />at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:1813) <BR />at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) <BR />at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) <BR />at java.lang.Thread.run(Thread.java:722) <BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>J'ai ensuite désactiver le login automatique dans I.E, j'ai une pop-up de connexion Windows, je rentre mes identifiants cela ne fonctionne pas et au bout de trois essaies j'ai une page de login Alfresco, je rentre les identifiants de n'importe qu'elle utilisateur créé dans mon AD et là la connexion fonctionne…</SPAN><BR /><BR /><SPAN>Donc l'identification via des utilisateurs du domaine fonctionne par contre la connexion auto non.</SPAN><BR /><BR /><SPAN>Merci d'avance pour votre aide !</SPAN></BODY></HTML> Sun, 09 Jun 2013 11:17:25 GMT 2013-06-09T11:17:25Z Authentification passthru automatique https://connect.hyland.com/t5/alfresco-archive/authentification-passthru-automatique/m-p/175798#M128928 Bonjour,J'ai installé la dernière version d'Alfresco community sur un Windows Server 2008R2 SP1 64bit. Mon active directory est également sur un Windows server 2008R2.J'ai configuré le mode d'authentification passthru comme suit<IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />assthru-authentication-context.properties<IMG id="smileytongue" class="emoticon emoticon-smileytongue" src="https://migration33.stage.lithium.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />assthru.authentication.useL Sun, 09 Jun 2013 11:17:25 GMT https://connect.hyland.com/t5/alfresco-archive/authentification-passthru-automatique/m-p/175798#M128928 2013-06-09T11:17:25Z Re: Authentification passthru automatique https://connect.hyland.com/t5/alfresco-archive/authentification-passthru-automatique/m-p/175799#M128929 <HTML><HEAD></HEAD><BODY><SPAN>Quelle version d'IE est utilisée ? </SPAN><BR /><BR /><SPAN>dans passthru.authentication.servers, il est recommandé de mettre domain\\hostname,hostname.&nbsp; Cela dépend de votre infrastructure réseau… le client utilisera peut être l'une ou l'autre des formes. </SPAN><BR /><SPAN>Je désactiverais peut être aussi : </SPAN><BR /><BR /><SPAN>ntlm.authentication.sso.enabled=true &lt;= concerne l'authentification des utilisateurs "internes", pas ceux de l'AD</SPAN><BR /><BR /><SPAN>passthru.authentication.authenticateCIFS=true &lt;= ds ce cas seuls les utilisateurs loggés sur l'AD pourront se connecter via CIFS, pas les users internes. </SPAN><BR /><BR /><BR /><SPAN>Sans + d'infos difficile de savoir exactement… la plomberie windows n'est pas des plus explicites</SPAN><BR /><BR /></BODY></HTML> Wed, 19 Jun 2013 14:20:25 GMT https://connect.hyland.com/t5/alfresco-archive/authentification-passthru-automatique/m-p/175799#M128929 rguinot 2013-06-19T14:20:25Z