topic Re: NTLMv2 and Passthru in Alfresco Archive

NTLMv2 and Passthru

carltonw — Thu, 05 Feb 2009 15:54:36 GMT

I'm getting this error in alfresco.log when I try to access my alfresco site using NTLM SSO passthru:"client CW-VISTA using NTLMv2 logon, not valid with passthru authentication"The documentation says that you can't use NTLMv2 with passthru so how can I use NTLM?

Re: NTLMv2 and Passthru

jtp — Thu, 05 Feb 2009 18:33:48 GMT

Edit your group policy, under computer configuration, security settings, local policies, security options.

You should see something about network security: Lan manager authentication level.
Try changing that to send lm & ntlm, and v2 if negotiated.

Re: NTLMv2 and Passthru

carltonw — Thu, 05 Feb 2009 20:24:11 GMT

JTP,
Thanks for the response. Strange thing is that this worked on a previous try at getting this working.

Did you ever get NTLM passthru working with 3 Stable and Share?
Carlton.

Re: NTLMv2 and Passthru

jtp — Thu, 05 Feb 2009 20:34:10 GMT

Single sign on, no. NTLM manual authentication, yes.

Re: NTLMv2 and Passthru

carltonw — Thu, 05 Feb 2009 21:00:45 GMT

Can you tell me how you got manual NTLM working for both Alfresco and Share? (did it break CIFS?)
If I could see your config files that would be great. thanks.

Re: NTLMv2 and Passthru

jtp — Fri, 06 Feb 2009 13:23:12 GMT

using the instructions here: http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

Do everything under sections "Alfresco Explorer and WebDav SSO using NTLM " and "NTLM Passthru Authentication" but not "Alfresco Share SSO using NTLM "
That will get SSO working for /alfresco and manual authentication working for Share. This is in an AD environment with no LDAP sync.
And yes it broke CIFS.

Re: NTLMv2 and Passthru

carltonw — Fri, 06 Feb 2009 21:13:03 GMT

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

Re: NTLMv2 and Passthru

jtp — Sat, 07 Feb 2009 06:59:04 GMT

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

Currently, that's normal to only be able to sign in to share after signing in to alfresco. I'm sure it's in the plan sometime to remove the requirement, but not yet.

Best of luck to you on the CIFS front, it seems to be one of the most posted about items on this forum. I didn't find it important enough to go through the hassle.