topic Re: Problem with accessing CFIS share from windows in Alfresco Archive

Problem with accessing CFIS share from windows

aaroe — Wed, 26 Nov 2008 14:49:02 GMT

Hi there,We're currently in the process of trying out Alfresco at my workplace to replace the small SharePoint we have going now which no one uses anyways.I'm in the process of getting some basic configuration done to make it possible to let a few users lose on the thing and let them have their way

Re: Problem with accessing CFIS share from windows

rxm307 — Mon, 01 Dec 2008 21:53:51 GMT

I'm having the same issue, NTLM passthru authentication works fine with the web interface, just not with CIFS.

Re: Problem with accessing CFIS share from windows

aususer — Wed, 03 Dec 2008 05:01:44 GMT

I think you might be suffering the same problem that a few people are also having when configuring NTLM CIFS.. ie.. that we cannot get it to work.

symptom is:
You can use Passthru to authenticate your webfrontent without a problem.. however when you try to start|run|\\yoursever you will fail.
also trying a "net view \\<yourserver>" will come up with a "access is denied".

if you increase your error logging (/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties and change the .smb and NTLM options to "debug), and restart alfresco - then look at the \opt\alfresco\tomcat\logs\catalina.out you will see
<time>227 DEBUG [smb.protocol.auth] Authenticated user <yourusername> sts=Disallow via Passthru

This is the reason why you are being prompted for the username and password..
you are not alone here..

here is a link to a thread that we have all been using describing the same problem and what we are finding…
http://forums.alfresco.com/en/viewtopic.php?f=14&t=13858

Re: Problem with accessing CFIS share from windows

rxm307 — Wed, 03 Dec 2008 05:49:31 GMT

I've enabled those and all I'm getting is

16:45:51,790 DEBUG [org.alfresco.smb.protocol.auth] No PassthruDetails for T3
16:46:26,378 DEBUG [org.alfresco.smb.protocol.auth] No PassthruDetails for T9

Re: Problem with accessing CFIS share from windows

rxm307 — Wed, 03 Dec 2008 06:03:46 GMT

and

16:55:22,962 DEBUG [smb.protocol.auth] Null CIFS logon allowed

Re: Problem with accessing CFIS share from windows

aususer — Wed, 03 Dec 2008 21:48:09 GMT

Have a look at the link I put - I put a copy of my config that I used that got a little closer than you seem to be..
note: is linux-based, so paths will be different to windows (if that is what you are using).

Re: Problem with accessing CFIS share from windows

aususer — Thu, 04 Dec 2008 02:24:31 GMT

OOPS :shock: don't know if this is a good or a bad thing..

I just downloaded a trial version of enterprise 3.0 - just to see -, set it up EXACTLY the same as the Labs 3b and 3c…

and it worked PERFECTLY first time!

ie..

Startup:
07:37:18,652 Userystem INFO [service.descriptor.DescriptorService] Alfresco license: Enterprise - v3.0 granted to Trial User limited to 30 days expiring Sat Jan 03 00:00:00 EST 2009 (30 days remaining)
07:37:18,654 Userystem INFO [service.descriptor.DescriptorService] Alfresco started (Enterprise): Current version 3.0.0 (r11498) schema 501 - Installed version 3.0.0 (r11498) schema 501
Dec 4, 2008 7:38:46 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Dec 4, 2008 7:38:46 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 368844 ms

Logfile when accessing webpage (modified to protect me)

07:38:59,391 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from <mysubnet> (<mysubnet>:5432)
07:38:59,404 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0xa208b207,Domain:<mydomain>,Wks:<mypc>]
07:38:59,405 DEBUG [app.servlet.NTLMAuthenticationFilter] Client domain <mydomain>
07:38:59,564 DEBUG [app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x80000203,Target:ALFRESCOA,Ch:b67a1a5b5e8eec1e]
07:38:59,582 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:690f25986c591cf504dd0655caeb906cefea87bfcbd94c4d,NTLM:410cbc2c95a79569b080b7fbc50c52c9b7953a9c99644684,Dom:<mydomain>,User:<me>,Wks:<mypc>]
07:39:02,891 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
07:39:02,893 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [<me>,Wks:<mypc>,Dom:<mydomain>,AuthSrv:ALFRESCOA,Thu Dec 04 07:39:02 EST 2008]
07:39:11,145 DEBUG [app.servlet.NTLMAuthenticationFilter] User <me> validate ticket
07:39:11,295 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required, chaining …

and when I access via XPSP3 Start|Run|\\alfresco

07:39:25,668 User:<me> DEBUG [smb.protocol.auth] Auth token net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@6f1597: Username: net.sf.acegisecurity.providers.dao.User@f27e2a: Username: <me>; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ROLE_AUTHENTICATED; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.providers.dao.User@f27e2a: Username: <me>; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ROLE_AUTHENTICATED; Granted Authorities: ROLE_AUTHENTICATED
07:39:25,678 User:<me> DEBUG [smb.protocol.auth] Authenticated user <me> sts=Allow via Passthru
07:39:32,848 User:<me> DEBUG [smb.protocol.auth] Null CIFS logon allowed

Could this be a mismatch-difference between code in the labs3b/3c and enterprise?

Goes to show - paying certainly does help…
not sure where to go to from here.. we are not in a position to roll out the enterprise version just yet (if at all - not sure if will fit into our requirements just yet - thats why using the community version - it doesn't bind me to an "enddate" for business testing)..

Re: Problem with accessing CFIS share from windows

reboot — Thu, 04 Dec 2008 13:39:14 GMT

we have the same problemes with NTLM - CFIS configuration.

on Version 2.9 it was all fine, but with upgrade to 3.0b the CFIS authentication will fail.

Re: Problem with accessing CFIS share from windows

reboot — Thu, 04 Dec 2008 15:56:00 GMT

is there an idea when the problem is solved, or shall I step back to 2.9? :cry:

Re: Problem with accessing CFIS share from windows

rxm307 — Thu, 04 Dec 2008 22:04:15 GMT

I Raised this bug report yesterday, no one has replied too it as yet…..

Re: Problem with accessing CFIS share from windows

aususer — Mon, 15 Dec 2008 02:48:57 GMT

Oh yea… and don't bother trying Labd 3d… (on nightly builds today)…
it doesn't do any better.. will update the fault ticket.

Re: Problem with accessing CFIS share from windows

meansartin14 — Tue, 06 Jan 2009 15:15:38 GMT

I too am suffering from the issue described in this thread.

I have configured Alfresco Community Labs 3C to authenticate against a remote Active Directory server. This allows configured Active Directory users to use the Alfresco Web Interface via single sign-on on their client Windows XP PCs (which use the same Active Directory server for Windows login) without issue. They can not, however, use the Map Network Drive… feature to add the Alfresco CIFS server as a network drive.

The errors I see in alfresco.log are different than what has been described here though. Here's an example of what I see in alfresco.log when I attempt to Map Network Drive… to \\myserver\alfresco:


    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=8, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=985,Authenticator=EncType=23,Kvno=-1,Len=180]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=16, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=1020,Authenticator=EncType=23,Kvno=-1,Len=175]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=8, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=985,Authenticator=EncType=23,Kvno=-1,Len=180]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=16, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] User  logged on  (type Normal)
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=24, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Logged on using NTLMSSP/NTLMv2
    DEBUG [org.alfresco.smb.protocol.auth] User <username> logged on  (type Normal)
    DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=0 for VC=[0:0,[<username>:null,Windows XP 3790 Service Pack 2,,<ip address>],Tree=0,Searches=0]
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I started my own thread about the issue (here: http://forums.alfresco.com/en/viewtopic.php?f=9&t=15888) not knowing that this thread existed.

Has anyone successfully configured Alfresco Labs 3c to allow CIFS server network drive mappings on Windows XP PCs while authenticating against an external Active Directory server?

Re: Problem with accessing CFIS share from windows

meansartin14 — Tue, 13 Jan 2009 20:43:09 GMT

I have started a thread that I hope to eventually turn into a AlfrescoWiki page for how to configure Active Directory authentication for both CIFS and the Web Interface in Alfresco Labs 3c.

Please see my thread:
[ERROR]Alfresco Engineers: CIFS auth does not work. Sugg?

Please come join in the discussion, or at least subscribe to the thread. I want to try to get everyone having these types of issues into the thread so that we can get a large collection of experiences and configurations.

We WILL find the answer for how to enable Active Directory authentication with CIFS in Alfresco!!

Re: Problem with accessing CFIS share from windows

luxoliver — Fri, 20 Mar 2009 10:29:15 GMT

Hi,

I want to access Alfresco with CFIS but i already have an error 1326 (user or password incorect).
I have 1 alfresco on my computer and an other one on a VM.
On my computer i use the port 8585 and on my VM i use 8080.
I can't access with CFIS the alfresco who is on my computer. But when i try to access on my VM that's work's.
Maybe it's because of the port ? But i can't change the port on my computer because i have an other tomvat which use the port 8080.
If somebody have any idea to help me, you are really welcome.
Thank's