topic (Another) Kerberos / ActiveDirectory problem in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/another-kerberos-activedirectory-problem/m-p/199410#M152540 <HTML><HEAD></HEAD><BODY><SPAN>Hi all,</SPAN><BR /><BR /><SPAN>It seems like a lot of people are having problems with Kerberos / AD integration, so at least I'm not alone! It's very frustrating as there just aren't any good howtos that I have found, it'd be great if we could get some decent documentation around this. I'll keep a track of all the errors I've been receiving and how I've solved them (if I manage to solve them!). </SPAN><BR /><BR /><SPAN>Problem is as follows: </SPAN><BR /><BR /><SPAN>Alfresco version: 3.0.0 (b 1164) schema 131</SPAN><BR /><SPAN>Machine running Alfresco: Windows XP SP3 (Name: neptune)</SPAN><BR /><SPAN>Primary Domain Controller: Windows Server 2003 SP2 (name: server2k3)</SPAN><BR /><BR /><SPAN>I have followed the instructions on: </SPAN><A href="http://wiki.alfresco.com/wiki/Configuring_the_CIFS_and_web_servers_for_Kerberos/AD_integration" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Configuring_the_CIFS_and_web_servers_for_Kerberos/AD_integration</A><SPAN> to the letter (twice in fact). I have also switched on debug logging for smb.protocol by editing C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\log4j.properties and uncommenting the following lines: </SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR /># CIFS server debugging<BR />log4j.logger.org.alfresco.smb.protocol=debug<BR />log4j.logger.org.alfresco.smb.protocol.auth=debug<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>The server starts with no errors. Upon attempting to connect to the network share \\neptunea\alfresco I am prompted for a username and password. When I enter my normal windows username and password the following errors appear in the tomcat console</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />INFO: Server startup in 24782 ms<BR />19:44:19,964&nbsp; DEBUG [smb.protocol.auth] NT Session setup NTLMSSP, MID=8, UID=0,PID=65279<BR />19:44:19,980&nbsp; DEBUG [smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=983,Authenticator=EncType=3,Kvno=-1,Len=176]<BR />19:44:19,980&nbsp; DEBUG [smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ<BR />19:44:19,980&nbsp; ERROR [smb.protocol.auth] Kerberos logon error<BR />19:44:19,980&nbsp; ERROR [smb.protocol.auth] java.lang.NullPointerException<BR />19:44:19,996&nbsp; DEBUG [smb.protocol.auth] NT Session setup NTLMSSP, MID=16, UID=0, PID=65279<BR />19:44:19,996&nbsp; DEBUG [smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=1047,Authenticator=EncType=3,Kvno=-1,Len=176]<BR />19:44:19,996&nbsp; DEBUG [smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ<BR />19:44:19,996&nbsp; ERROR [smb.protocol.auth] Kerberos logon error<BR />19:44:19,996&nbsp; ERROR [smb.protocol.auth] java.lang.NullPointerException<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Hope someone can shed some light on this, it seems amazing that this is so difficult! </SPAN><BR /><BR /><SPAN>Does anyone actually have Kerberos / ActiveDirectory setup and working correctly? If so, would you mind letting me know what version / operating systems / configuration files are required.</SPAN><BR /><BR /><SPAN>Thanks,</SPAN><BR /><BR /><SPAN>Don</SPAN></BODY></HTML> Tue, 14 Oct 2008 19:19:20 GMT donturner 2008-10-14T19:19:20Z (Another) Kerberos / ActiveDirectory problem https://connect.hyland.com/t5/alfresco-archive/another-kerberos-activedirectory-problem/m-p/199410#M152540 Hi all,It seems like a lot of people are having problems with Kerberos / AD integration, so at least I'm not alone! It's very frustrating as there just aren't any good howtos that I have found, it'd be great if we could get some decent documentation around this. I'll keep a track of all the errors I Tue, 14 Oct 2008 19:19:20 GMT https://connect.hyland.com/t5/alfresco-archive/another-kerberos-activedirectory-problem/m-p/199410#M152540 donturner 2008-10-14T19:19:20Z Re: (Another) Kerberos / ActiveDirectory problem https://connect.hyland.com/t5/alfresco-archive/another-kerberos-activedirectory-problem/m-p/199411#M152541 <HTML><HEAD></HEAD><BODY><SPAN>Well, I have get to run version 2.9 in W2003 Server after 2 days of fighting few minuts before ur post.</SPAN><BR /><BR /><SPAN>I have seen LOTS of errors, but not the one u reference, sorry.</SPAN><BR /><BR /><SPAN>My advice is that u put debug on kerberos autentification too. It may help u.</SPAN><BR /><SPAN>Second though: the users u use to get the tokens… are admins in the Alfresco Server ? Some Microsoft KB sais that.</SPAN><BR /><BR /><SPAN>I have get to work to the Web UI so he gets user from windows automaticallly, but fails on cifs server <img id="smileysad" class="emoticon emoticon-smileysad" src="https://connect.hyland.com/i/smilies/16x16_smiley-sad.png" alt="Smiley Sad" title="Smiley Sad" /></SPAN></BODY></HTML> Wed, 15 Oct 2008 15:57:50 GMT https://connect.hyland.com/t5/alfresco-archive/another-kerberos-activedirectory-problem/m-p/199411#M152541 subemontes 2008-10-15T15:57:50Z