topic Active Directory - Kerberos in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/active-directory-kerberos/m-p/203887#M157017 <HTML><HEAD></HEAD><BODY><SPAN>Hello all.</SPAN><BR /><BR /><SPAN>I've successfully setup 'Active Directory - Kerberos' to authenticate users.&nbsp; CIFS access / authenication works with the client computers are running Windows XP, but not Windows 2000.&nbsp; I get the following debug message when a Windows 2000 clients attempts access:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>12:02:31,702&nbsp; WARN&nbsp; [smb.protocol.auth] Authentication component does not support MD4 password hashes<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Sadly, I still have Windows 2000 clients and will until end-of-life support for that OS.&nbsp; Can anyone explain to me how to either setup MD4 password support in Alfresco or setup Windows 2000 to not default to using MD4?&nbsp; Seems if I use Internet Explorer on Windows 2000 machines to access Alfresco Explorer, all is good.&nbsp; Just when I'm using Windows Explorer&nbsp; it uses MD4 hashes.</SPAN><BR /><BR /><SPAN>Also experiencing issues where users can login once, and if they try to access Alfresco via CIFS later that same day, they can't.&nbsp; I captured the following stack trace.&nbsp; This is the first time I've seen this one, even though we experience this issue on an ongoing basis.</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />10:32:54,115 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup SPNEGO, MID=31307, UID=0, PID=65279<BR />10:32:54,117 DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=950,Authenticator=EncType=3,Kvno=-1,Len=176]<BR />10:32:54,117 DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ<BR />10:32:54,123 DEBUG [org.alfresco.smb.protocol.auth] Using OID MS Kerberos5 for NegTokenTarg<BR />10:32:54,124 DEBUG [org.alfresco.smb.protocol.auth] Created NegTokenTarg using updated AP-REP, added subkey<BR />10:32:54,124 DEBUG [org.alfresco.smb.protocol.auth] Machine account logon, PRS-NDICKINSON$, as null logon<BR />10:32:54,124 DEBUG [org.alfresco.smb.protocol.auth] Logged on using Kerberos, user PRS-NDICKINSON$<BR />10:32:54,127 DEBUG [org.alfresco.smb.protocol.auth] User&nbsp; logged on&nbsp; (type Null)<BR />10:32:54,127 DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=2 for VC=[1:2,[:null,Windows 2002 Service Pack 3 2600,Windows 2002 5.1],Tree=0,Searches=0]<BR />10:34:15,824 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup SPNEGO, MID=38064, UID=0, PID=65279<BR />10:34:15,825 DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=1006,Authenticator=EncType=3,Kvno=-1,Len=168]<BR />10:34:15,825 DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ<BR />10:34:15,831 DEBUG [org.alfresco.smb.protocol.auth] Using OID MS Kerberos5 for NegTokenTarg<BR />10:34:15,832 DEBUG [org.alfresco.smb.protocol.auth] Created NegTokenTarg using updated AP-REP, added subkey<BR />10:34:15,833 DEBUG [org.alfresco.smb.protocol.auth] Logged on using Kerberos, user ndickinson<BR />10:34:15,837 DEBUG [org.alfresco.smb.protocol.auth] User ndickinson@MYDOMAIN.CA logged on&nbsp; (type Normal)<BR />10:34:15,838 DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=0 for VC=[0:0,[ndickinson@MYDOMAIN.CA:null,Windows 2002 Service Pack 3 2600,Windows 2002 5.1],Tree=0,Searches=0]<BR />10:34:40,887 ERROR [org.alfresco.util.transaction.SpringAwareUserTransaction.trace] UserTransaction being garbage collected without a commit() or rollback(). <BR />&nbsp;&nbsp; Started at: <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.util.transaction.SpringAwareUserTransaction.begin(SpringAwareUserTransaction.java:389)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.filesys.alfresco.AlfrescoDiskDriver.beginTransaction(AlfrescoDiskDriver.java:332)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.filesys.alfresco.AlfrescoDiskDriver.beginWriteTransaction(AlfrescoDiskDriver.java:180)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.filesys.repo.ContentDiskDriver.closeFile(ContentDiskDriver.java:1822)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.jlan.smb.server.VirtualCircuit.closeCircuit(VirtualCircuit.java:474)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.jlan.smb.server.SMBSrvSession.cleanupSession(SMBSrvSession.java:349)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; org.alfresco.jlan.smb.server.SMBSrvSession.run(SMBSrvSession.java:1302)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; java.lang.Thread.run(Thread.java:595)<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>How do I fix or work-around this issue?&nbsp; I'm thinking I'm missing some configuration.</SPAN><BR /><BR /><SPAN>Best,</SPAN><BR /><SPAN>Ben</SPAN></BODY></HTML> Mon, 26 Jan 2009 17:15:15 GMT benswitzer 2009-01-26T17:15:15Z Active Directory - Kerberos https://connect.hyland.com/t5/alfresco-archive/active-directory-kerberos/m-p/203887#M157017 Hello all.I've successfully setup 'Active Directory - Kerberos' to authenticate users.&nbsp; CIFS access / authenication works with the client computers are running Windows XP, but not Windows 2000.&nbsp; I get the following debug message when a Windows 2000 clients attempts access:12:02:31,702&nbsp; WARN&nbsp; [smb.pr Mon, 26 Jan 2009 17:15:15 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-kerberos/m-p/203887#M157017 benswitzer 2009-01-26T17:15:15Z Re: Active Directory - Kerberos https://connect.hyland.com/t5/alfresco-archive/active-directory-kerberos/m-p/203888#M157018 <HTML><HEAD></HEAD><BODY><SPAN>With Windows 2000 clients you can only use NTLM pass through authentication. That too is prone issues. Sorry.</SPAN></BODY></HTML> Mon, 26 Jan 2009 20:49:12 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-kerberos/m-p/203888#M157018 zaizi 2009-01-26T20:49:12Z