topic Active Directory and CIFS in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205685#M158815 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><BR /><SPAN>I'm trying to make Active Directory and CIFS work together in Alfresco Labs3b. I have managed to make Alfresco work with AD and authenticate AD users.</SPAN><BR /><SPAN>Everything seems to work fine except, when i try to open CIFS network folder from windows explorer with a user/pass from AD. It does'nt work for any AD users and only alfresco admin has access.</SPAN><BR /><SPAN>I want users&nbsp; to be able to scan a document to their User Home in Alfresco.</SPAN><BR /><BR /><SPAN>I tried using authentication=alfresco/simple/passthru, NTLM&nbsp; and SSO but either nothing works or i'm doing it wrong.</SPAN><BR /><SPAN>I also read some wiki guides and posts in this forum and could not resolve this issue.</SPAN><BR /><SPAN>passthru seems promising but can't get it to work.</SPAN><BR /><BR /><SPAN>my ldap-sychronization.properties file</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />#<BR /># This properties file brings together the common options for LDAP authentication rather than editing the bean definitions<BR />#<BR /><BR /># How to map the user id entered by the user to taht passed through to LDAP<BR /># - simple <BR />#&nbsp;&nbsp;&nbsp; - this must be a DN and would be something like<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN=%s,DC=company,DC=com<BR /># - digest<BR />#&nbsp;&nbsp;&nbsp; - usually pass through what is entered<BR />#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s&nbsp;&nbsp;&nbsp;&nbsp; <BR />ldap.authentication.userNameFormat=%s<BR /><BR /># The LDAP context factory to use<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR /><BR /># The URL to connect to the LDAP server <BR />ldap.authentication.java.naming.provider.url=ldap://myserver.local:389<BR /><BR /># The authentication mechanism to use<BR />ldap.authentication.java.naming.security.authentication=DIGEST-MD5<BR /><BR /># The default principal to use (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.principal=reader<BR /><BR /># The password for the default principal (only used for LDAP sync)<BR />ldap.authentication.java.naming.security.credentials=secret<BR /><BR /># Escape commas entered by the user at bind time<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas<BR />ldap.authentication.escapeCommasInBind=false<BR /><BR /># Escape commas entered by the user when setting the authenticated user<BR /># Useful when using simple authentication and the CN is part of the DN and contains commas, and the escaped \, is <BR /># pulled in as part of an LDAP sync<BR /># If this option is set to true it will break the default home folder provider as space names can not contain \<BR />ldap.authentication.escapeCommasInUid=false<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Do i need to change more properties than </SPAN><BR /><SPAN>ldap.authentication.java.naming.provider.url=ldap://</SPAN><STRONG>myserver.local:389</STRONG><BR /><BR /><SPAN>is using </SPAN><BR /><SPAN>ldap.authentication.java.naming.security.authentication=DIGEST-MD5</SPAN><BR /><SPAN>ok? or do i have to use authentication=simple? it seems to be ok for the alfresco auth.</SPAN><BR /><BR /><SPAN>my file-servers-custom.xml</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;alfresco-config area="file-servers"&gt;<BR /><BR />&lt;config evaluator="string-compare" condition="CIFS Server"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp; &lt;serverEnable enabled="true"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;host name="ACIFS" domain="mydomain"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;comment&gt;Alfresco CIFS Server&lt;/comment&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Set to the broadcast mask for the subnet –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;broadcast&gt;255.255.255.255&lt;/broadcast&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;tcpipSMB platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;netBIOSSMB platforms="linux,solaris,macosx"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Can be mapped to non-privileged ports, then use firewall rules to forward<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; requests from the standard ports –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;tcpipSMB port="1445" platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,macosx"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;hostAnnounce interval="5"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Use Win32 NetBIOS interface on Windows –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Win32NetBIOS/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Win32Announce interval="5"/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– CIFS authentication –&gt;<BR />&lt;!–<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type="alfresco"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;<BR />–&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;WINS&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;primary&gt;192.168.xx.xx&lt;/primary&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;secondary&gt;192.168.xx.xx&lt;/secondary&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/WINS&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;sessionDebug flags="Negotiate,Socket"/&gt;<BR />&nbsp;&nbsp; &lt;/config&gt;<BR /><BR /><BR /><BR />&nbsp; &lt;config evaluator="string-compare" condition="Filesystem Security"&gt;<BR />&nbsp; &lt;authenticator type="alfresco"&gt;<BR />&nbsp; &lt;/authenticator&gt;<BR />&lt;/config&gt;<BR /><BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; &lt;!– To override the default Alfresco filesystem use replace="true", to –&gt;<BR />&nbsp;&nbsp; &lt;!– add additional filesystems remove the replace="true" attribute&nbsp;&nbsp;&nbsp;&nbsp; –&gt;<BR />&nbsp;&nbsp; <BR />&nbsp;&nbsp; &lt;config evaluator="string-compare" condition="Filesystems" replace="true"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;filesystems&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;filesystem name="Alfresco"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;store&gt;workspace://SpacesStore&lt;/store&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;rootPath&gt;/app:company_home&lt;/rootPath&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Add a URL file to each folder that links back to the web client –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;urlFile&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;filename&gt;__Alfresco.url&lt;/filename&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;webpath&gt;<A href="http://${localname}:8080/alfresco/" rel="nofollow noopener noreferrer">http://${localname}:8080/alfresco/</A>&lt;/webpath&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/urlFile&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Mark locked files as offline –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;offlineFiles/&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Desktop actions –&gt;<BR />&lt;!–<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;desktopActions&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;global&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;path&gt;alfresco/desktop/Alfresco.exe&lt;/path&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;webpath&gt;<A href="http://${localname}:8080/alfresco/" rel="nofollow noopener noreferrer">http://${localname}:8080/alfresco/</A>&lt;/webpath&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/global&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;action&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;class&gt;org.alfresco.filesys.smb.server.repo.desk.CheckInOutDesktopAction&lt;/class&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;name&gt;CheckInOut&lt;/name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;filename&gt;__CheckInOut.exe&lt;/filename&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/action&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;action&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;class&gt;org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction&lt;/class&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;name&gt;JavaScriptURL&lt;/name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;filename&gt;__ShowDetails.exe&lt;/filename&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;script&gt;alfresco/desktop/showDetails.js&lt;/script&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;attributes&gt;anyFiles&lt;/attributes&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;preprocess&gt;copyToTarget&lt;/preprocess&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/action&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/desktopActions&gt;<BR />–&gt;<BR />&lt;!–<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;accessControl default="Write"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;user name="admin" access="Write"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;address subnet="90.1.0.0" mask="255.255.0.0" access="Write"/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/accessControl&gt;<BR />–&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/filesystem&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– AVM virtualization view of all stores/versions for WCM –&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;avmfilesystem name="AVM"&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;virtualView/&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/avmfilesystem&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/filesystems&gt;<BR />&nbsp;&nbsp; &lt;/config&gt;<BR /><BR />&lt;/alfresco-config&gt;<BR /><BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>Can anybody help me with this ?</SPAN><BR /><BR /><BR /><SPAN>Thanks in advance.</SPAN></BODY></HTML> Fri, 05 Dec 2008 09:03:33 GMT trelofysikos 2008-12-05T09:03:33Z Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205685#M158815 Hello,I'm trying to make Active Directory and CIFS work together in Alfresco Labs3b. I have managed to make Alfresco work with AD and authenticate AD users.Everything seems to work fine except, when i try to open CIFS network folder from windows explorer with a user/pass from AD. It does'nt work for Fri, 05 Dec 2008 09:03:33 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205685#M158815 trelofysikos 2008-12-05T09:03:33Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205686#M158816 <HTML><HEAD></HEAD><BODY><SPAN>I haven't done it via LDAP personally, but just looking to your ldap.propertioes files you will need to set up at least some username items…</SPAN><BR /><BR /><SPAN>ie. pretty sure you have to add some username information in</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; # The default principal to use (only used for LDAP sync)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ldap.authentication.java.naming.security.principal=reader &lt;- this would probably be one of your users on AD?</SPAN><BR /><BR /><SPAN>I believe there is an "enterprise" wiki that might help you…</SPAN><BR /><SPAN>BTW: you will probably also need to allow some type of authentiction… I am not sure your commenting out of the authentication is the correct method for what you are wanting to do..:</SPAN><BR /><SPAN>eg (from your post)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– CIFS authentication –&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type="alfresco"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;</SPAN><BR /><BR /><BR /><SPAN>You might want to also refer to what we have been doing with AD/CIGS using poassthru where we are hitting brick walls ie. </SPAN><A href="http://forums.alfresco.com/en/viewtopic.php?f=9&amp;t=15552" rel="nofollow noopener noreferrer">http://forums.alfresco.com/en/viewtopic.php?f=9&amp;t=15552</A></BODY></HTML> Sun, 07 Dec 2008 22:04:27 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205686#M158816 aususer 2008-12-07T22:04:27Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205687#M158817 <HTML><HEAD></HEAD><BODY><SPAN>I commented out CIFS authentication only to use it seperately in this</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&lt;config evaluator="string-compare" condition="Filesystem Security"&gt;<BR />&nbsp; &lt;authenticator type="alfresco"&gt;<BR />&nbsp; &lt;/authenticator&gt;<BR />&lt;/config&gt;<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I also tried to use an LDAP user and pass in the properties file with no luck.</SPAN><BR /><BR /><SPAN>Can you share your configuration, so that i can take some hints ?</SPAN></BODY></HTML> Mon, 08 Dec 2008 10:12:15 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205687#M158817 trelofysikos 2008-12-08T10:12:15Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205688#M158818 <HTML><HEAD></HEAD><BODY><SPAN>Labs + ad + cifs + passthru is broken, use kerberos instead!</SPAN><BR /><A href="http://wiki.alfresco.com/wiki/Configuring_the_CIFS_and_web_servers_for_Kerberos/AD_integration" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Configuring_the_CIFS_and_web_servers_for_Kerberos/AD_integration</A></BODY></HTML> Mon, 08 Dec 2008 12:04:41 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205688#M158818 hannesb 2008-12-08T12:04:41Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205689#M158819 <HTML><HEAD></HEAD><BODY><SPAN>I also tried the kerberos wiki and i get an error in the CIFS authentication.</SPAN><BR /><BR /><SPAN>Is CIFS authentication only possible with the "alfresco" option ?</SPAN><BR /><BR /><SPAN>Is there someone who has a working CIFS+AD cofiguration ? Please share</SPAN><BR /><BR /><BR /><SPAN>p.s. If i have alfresco SSL will that be a problem with CIFS auth ?</SPAN></BODY></HTML> Tue, 09 Dec 2008 12:34:41 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205689#M158819 trelofysikos 2008-12-09T12:34:41Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205690#M158820 <HTML><HEAD></HEAD><BODY><SPAN>I have a setup working.</SPAN><BR /><BR /><SPAN>kerberos and enterprise auth works. Try to follow the instructions in the url I posted. the realm should be the windows domain uppercase. The rest is correct, kindof</SPAN></BODY></HTML> Tue, 09 Dec 2008 16:03:15 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205690#M158820 hannesb 2008-12-09T16:03:15Z Re: Active Directory and CIFS https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205691#M158821 <HTML><HEAD></HEAD><BODY><SPAN>please share your Working Configuration.</SPAN><BR /><SPAN>I have tried Kerberos authentication and still not working!</SPAN></BODY></HTML> Thu, 11 Dec 2008 12:06:19 GMT https://connect.hyland.com/t5/alfresco-archive/active-directory-and-cifs/m-p/205691#M158821 trelofysikos 2008-12-11T12:06:19Z