topic Re: AD+Kerberos and alfrescoUserStore cooperation in Alfresco Archive

AD+Kerberos and alfrescoUserStore cooperation

milesif — Thu, 07 May 2009 16:27:54 GMT

Hi everybody,In a previous post I described an authentication problem with AD+kerberos, but later I discovered that AD+Kerberos was working fine and the problem was of a different nature. I discovered that:1. if I manually create a user in Alfresco, when kerberos is turned off, and then in AD I have

Re: AD+Kerberos and alfrescoUserStore cooperation

milesif — Wed, 13 May 2009 09:57:41 GMT

Hi everybody,

All the problems were coming from the fact that, because of a misunderstanding of mines, I configured neither the jaas authentication context in a extension/jaas-authentication-context.xml, nor a chaining context.
Now I can make work both the jaas Kerberos AD security and the chain with Alfresco security and jaas Kerberos AD security.

I have just one minor problem left. When I use chaining I cannot login from the web using my alfresco users, because the kerberos filter tries to authenticate them in the AD domain and, of course, it can't.
There's a way to make the web client first to authenticate against the Alfresco DB and, if it does not suceed, against AD, or viceversa? I tried a configuration with both the kerberos filter and the standard filter active, with no luck. I also tried them in reverse order with no success.

Thanks in advance for any help

ciao Francesco

Re: AD+Kerberos and alfrescoUserStore cooperation

flefoll — Thu, 28 May 2009 21:21:21 GMT

Hi,

What you are trying normally works…
Can you post your config file ?

All of them (except krb5.conf…)
JAAS,
Tomcat/JAAS,
Alfresco JAAS & Alfresco chaining configuration ?

Regards,

Francois