topic Kerberos configuration problem (Labs 3Stable) in Alfresco Archive

Kerberos configuration problem (Labs 3Stable)

bramthielemans — Mon, 07 Sep 2009 10:13:11 GMT

HiWe're having some problems setting up Kerberos for a SSO configuration.We've followed the procedures on http://wiki.alfresco.com/wiki/Configuring_the_CIFS_and_web_servers_for_Kerberos/AD_integration and http://wiki.alfresco.com/wiki/Enterprise_Security_and_Authentication_Configuration#JAAS_-_Java_

Re: Kerberos configuration problem (Labs 3Stable)

dward — Mon, 07 Sep 2009 10:42:22 GMT

This error suggests that your configured CIFS host name cannot be resolved to an IP address

<host name="${cifs.localname}A" domain="${cifs.domain}"/>

This is probably to do with the fact that NetBIOS isn't enabled and thus \\yourhostA won't resolve. You may have to get the CIFS side working to resolve this.

Now, the weird thing is that this host name resolution stuff in BaseSSOAuthenticationFilter isn't actually required by the Kerberos authentication side. This doesn't appear to be a problem in v3.2 so I would consider upgrading.

Re: Kerberos configuration problem (Labs 3Stable)

bramthielemans — Mon, 07 Sep 2009 12:24:39 GMT

Hmm, ok. Upgrading to a newer version is currently not an option since we haven't tested our AMP developments on newer Alfresco versions.

I guess we'll try to set up CIFS then. I'll let you know if it worked out or not

Thanks

Bram

Re: Kerberos configuration problem (Labs 3Stable)

bramthielemans — Wed, 23 Sep 2009 13:15:38 GMT

We've successfully set up Kerberos SSO

Turning on CIFS did indeed solve the problem. Thanks for this, dward.