CIFS doesn't work with KERBEROS

urban — Tue, 20 Oct 2009 10:34:32 GMT

Hi, I have installed Alfresco community version 3.2.0 schema 2019 and I have configured kerberos against active directory like http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems, http authentication works fine but cifs authentication doesn't work this is my alfresco.log:11:52:30,419 IN

Re: CIFS doesn't work with KERBEROS

tonyc — Tue, 20 Oct 2009 16:54:48 GMT

11:53:42,416 ERROR [org.alfresco.fileserver] Failed to get local domain/workgroup name, using default of WORKGROUP

Try configuring your domain/workgroup in <tomcat_home>/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/fileServers/default/file-servers.properties

Re: CIFS doesn't work with KERBEROS

giovibal — Wed, 21 Oct 2009 09:14:08 GMT

Try this in <tomcat_home>/shared/classes/alfresco-global.propeties:

cifs.enabled=true
cifs.domain=<NETBIOS_DOMAINNAME>

Re: CIFS doesn't work with KERBEROS

urban — Wed, 21 Oct 2009 16:32:33 GMT

Thanks for yours replies, this is my alfresco-global.properties:

ooo.exe=/usr/bin/soffice

img.root=/usr

swf.exe=/usr/bin/alfresco-pdf2swf



#

# MySQL connection

#————-

db.driver=org.gjt.mm.mysql.Driver

db.url=jdbc:mysql://${db.host}:${db.port}/${db.name}

hibernate.dialect=org.hibernate.dialect.MySQLInnoDBDialect



#

# Index Recovery Mode

#————-

#index.recovery.mode=Auto



#

# Outbound Email Configuration

#————-

#mail.host=

#mail.port=25

#mail.username=anonymous

#mail.password=

#mail.encoding=UTF-8

#mail.from.default=alfresco@alfresco.org

#mail.smtp.auth=false



#

# Alfresco Email Service and Email Server

#————-



# Enable/Disable the inbound email service.  The service could be used by processes other than

# the Email Server (e.g. direct RMI access) so this flag is independent of the Email Service.

#————-

#email.inbound.enabled=true



# Email Server properties 

#————-

#email.server.enabled=true

#email.server.port=25

#email.server.domain=alfresco.com

#email.inbound.unknownUser=anonymous



# A comma separated list of email REGEX patterns of allowed senders.

# If there are any values in the list then all sender email addresses

# must match.  For example:

#   .*\@alfresco\.com, .*\@alfresco\.org

# Allow anyone:

#————-

#email.server.allowed.senders=.*



#

# The default authentication chain

# To configure external authentication subsystems see:

# http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems

#————-

#authentication.chain=alfrescoNtlm1:alfrescoNtlm

authentication.chain=kerberos1:kerberos

alfresco.authentication.allowGuestLogin=false


#

# IMAP

#————-

#imap.server.enabled=true

#imap.server.port=143

#imap.server.host=localhost

#

# CIFS

#————-
cifs.enabled=true
cifs.serverName=alfresco
cifs.domain=
cifs.tcpipSMB.port=1445
cifs.netBIOSSMB.namePort=1137
cifs.netBIOSSMB.datagramPort=1138
cifs.netBIOSSMB.sessionPort=1139

#

# KERBEROS

#————
kerberos.authentication.realm=ALFRESCO.ORG

kerberos.authentication.user.configEntryName=Alfresco

kerberos.authentication.defaultAdministratorUserNames=usuario1

kerberos.authentication.cifs.configEntryName=AlfrescoCIFS

kerberos.authentication.cifs.password=secret
kerberos.authentication.authenticateCIFS=true
kerberos.authentication.http.configEntryName=AlfrescoHTTP

kerberos.authentication.http.password=secret
kerberos.authentication.sso.enabled=false‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Before i used kerberos, cifs worked fine but when i configured kerberos it doesn't work, it's necessary to modify file-servers.xml?
thanks a lot!

Re: CIFS doesn't work with KERBEROS

tonyc — Wed, 21 Oct 2009 16:53:12 GMT

In alfresco-global.properties set:

cifs.domain= <the name of your domain or workgroup>

topic Re: CIFS doesn't work with KERBEROS in Alfresco Archive

CIFS doesn't work with KERBEROS

Re: CIFS doesn't work with KERBEROS

Re: CIFS doesn't work with KERBEROS

Re: CIFS doesn't work with KERBEROS

Re: CIFS doesn't work with KERBEROS