topic Re: Alfresco + LDAP failing to open with SSO in Alfresco Archive

Alfresco + LDAP failing to open with SSO

alejandrosl — Thu, 06 May 2010 09:23:16 GMT

Hello,I'm trying to setup Alfresco 3.3 CE (on Windows XP) in order to connect to a LDAP server (Active Directory) and allow the users to log in using passthru, that is, with the same username and password they have used to log in on Windows, not having to type them again on their browsers. In Firefo

Re: Alfresco + LDAP failing to open with SSO

alejandrosl — Thu, 06 May 2010 14:09:49 GMT

Well, I've got some improvements but it doesn't perform SSO at all. On alfresco-global.properties I've set:

authentication.chain=passthru1:passthru

passthru.authentication.servers=xx.xx.xx.xx,MYDOMAIN\\myserver,myserver

ldap.authentication.userNameFormat=%s

ldap.authentication.java.naming.security.principal=myprincipal

ldap.synchronization.java.naming.security.principal=MYDOMAIN\\myprincipal
‍‍‍‍‍‍‍‍‍‍

The rest of that file remains the same. Now I get this output in alfresco.log when opening a browser and trying to access to Alfresco Explorer:

14:50:32,090 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 127.0.0.1 (127.0.0.1:1183) SID:C6A349B892D4200CAE444773526874C5
14:50:32,105 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0xa208b207,Domain:INERZA,Wks:IZ-10023]
14:50:32,105 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Client domain INERZA
14:50:33,075 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcservice/api/search/keyword/description.xml SID:null
14:50:33,075 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
14:50:33,075 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …‍‍‍‍‍‍

If I set

ntlm.authentication.sso.enabled=false‍

then Alfresco asks me for username and password, and it's possible to login with any user from the AD, but I would like SSO to be working properly. Any idea?

Re: Alfresco + LDAP failing to open with SSO

alejandrosl — Fri, 07 May 2010 14:11:43 GMT

Well, switching the authentication chain to

authentication.chain=ldap1:ldap,passthru1:passthru‍

also

ntlm.authentication.sso.enabled=false‍

and other minor changes I've managed to login with any user from the LDAP server (Alfresco has properly imported users and groups), but obviously without SSO, e.g, typing username and password on the browser. If I try to enable the SSO (as I would like), I get the error described on the first message of this thread. Anyone knows why?

Re: Alfresco + LDAP failing to open with SSO

mannobug — Tue, 08 Jun 2010 15:16:50 GMT

Hi I'm in the same situoation of your configuration do you solve the problem or you still sync ldap without SSO?
Thanks.
Emmanuele

Re: Alfresco + LDAP failing to open with SSO

alejandrosl — Wed, 09 Jun 2010 08:01:13 GMT

Hi Emmanuele,

unfortunately I still haven't solved the problem. Please let me know if you find out something. Thanks.

Re: Alfresco + LDAP failing to open with SSO

zapatdlo — Tue, 22 Jun 2010 12:59:53 GMT

Hi,

I'm facing the same problem, did someone found solution?
I tried on Alfresco community versions - 3.2r, 3.3, 3.3g.

The only solutions is - turn off SSO and use default login

Re: Alfresco + LDAP failing to open with SSO

tverin — Mon, 30 Aug 2010 13:05:40 GMT

try moving your AD configuration in a subsystem like
tomcat/shared/classes/alfresco/extension/subsystems/Authentication/passthru/passthru1/passthru.properties