topic PersonService can't create a user when authenticating SSO in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/personservice-can-t-create-a-user-when-authenticating-sso/m-p/222204#M175334 <HTML><HEAD></HEAD><BODY><SPAN>Hello</SPAN><BR /><BR /><SPAN>I've configured my Alfresco Server for Kerberos SSO integration against Active Directory, the server runs normaly, all SPN's authenticates fine against A.D. but when i try to authenticate my user Alfresco shows the authentication page and prints the following exception:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />16:49:08,899&nbsp; DEBUG [web.custom.KerberosAuthenticationFilterCustom] Kerberos logon error<BR />org.alfresco.service.cmr.security.NoSuchPersonException: User does not exist and could not be created: RogerioP<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:266)<BR />&nbsp;&nbsp;&nbsp;at com.hexatek.web.custom.BaseSSOAuthenticationFilterCustom.createUserEnvironment(BaseSSOAuthenticationFilterCustom.java:285)<BR />&nbsp;&nbsp;&nbsp;at com.hexatek.web.custom.BaseKerberosAuthenticationFilterCustom.doKerberosLogon(BaseKerberosAuthenticationFilterCustom.java:553)<BR />&nbsp;&nbsp;&nbsp;at com.hexatek.web.custom.BaseKerberosAuthenticationFilterCustom.doFilter(BaseKerberosAuthenticationFilterCustom.java:428)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)<BR />&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Unknown Source) <BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I debugged the method getPerson from the code PersonServiceImpl (PersonServiceImpl.java:266) and i finded out that if the user doesn't exists and the createMissingPeople() is false, the user won't be created. So the error is not that but in method </SPAN><EM>AlfrescoTransactionSupport.getTransactionReadState()</EM><SPAN> that alway returns TXN_READ_ONLY and gets to fail the statement: </SPAN><EM>txnReadState == TxnReadState.TXN_READ_WRITE</EM><SPAN>. Look the code bellow:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />&nbsp;&nbsp;&nbsp; public NodeRef getPerson(String userName)<BR />&nbsp;&nbsp;&nbsp; {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NodeRef personNode = getPersonOrNull(userName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if (personNode == null)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TxnReadState txnReadState = AlfrescoTransactionSupport.getTransactionReadState(); // Returns always TXN_READ_ONLY<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; if (createMissingPeople() &amp;&amp; txnReadState == TxnReadState.TXN_READ_WRITE)<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; // We create missing people AND are in a read-write txn<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return createMissingPerson(userName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; else<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; throw new NoSuchPersonException(userName);<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; else<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; return personNode;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<BR />&nbsp;&nbsp;&nbsp; }<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>Anybody has any ideia what is happening to this code? How can i change to&nbsp; </SPAN><EM>AlfrescoTransactionSupport.getTransactionReadState()</EM><SPAN> returns the </SPAN><EM>TXN_READ_WRITE</EM><SPAN> value?&nbsp; :x </SPAN><BR /><BR /><SPAN>Thanks</SPAN></BODY></HTML> Thu, 22 Oct 2009 15:11:45 GMT rpinheiro 2009-10-22T15:11:45Z PersonService can't create a user when authenticating SSO https://connect.hyland.com/t5/alfresco-archive/personservice-can-t-create-a-user-when-authenticating-sso/m-p/222204#M175334 HelloI've configured my Alfresco Server for Kerberos SSO integration against Active Directory, the server runs normaly, all SPN's authenticates fine against A.D. but when i try to authenticate my user Alfresco shows the authentication page and prints the following exception:16:49:08,899&nbsp; DEBUG [web. Thu, 22 Oct 2009 15:11:45 GMT https://connect.hyland.com/t5/alfresco-archive/personservice-can-t-create-a-user-when-authenticating-sso/m-p/222204#M175334 rpinheiro 2009-10-22T15:11:45Z Re: PersonService can't create a user when authenticating SSO https://connect.hyland.com/t5/alfresco-archive/personservice-can-t-create-a-user-when-authenticating-sso/m-p/222205#M175335 <HTML><HEAD></HEAD><BODY><SPAN>Ok, I see what was wrong. The Alfresco license was expired, i've changed it and now it works fine. Thanks anyway!&nbsp; <img id="smileyvery-happy" class="emoticon emoticon-smileyvery-happy" src="https://connect.hyland.com/i/smilies/16x16_smiley-very-happy.png" alt="Smiley Very Happy" title="Smiley Very Happy" /></SPAN></BODY></HTML> Fri, 23 Oct 2009 13:11:29 GMT https://connect.hyland.com/t5/alfresco-archive/personservice-can-t-create-a-user-when-authenticating-sso/m-p/222205#M175335 rpinheiro 2009-10-23T13:11:29Z