topic Re: TCP-IP SMB session handler, Permission denied in Alfresco Archive

TCP-IP SMB session handler, Permission denied

tctim — Wed, 30 Dec 2009 17:21:12 GMT

I have this error that I don't know to resolve - my thought is I need to change a configuration file somewhere but I don't have a clue which one it is…12:08:13,808 ERROR [org.alfresco.fileserver] [SMB] Server error : org.alfresco.jlan.server.config.InvalidConfigurationException: Error initializing T

Re: TCP-IP SMB session handler, Permission denied

jsosic — Sun, 18 Jul 2010 20:29:20 GMT

I have the exact same problem…

AFAIK, file is "tomcat5/shared/classes/alfresco-global.properties". I have this regarding CIFS:


# CIFS configuration
#
cifs.enabled=true
cifs.serverName=alfrescohost
cifs.hostannounce=true
cifs.urlfile.prefix=http://alfrescohost:8080/alfresco
‍‍‍‍‍‍‍‍

I don't know if this is enough….

Can anybody help?

Re: TCP-IP SMB session handler, Permission denied

jsosic — Mon, 09 Aug 2010 13:33:18 GMT

BUMP BUMP

I still have the same problem and can't figure it out I've tried changing ports to 10445 but no help

Re: TCP-IP SMB session handler, Permission denied

jsosic — Mon, 09 Aug 2010 13:58:32 GMT

15:55:39,044  ERROR [org.alfresco.fileserver] [SMB] Server error : org.alfresco.jlan.server.config.InvalidConfigurationException: Error initializing TCP-IP SMB session handler, Permission denied
15:55:39,045  ERROR [org.alfresco.fileserver] org.alfresco.jlan.server.config.InvalidConfigurationException: Error initializing TCP-IP SMB session handler, Permission denied
15:55:39,045  ERROR [org.alfresco.fileserver]   at org.alfresco.jlan.smb.server.nio.NIOCifsConnectionsHandler.initializeHandler(NIOCifsConnectionsHandler.java:259)
15:55:39,045  ERROR [org.alfresco.fileserver]   at org.alfresco.jlan.smb.server.SMBServer.run(SMBServer.java:472)
15:55:39,045  ERROR [org.alfresco.fileserver]   at java.lang.Thread.run(Thread.java:619)‍‍‍‍‍

Re: TCP-IP SMB session handler, Permission denied

mrogers — Mon, 09 Aug 2010 14:02:55 GMT

I've tried changing ports to 10445 but no help

What does that mean? What "ports".

What version or alfresco are you using. What OS. What AS. What user are you trying to run alfresco as?

And please do not hijack or bump postings.

Re: TCP-IP SMB session handler, Permission denied

jsosic — Mon, 09 Aug 2010 14:16:48 GMT

Alfresco and Java versions

16:07:08,969  INFO  [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_21-b06; maximum heap size 1979.750MB
16:07:08,970  INFO  [service.descriptor.DescriptorService] Alfresco started (Community): Current version 3.3.0 (2765) schema 4009 - Originally installed version 3.3.0 (2765) schema 4009‍‍

I'm running it under Tomca5, on CentOS v5.5:

# cat /etc/redhat-release 
CentOS release 5.5 (Final)

# rpm -qa | grep tomcat
tomcat-native-1.1.18-1.el5
tomcat5-servlet-2.4-api-5.5.23-0jpp.7.el5_3.2
tomcat5-jasper-5.5.23-0jpp.7.el5_3.2
tomcat5-jsp-2.0-api-5.5.23-0jpp.7.el5_3.2
tomcat5-server-lib-5.5.23-0jpp.7.el5_3.2
tomcat5-common-lib-5.5.23-0jpp.7.el5_3.2
jakarta-commons-collections-tomcat5-3.2-2jpp.3
tomcat5-5.5.23-0jpp.7.el5_3.2‍‍‍‍‍‍‍‍‍‍‍‍

Tomcat is run under user "tomcat".

Ports changed means:

# egrep "tcpipSMB|netBIOSSMB" /var/lib/tomcat5/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml
      <tcpipSMB port="10445" ipv6="disabled" platforms="linux,solaris,macosx"/>
      <netBIOSSMB sessionPort="10139" namePort="10137" datagramPort="10138" platforms="linux,solaris,macosx"/>‍‍‍

Re: TCP-IP SMB session handler, Permission denied

jsosic — Mon, 09 Aug 2010 14:23:05 GMT

PS. Sorry for bumping, and i didn't hijack the thread, because I have the exact same issue as the first poster…

Re: TCP-IP SMB session handler, Permission denied

mrogers — Mon, 09 Aug 2010 14:33:20 GMT

O.K. So your problem is related to trying to run alfresco on unix with an account that does not have permissions for the reserved TCP ports. I'm sure that topic has already been covered in these forums.

I do note that 3.3 is not configured through the file-servers.xml file, And you should never change files under WEB-INF.

Instead you should be setting cifs.tcpipSMB.port in your alfresco-global.properties file.

Re: TCP-IP SMB session handler, Permission denied

jsosic — Mon, 09 Aug 2010 15:17:46 GMT

I know, but when I changed ports to 10xxx, same error appears again.

Maybe it has to do something with this:

16:27:33,787  DEBUG [smb.protocol.auth] Protocol order primary=TCP/IP NetBIOS, secondary=Native SMB (port 445)
16:27:33,790  DEBUG [smb.protocol.auth] Using offline check interval of 300 seconds
16:27:33,794  DEBUG [org.alfresco.fileserver] Added passthru server [server1.company.local:192.168.1.1:Offline:0,0]
16:27:33,795  DEBUG [org.alfresco.fileserver] Added passthru server [COMPANY.LOCAL\server1:192.168.1.1:Offline:0,0]
16:27:33,795  DEBUG [org.alfresco.fileserver] Added passthru server [server1:192.168.1.1:Offline:0,0]
16:27:33,954  DEBUG [org.alfresco.fileserver] Passthru server online, [server1.company.local:192.168.1.1:Online:0,0]
16:27:34,052  DEBUG [org.alfresco.fileserver] Found browse master at 192.168.1.1
16:27:34,076  DEBUG [org.alfresco.fileserver] Passthru server online, [COMPANY.LOCAL\server1:192.168.1.1:Online:0,0]
16:27:34,957  DEBUG [org.alfresco.fileserver] Passthru offline check failed for server1
16:32:35,058  DEBUG [org.alfresco.fileserver] Passthru server online, [server1:192.168.1.1:Online:0,0]
16:33:10,120  DEBUG [org.alfresco.fileserver] Open authenticate session to [COMPANY.LOCAL\server1:192.168.1.1:Online:0,0]‍‍‍‍‍‍‍‍‍‍‍

Re: TCP-IP SMB session handler, Permission denied

jsosic — Tue, 10 Aug 2010 11:55:02 GMT

Hi again I guess you hate me by now…

I've managed to configure the CIFS, by setting the following in alfresco-global.properties:

#
# CIFS configuration
#
cifs.enabled=true
cifs.ipv6=disabled
cifs.serverName=alfresco-vm
cifs.domain=COMPANY.LOCAL
cifs.hostannounce=true
cifs.urlfile.prefix=http://alfresco-vm:8080/alfresco
cifs.bindto=0.0.0.0
cifs.broadcast=255.255.255.255
cifs.hostannounce=true
cifs.tcpipSMB.port=10445
cifs.netBIOSSMB.sessionPort=10139
cifs.netBIOSSMB.namePort=10137
cifs.netBIOSSMB.datagramPort=10138
cifs.platforms=linux,solaris,macosx
cifs.WINS.autoDetectEnabled=true‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Alfresco starts without errors, but after I try to navigate to \\alfresco-vm\ in windows explorer, and enter domain password, I'm reject with this in log:

13:16:09,001 DEBUG [org.alfresco.smb.protocol.auth] Closed auth session, sessId=20
13:16:13,755 DEBUG [org.alfresco.smb.protocol.auth] Mapped client /192.168.1.1 to domain null
13:16:13,755 DEBUG [org.alfresco.fileserver] Open authenticate session to [server1.company.local:192.168.1.1:Online:5,Tue Aug 10 13:15:58 CEST 2010]
13:16:13,861 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=21, auth ctx=[NTLM,Challenge=e6292d1b347994ae]
13:16:13,864 DEBUG [org.alfresco.smb.protocol.auth] Null CIFS logon allowed, sess = T16‍‍‍‍‍

Any ideas?

Re: TCP-IP SMB session handler, Permission denied

jsosic — Tue, 10 Aug 2010 12:54:07 GMT

OK, I've found some threads, so I created a file /var/lib/tomcat5/shared/classes/alfresco/extension/file-servers-custom.xml and added the following in it:

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>

   <!– section added by jsosic –>
   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
      <!– Domain mappings used for passthru authentication routing              –>
      <!– Used when the client does not provide a domain name in the NTLM logon –>
      <DomainMappings>
          <Domain name="COMPANY.LOCAL" subnet="192.168.1.0" mask="192.168.1.255"/>
      </DomainMappings>

      <!– Custom share mapper when multi-tenancy is enabled –>
      <!–
      <shareMapper type="multi-tenant">
        <debug/>
      </shareMapper>
      –>

      <!– Global access control list                                                                    –>
      <!– Applied to all filesystems that do not have an <accessControl> block                          –>
      <!– Access type of 'none' will stop the filesystem from showing up for that user/address/protocol –>
      <!–
      <globalAccessControl default="None">
         <user name="admin" access="Write"/>
         <address ip="192.168.1.2" access="Write"/>
      </globalAccessControl>
      –>
   </config>
</alfresco-config>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Still it didn't help

Re: TCP-IP SMB session handler, Permission denied

jsosic — Tue, 10 Aug 2010 13:52:04 GMT

It seems that problem is only with DC (domain controller). Accessing it from workstation works OK.

I guess this thread is SOLVED Thank you for your assistance!

Re: TCP-IP SMB session handler, Permission denied

gawabe — Thu, 21 Oct 2010 10:06:39 GMT

Hi…
I am using alfresco 3.3g community edition and trying to enable CIFS shared drive. I am working in linux environment and I had already configured my alfresco with ldap active directory.

I updated the following properties in alfresco-global.properties file

cifs.enabled=true
cifs.ipv6=disabled
cifs.disableNativeCode=false
cifs.serverName=${localname}A
cifs.urlfile.prefix=http://mySystemName:8080/alfresco
cifs.domain=
cifs.broadcast= (subnet mask address)
cifs.bindto= {my system IP address}
cifs.hostannounce=true
cifs.ipv6.enabled=false
cifs.sessionTimeout=900
cifs.tcpipSMB.port=1445
cifs.netBIOSSMB.namePort=1137
cifs.netBIOSSMB.datagramPort=1138
cifs.netBIOSSMB.sessionPort=1139
cifs.platforms=linux,solaris,macosx
cifs.WINS.autoDetectEnabled=true‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Enabled Port forwarding (1137, 1138, 1139 and 1445) and added the ports (445, 137, 138, 139) in my firewall.
For CIFS server debugging

log4j.logger.org.alfresco.smb.protocol=debug
log4j.logger.org.alfresco.smb.protocol.auth=debug
log4j.logger.org.alfresco.acegi=debug‍‍‍

Restarted my tomcat and Still cant able to access my alfresco shared drive.
I am getting the following message in tomcat log:

DEBUG [smb.protocol.auth] Protocol order primary=TCP/IP NetBIOS, secondary=Native SMB (port 445)
DEBUG [smb.protocol.auth] Using offline check interval of 300 seconds
‍‍‍

Can anyone say the reason for this message and do I need to configure anything more to have CIFS enabled?

Re: TCP-IP SMB session handler, Permission denied

hfunes — Wed, 10 Dec 2014 11:31:50 GMT

Hi! I'm having the same problem with Centos 7 and Alfresco 5 ¿Could anybody solve this?
Best regards!
Hernán