topic Re: Configuring SharePoint Protocol in Alfresco Archive

Configuring SharePoint Protocol

gmurphy — Mon, 13 Jul 2009 15:20:28 GMT

All,I am fairly new to Alfresco and am trying to configure the Alfresco Protocol to work with Office 2007.I have configured the custom.vti.properties file to say the following after installing the vti amp:vti.server.port=7070vti.alfresco.deployment.context=http://25.165.1.148:7070/alfrescovti.share.

Re: Configuring SharePoint Protocol

gronfelt — Tue, 14 Jul 2009 07:15:10 GMT

You don't state which Alfresco version you are using, but in Alfresco 3.2 the configuration should be something like this:

vti.server.port=7070 
vti.alfresco.deployment.context=/alfresco 
vti.alfresco.alfresoHostWithPort=http://your-host:8080 
vti.share.shareHostWithPort=http://your-share-host:8080 ‍‍‍‍

(Sample taken from install and config documentation)

This configuration should be placed in alfresco-global.properties.

The configuration from 3.0/3.1 looked pretty much the same, but without the vti.alfresco.alfresoHostWithPort property:

vti.server.port=7070 
vti.alfresco.deployment.context=/alfresco 
vti.share.shareHostWithPort=http://your-share-host:8080‍‍‍

It should be in the file custom-vti.properties (not sure if the . between "custom" and "vti" in your filename was a typo).

Edit: Sorry, missed out on the version info in your profile, just ignore the first part of this post.

Where have you placed the custom-vti.properties file? Are there any error messages in alfresco.log or catalina.out?

Re: Configuring SharePoint Protocol

gmurphy — Tue, 14 Jul 2009 15:17:42 GMT

Thanks for that.

I have made some progress but am now getting 2 popup windows when I click the create button in Office 2007. After typeing in AlfrescoUpdatedocs in the Document Workspace name: and Location For new Workspace is set to http://25.165.1.148:7070/alfresco In Office 2007

1. The 1st popup window asks me for my username and password.

2. The 2nd popup windows gives the message

Saving as:

'HTTP://25.165.1.148:7070/alfrescp/AlfrescoUpdatedocs/documentLibrary/Gerald.docx'

and the progress bar never goes beyond 0%

When I type in my username and password in the popup window it asks me again for my Username and password until after the 4th or 5th time it gives me the message "Unable to connect to the Web server"

Have you any suggestions or has anyone seen this before.

Re: Configuring SharePoint Protocol

gronfelt — Wed, 15 Jul 2009 07:55:57 GMT

Is there any information in your alfresco.log or catalina.out?

You could turn on more verbose logging in log4j.properties by uncommenting the row about VTI:

# Sharepoint
log4j.logger.org.alfresco.module.vti=debug‍‍

Re: Configuring SharePoint Protocol

mikef — Wed, 15 Jul 2009 22:31:44 GMT

'HTTP://25.165.1.148:7070/alfrescp/AlfrescoUpdatedocs/documentLibrary/Gerald.docx'

In the URL above you have: alfrescp

Is this the actual url or just a typo in your post?

Re: Configuring SharePoint Protocol

gmurphy — Thu, 16 Jul 2009 09:47:13 GMT

Its a Typo Mikef

I have attacted what appears in the Alfreco.log and catalina.out once I try to use the sharepoint protocol. I will switch on the verbose logging and post it shortly

[size=150]Here is what it appearing in the Alfreco.log[/size]

10:28:24,560 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
10:28:24,561 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [gmurph01,Wks:REV-4EEC580480B,Dom:REVENUEDOMAIN,AuthSrv:REVNETDEMOA,Thu Jul 16 10:28:24 IST 2009]
10:28:33,544 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0xa208b207,Domain:REVENUEDOMAIN,Wks:REV-4EEC580480B]
10:28:33,547 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Client domain REVENUEDOMAIN
10:28:33,663 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x80000203,Target:REVNETDEMOA,Ch:8e66b54c75be987e]
10:28:33,676 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:be23d606d78d4417cf076f5ce6332fa53df1fa565af4ec83,NTLM:5db4292ea4590335aa534ae41e049e6bb965b12662cd954f,Dom:REVENUEDOMAIN,User:gmurph01,Wks:REV-4EEC580480B]
10:28:33,704 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
10:28:33,704 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [gmurph01,Wks:REV-4EEC580480B,Dom:REVENUEDOMAIN,AuthSrv:REVNETDEMOA,Thu Jul 16 10:28:33 IST 2009]
10:32:47,398 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/api/login SID:null
10:32:47,403 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:47,404 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:47,963 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/configurations/slingshot.site.configuration.xml SID:null
10:32:47,965 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:47,972 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,185 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/pages/site-index.xml SID:910676874B621200A813666B89E9D0EF
10:32:48,189 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,189 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,264 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/webframework/content/metadata SID:910676874B621200A813666B89E9D0EF
10:32:48,265 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 25.165.1.148 (25.165.1.148:44970) SID:910676874B621200A813666B89E9D0EF
10:32:48,286 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/api/login SID:null
10:32:48,288 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,288 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,443 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/webframework/content/metadata SID:910676874B621200A813666B89E9D0EF
10:32:48,444 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 25.165.1.148 (25.165.1.148:44973) SID:910676874B621200A813666B89E9D0EF
10:32:48,971 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/pages/site/AlfrescoUpdatedocs/dashboard.xml SID:null
10:32:48,978 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,978 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …

[size=150]and in the Catalina.out[/size]

User:gmurph01 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:be23d606d78d4417cf076f5ce6332fa53df1fa565af4ec83,NTLM:5db4292ea4590335aa534ae41e049e6bb965b12662cd954f,Dom:REVENUEDOMAIN,User:gmurph01,Wks:REV-4EEC580480B]
10:28:33,704 User:gmurph01 DEBUG [app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
10:28:33,704 User:gmurph01 DEBUG [app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [gmurph01,Wks:REV-4EEC580480B,Dom:REVENUEDOMAIN,AuthSrv:REVNETDEMOA,Thu Jul 16 10:28:33 IST 2009]
10:32:47,398 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/api/login SID:null
10:32:47,403 DEBUG [app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:47,404 DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:47,963 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/configurations/slingshot.site.configuration.xml SID:null
10:32:47,965 DEBUG [app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:47,972 DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,185 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/pages/site-index.xml SID:910676874B621200A813666B89E9D0EF
10:32:48,189 DEBUG [app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,189 DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,264 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/webframework/content/metadata SID:910676874B621200A813666B89E9D0EF
10:32:48,265 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 25.165.1.148 (25.165.1.148:44970) SID:910676874B621200A813666B89E9D0EF
10:32:48,286 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/api/login SID:null
10:32:48,288 DEBUG [app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,288 DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …
10:32:48,443 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/webframework/content/metadata SID:910676874B621200A813666B89E9D0EF
10:32:48,444 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 25.165.1.148 (25.165.1.148:44973) SID:910676874B621200A813666B89E9D0EF
10:32:48,971 DEBUG [app.servlet.NTLMAuthenticationFilter] Processing request: /alfresco/wcs/remotestore/has/alfresco/site-data/pages/site/AlfrescoUpdatedocs/dashboard.xml SID:null
10:32:48,978 DEBUG [app.servlet.NTLMAuthenticationFilter] Found webscript with no authentication - set NO_AUTH_REQUIRED flag.
10:32:48,978 DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required (filter), chaining …

Re: Configuring SharePoint Protocol

gmurphy — Thu, 16 Jul 2009 11:06:32 GMT

I switched on the verbose logging as you suggested

# Sharepoint
log4j.logger.org.alfresco.module.vti=debug‍‍

below is what I am getting nothing extra other than that.

11:51:25,327 INFO [org.alfresco.repo.admin.patch.PatchExecuter] No patches were required.
11:51:25,340 INFO [org.alfresco.repo.module.ModuleServiceImpl] Found 1 module(s).
11:51:25,795 INFO [org.alfresco.repo.module.ModuleServiceImpl] Starting module 'org.alfresco.module.vti' version 1.1.
11:51:27,603 DEBUG [org.alfresco.fileserver] [SMB] CIFS Server REVNETDEMOA starting

Re: Configuring SharePoint Protocol

_sax — Thu, 16 Jul 2009 14:03:25 GMT

The same with me:

15:45:09,875 DEBUG [org.alfresco.module.vti.web.VtiFilter] Checking request for VTI or not
15:45:09,875 DEBUG [org.alfresco.module.vti.web.VtiFilter] Check authentication
15:45:09,875 DEBUG [org.alfresco.module.vti.web.VtiFilter] Session user is null. Authenticate user.

After manual login I'm also prompted for my credentials again, making the log repeat itself.

I use ntlm sso for my ldap-ad synced users (works well with Internet Explorer and CIFS).

Re: Configuring SharePoint Protocol

_sax — Fri, 17 Jul 2009 08:11:24 GMT

Is this linked with https://issues.alfresco.com/jira/browse/ALFCOM-1858, which I don't exactly understand.
"Shared Workspace functionality shouldn't work with Alfresco Labs." Is this added now, or is this still the same?

Re: Configuring SharePoint Protocol

_sax — Fri, 17 Jul 2009 09:29:12 GMT

My problem turned out to be an authentication related-one. To be able to sign on, I had to use alfrescoNtlm as the subsystem.

authentication.chain=localusers:alfrescoNtlm

As I add other subsystems, I am not able to login, although alfrescoNtlm stays the preceeding one.

(config of alfrescoNtlm)
alfresco.authentication.allowGuestLogin=true
alfresco.authentication.authenticateCIFS=false

ntlm.authentication.sso.enabled=false
ntlm.authentication.mapUnknownUserToGuest=true

Is this normal?

Re: Configuring SharePoint Protocol

dward — Fri, 17 Jul 2009 10:38:32 GMT

The alfrescoNtlm and passthru subsystems support NTLM-based authentication for the Sharepoint protocol. I.e. this means your operating system credentials would be propagated to Alfresco without a login prompt. NTLM-based SSO can only be handled by a single subsystem in your authentication chain (due to limitations of the protocol), i.e. the first one with SSO enabled.

By default, alfrescoNtlm has SSO disabled. To switch it on you would add.

ntlm.authentication.sso.enabled=true

This would mean that all authentication with Alfresco (including sharepoint protocol) uses NTLM rather than username/password.

By default, passthru has SSO enabled. So if you include that in your chain then all SSO traffic would be handled by the domain server.

I hope that makes sense. You basically have to decide whether you want password-based login (in which case you can use any user account from any subsystem in your chain) or NTLM-based SSO (in which case only users with domain accounts will be able to sign in).

Re: Configuring SharePoint Protocol

_sax — Fri, 17 Jul 2009 13:56:19 GMT

Thank you!
I originally had a test upgrade from 2.9b with ldap-synced users. Maybe that imposed a problem.
Now, after a reset and a new importation of users, I'm able to sign on as admin and with the credentials of an imported user.

authentication.chain=userauthentificationassthru,ldapsync:ldap-ad

But as soon, as I switch on sso in passthru, I cannot authenticate anymore via SPP. I can still autosignon via browser and CIFS, but SPP is not accepting anything: neither the admin, nor my user credentials.

15:55:49,050 DEBUG [org.alfresco.module.vti.web.VtiFilter] Checking request for VTI or not
15:55:49,051 DEBUG [org.alfresco.module.vti.web.VtiFilter] Return VTI answer for HEAD request
15:55:49,051 DEBUG [org.alfresco.module.vti.web.VtiFilter] Check authentication
15:55:49,051 DEBUG [org.alfresco.module.vti.web.VtiFilter] Session user is null. Authenticate user.

ldap-auth is disabled,
ldap.authentication.active=false
because I'm only using it for importing user data.

So I'm a bit uncertain about the source of that problem.

Re: Configuring SharePoint Protocol

dward — Fri, 17 Jul 2009 14:29:22 GMT

Please log a JIRA issue. This needs investigating.

Re: Configuring SharePoint Protocol

_sax — Mon, 20 Jul 2009 10:43:58 GMT

I unwillingly overlooked http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM#Alfresco_Share_SSO_using_NTLM which provides steps to enable SSO for Share. But taking those doesn't make a difference for me, so I filed an issue.
https://issues.alfresco.com/jira/browse/ALFCOM-3234

Re: Configuring SharePoint Protocol

dward — Mon, 20 Jul 2009 12:38:59 GMT

You were right to overlook that article. It begins with the text

Please Note: This article describes configuration methods now outdated in the Alfresco version 3.2 release. For a more up to date description, refer to Alfresco Authentication Subsystems.

You shouldn't have to do anything fancy to turn on NTLM anymore besides using passthru or alfrescoNtlm and setting the sso flag to true.

I have logged this JIRA on your behalf

https://issues.alfresco.com/jira/browse/ETHREEOH-2534

Re: Configuring SharePoint Protocol

_sax — Mon, 20 Jul 2009 12:51:57 GMT

Thank you, so I double-overlooked this config page!
(Seems, like it could be confusing to still have those options in. Are there other points of usage for them?)

Since I also logged an issue, I connected mine with yours, again thanks for making it a blocker.
https://issues.alfresco.com/jira/browse/ETHREEOH-2534
https://issues.alfresco.com/jira/browse/ALFCOM-3234

Re: Configuring SharePoint Protocol

dward — Wed, 29 Jul 2009 14:40:59 GMT

FYI experimental support for SPP + passthru has been checked in to HEAD. You will need to build from SVN if you want to try this. See http://wiki.alfresco.com/wiki/Development_Environment

Re: Configuring SharePoint Protocol

_sax — Thu, 30 Jul 2009 13:43:41 GMT

This is excellent, thank you for the information!

Regarding the JIRA database, is there a timeframe set, that 3.3 will be released in?
https://issues.alfresco.com/jira/secure/IssueNavigator.jspa?reset=true&mode=hide&sorter/order=DESC&sorter/field=priority&resolution=-1&pid=10103&fixfor=10551

Right now, the're pending issues for 3.2 listed, may that simply be a due cleanup?
https://issues.alfresco.com/jira/secure/IssueNavigator.jspa?reset=true&mode=hide&sorter/order=DESC&sorter/field=priority&resolution=-1&pid=10103&fixfor=10480

Re: Configuring SharePoint Protocol

mikeh — Mon, 03 Aug 2009 15:35:05 GMT

A lot of the "fix for 3.2" issues will be considered and the fixed for 3.2 Enterprise (which isn't released yet). They'll then be merged to HEAD and so become available in Community 3.3.

There's no release date for v3.3 yet, as we're still finalising requirements.

Thanks,
Mike

Re: Configuring SharePoint Protocol

_sax — Tue, 04 Aug 2009 10:20:47 GMT

Since they are tagged for Community 3.2, I was a little mislead (https://issues.alfresco.com/jira/secure/IssueNavigator.jspa?reset=true&pid=10103&status=1&fixfor=10480). But thanks a lot for the clarification!