topic Re: How to force Alfresco to use SPNEGO? (no Kerberos involved) in Alfresco Archive

How to force Alfresco to use SPNEGO? (no Kerberos involved)

nicolasraoul — Thu, 05 Nov 2009 08:51:10 GMT

Hello all,How can I force Alfresco to use SPNEGO?I use Alfresco Enterprise 3.1 with its default <authenticator type="enterprise"/>Wireshark shows that all SMB packets (from client and from server) contain a "Security blob" that contains an "NTLMSSP" block of data.I have never managed to see an

Re: How to force Alfresco to use SPNEGO? (no Kerberos involved)

nicolasraoul — Fri, 06 Nov 2009 06:12:57 GMT

In EnterpriseCifsAuthenticator.java I have found what a piece of code that suggests there is such a possibility:


// Check if raw NTLMSSP or SPNEGO/NTLMSSP should be used
ConfigElement useSpnego = params.getChild("useSPNEGO");
if ( useSpnego != null) {
‍‍‍‍‍

But a Google search for Alfresco useSpnego only returns this source file… does not look like a popular configuration element!
If anyone has more information, it would be greatly appreciated 🙂

Cheers,
Nicolas Raoul

Re: How to force Alfresco to use SPNEGO? (no Kerberos involved)

nicolasraoul — Fri, 06 Nov 2009 09:12:18 GMT

For anyone who would need it, here is how to force Alfreco to use SPNEGO:


<authenticator type="enterprise">
          <useSPNEGO/>
</authenticator>
‍‍‍‍‍

Hope this helps someone in the future,
Nicolas Raoul.