topic Re: passthru to samba for authentication in Alfresco Archive

passthru to samba for authentication

iantopanto — Fri, 14 Aug 2009 07:43:39 GMT

I got alfresco to sync to ldap and do passthru authentication to samba, the issue im having is with the web interface where if I navigate to http://server:8080/alfresco i get an apache authentication popup asking for a username and password. I just want the standard the alfresco login box.If i navi

Re: passthru to samba for authentication

dward — Fri, 14 Aug 2009 10:46:56 GMT

I tried reproducing this problem with a v3.2 install and couldn't.

I have

authentication.chain=passthru1assthru,alfresco:ldap-ad
ntlm.authentication.sso.enabled=false

and I get the login screen when I go to http://localhost:8080/alfresco

Are you using a vanilla Tomcat 6 install? Is Apache HTTP server sitting in front of it and how is that configured?

Re: passthru to samba for authentication

ivan_plestina — Fri, 14 Aug 2009 11:53:11 GMT

I believe Firefox remembers NTLM login once you login manually and you basically can't log out. Not sure about IE though.

Re: passthru to samba for authentication

iantopanto — Mon, 17 Aug 2009 08:58:31 GMT

fixed it now…..Ldap sync and passthru auth is working…

I had to install alfresco 3.3 to get the ldap sync working (build from Aug 11th), and the passthru is fine, it may have been some settings I changed.
Here is the updated part of the alfresco-globals.properties
—————–
authentication.chain=passthru1assthru,ldap1:ldap
cifs.domain=WALES

# Configure NTLM passthru to SAMBA Server
ntlm.authentication.sso.enabled=false
ntlm.authentication.authenticateCIFS=false
passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=true
#alfresco.authentication.allowGuestLogin=true
#alfresco.authentication.authenticateCIFS=false

passthru.authentication.servers=192.168.0.1
passthru.authentication.domain=WALES
passthru.authentication.useLocalServer=false
passthru.authentication.defaultAdministratorUserNames=adminusers
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=TCPIP,NETBIOS
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
#ntlm.authentication.sso.enabled=true
#ntlm.authentication.mapUnknownUserToGuest=false

##### Ldap Synchronisation
———-
hope this helps someone. Alfresco is working great now except for the dot files with os x clients using cifs and webdav. This can be overcome with using Blueharvest shareware to stop os x writing .DS_STORE and resource fork files to network drives.

The only issue I found is that if i create a content rule that emails certain people when a file is updated or uploaded because the mac uses a resource fork and a data fork that's 2 files. Eventhough the Blueharvest stops the dot files from being left on the alfresco drive, i think they are written there and then deleted because I still get 2 emails through. anyway.

Re: passthru to samba for authentication

brazen — Tue, 17 Aug 2010 01:29:17 GMT

FYI, ntlm.authentication.authenticateCIFS and passthru.authentication.sso.enabled are not valid settings. They are just garbage in your properties file. All you need is ntlm.authentication.sso.enabled=false to fix your problem.