topic Urgent LDAP CIFS Aunthentification in Alfresco Archive

Urgent LDAP CIFS Aunthentification

fedoratori — Mon, 26 Jul 2010 14:19:53 GMT

hello, i read all the messages talking about cifs ldap authentication i have tried using the passthru authenticator this my passthru properties# Configure NTLM passthru to SAMBA Serverpassthru.authentication.sso.enabled=falsepassthru.authentication.allowGuestLogin=truepassthru.authentication.useLoca

Re: Urgent LDAP CIFS Aunthentification

dward — Mon, 26 Jul 2010 17:53:07 GMT

Please read

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Domain_level_properties

You can only set one of these properties. The other two should be blank or false. Most probably you want this

passthru.authentication.useLocalServer=true
passthru.authentication.servers=
passthru.authentication.domain=

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Mon, 26 Jul 2010 18:00:52 GMT

thank you for the reply but when i set the server and the domain properties blank i have an error


17:57:48,337 ERROR [org.alfresco.fileserver] CIFS server configuration error, Error creating bean with name 'globalAuthenticationFilter' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/ntlm-filter-context.xml]: Cannot resolve reference to bean 'AuthenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 06260001 No valid authentication servers found for passthru

‍‍‍‍

i dont know if the localhost is not the passthru server or not can you tell me what address take the passthru server

Re: Urgent LDAP CIFS Aunthentification

dward — Mon, 26 Jul 2010 18:27:55 GMT

It looks like there may be a bug with the local server IP address detection when all the local server addresses are loopback addresses (perhaps when disconnected from the network?)

Try this

passthru.authentication.useLocalServer=false
passthru.authentication.servers=127.0.0.1
passthru.authentication.domain=

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Tue, 27 Jul 2010 08:37:12 GMT

hello thank you but i reach the same problem from the beginning now i have "Passthru offline check failed for alfrescovm" look to the log


08:30:26,490 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'fileServers' subsystem, ID: [fileServers, default]
08:30:26,534 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:26,743 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
08:30:26,757 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:27,048 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1] complete
08:30:27,048 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, passthru1]
08:30:27,090 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:27,124 DEBUG [org.alfresco.smb.protocol.auth] Protocol order primary=Native SMB (port 445), secondary=
08:30:27,127 DEBUG [org.alfresco.smb.protocol.auth] Using offline check interval of 30 seconds
08:30:27,128 DEBUG [org.alfresco.fileserver] Added passthru server [alfrescovm:127.0.0.1:Offline:0,0]
08:30:27,153 DEBUG [org.alfresco.fileserver] Passthru offline check failed for alfrescovm
08:30:27,195 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, passthru1] complete
08:30:27,195 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, ldap1]
08:30:27,214 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:28,072 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, ldap1] complete
08:30:28,074 WARN  [org.alfresco.fileserver] CIFS server native calls disabled, JNI code will not be used
08:30:28,076 INFO  [org.alfresco.fileserver] CIFS server started
08:30:28,076 INFO  [org.alfresco.fileserver] FTP server NOT started
08:30:28,077 INFO  [org.alfresco.fileserver] NFS server NOT started
08:30:28,110 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
08:30:28,110 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'imap' subsystem, ID: [imap, default]
08:30:28,125 DEBUG [org.alfresco.fileserver] [SMB] CIFS Server ALFRESCOVM starting
08:30:28,127 DEBUG [org.alfresco.fileserver] [SMB] Version 5.1.0, Java VM 17.0-b15, OS Linux, version 2.6.18-194.3.1.el5
08:30:28,143 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:28,258 DEBUG [org.alfresco.fileserver] [SMB] Using authenticator org.alfresco.filesys.auth.cifs.PassthruCifsAuthenticator, mode=USER
08:30:28,258 DEBUG [org.alfresco.fileserver] [SMB] Server timezone offset = 0hrs
08:30:28,259 DEBUG [org.alfresco.fileserver] [SMB] Dialects enabled = [Core,CorePlus,DOS LANMAN 1.0,LANMAN1.0,DOS LANMAN 2.1,LM1.2X002,LANMAN2.1,NT LM 0.12]
08:30:28,260 DEBUG [org.alfresco.fileserver] [SMB] Shares:
08:30:28,260 DEBUG [org.alfresco.fileserver] [SMB]  [Alfresco,DISK,,[Alfresco]] [Alfresco]
08:30:28,260 DEBUG [org.alfresco.fileserver] [SMB]  [AVM,DISK,,[AVM]] [AVM]
08:30:28,267 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'imap' subsystem, ID: [imap, default] complete
08:30:28,267 INFO  [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'email' subsystem, ID: [email, outbound]
08:30:28,276 INFO  [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
08:30:28,314 DEBUG [org.alfresco.fileserver] [SMB] Added NTServer flag to host announcement
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

the cifs server it is started with offline passthru server when i try to check the share this is the result


[root@miaptest.dms.at ~]# smbclient -L //x.x.x.x
Error connecting to x.x.x.x (Connection refused)
Connection to x.x.x.x failed (Error NT_STATUS_CONNECTION_REFUSED)
‍‍‍‍‍

my network divided into subnetworks can this make problem for the future ? now i just want to misidentify using the ldap login and password for cifs share (i have installed alfresco 3.3 community release on centos 5)

Re: Urgent LDAP CIFS Aunthentification

dward — Tue, 27 Jul 2010 10:22:43 GMT

The passthru server must be a Windows domain server (or possibly a Samba server configured as such).

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Tue, 27 Jul 2010 10:32:04 GMT

hello thank you
i understand now what does mean passthru servers, in this case i have the alfresco cifs server this is my samba server and it is installed on localhost what i dont understand why it is offline and why the samba client can't login even the samba cifs server it is running ?

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Thu, 29 Jul 2010 18:30:22 GMT

hello please can someone help me or give me his experience
i get "Failed to open a passthru session, mapped domain = null" message when i try connect with samba client


18:13:28,785 DEBUG [org.alfresco.fileserver] [N28] State changed to SMBNEGOTIATE
18:13:28,791 DEBUG [org.alfresco.smb.protocol.auth] Mapped client /172.17.254.108 to domain null
18:13:28,791 DEBUG [org.alfresco.smb.protocol.auth] Failed to open a passthru session, mapped domain = null
18:13:28,791 DEBUG [org.alfresco.fileserver] [N28] State changed to SMBSESSSETUP
18:13:32,762 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
18:13:32,763 DEBUG [org.alfresco.smb.protocol.auth]   No PassthruDetails for N28
18:13:32,763 DEBUG [org.alfresco.fileserver] [N28] Error : Cmd = SESSION_SETUP - Logon failure
18:13:32,769 DEBUG [org.alfresco.fileserver] ## Session closing. [N28] Client closed socket
18:13:32,769 DEBUG [org.alfresco.fileserver] [N28] State changed to NBHANGUP
18:13:32,769 DEBUG [org.alfresco.fileserver] [N28] Cleanup session, vcircuits=0, changeNotify=0
18:13:32,769 DEBUG [org.alfresco.fileserver] [N28] Server session closed
18:13:32,770 DEBUG [org.alfresco.fileserver] [SMB] Closed session 28, sessions=25
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

mu passthru configuration its :


passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=true
passthru.authentication.useLocalServer=false
passthru.authentication.servers=ALFRESCOVM\\127.0.0.1,127.0.0.1
passthru.authentication.domain=
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=300
passthru.authentication.protocolOrder=TCPIP,,NETBIOS
passthru.authentication.defaultAdministratorUserNames=admin
#server.transaction.mode.default=
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false

ntlm.authentication.sso.enabled=false
alfresco.authentication.allowGuestLogin=true
alfresco.authentication.authenticateCIFS=false

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

i dont know passthru talk about can't find domain controller i use just the cifs server of alfresco and i have a remote server for ldap

please help thanks

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Wed, 04 Aug 2010 13:45:27 GMT

hello,

there is no body can help me ??

Re: Urgent LDAP CIFS Aunthentification

dward — Wed, 04 Aug 2010 17:46:13 GMT

passthru is designed to talk to a windows domain controller. You either need one of these, or a samba installation that can act as one. It doesn't work with a raw LDAP directory.

An alternative is to set up this authentication chain

authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

and allow the internal alfresco repository to handle CIFS authentication. This would mean that only built-in users such as admin could use CIFS. LDAP users would still be able to use FTP and webdav.

Re: Urgent LDAP CIFS Aunthentification

fedoratori — Mon, 09 Aug 2010 14:02:38 GMT

hello,

is that mean that my alfresco cifs server does not a have a windows domain controller or the problem can be that the passthru does not work with my ldap ?? in that case there is no way to use cifs with ldap users ???

thanks

Re: Urgent LDAP CIFS Aunthentification

dward — Tue, 10 Aug 2010 19:12:58 GMT

passthru is designed to talk to a windows domain controller. You either need one of these, or a samba installation that can act as one. Otherwise, LDAP users will not be able to authenticate with CIFS.

Re: Urgent LDAP CIFS Aunthentification

sydwellz — Mon, 06 Jun 2011 15:28:34 GMT

Hi dward and others

Thanks for clearing some of the confusion out there with regards to CIFS and LDAP.

Just one more question, what happens when a user is imported using LDAP synchronization.
Surely that user should now be able to use CIFS as this users is now "built-in" or am I wrong?

Thanks