topic Re: Problems to configure Kerberosauthentication in Alfresco Archive

Problems to configure Kerberosauthentication

alfone — Thu, 24 Sep 2009 14:36:59 GMT

Hi,i´m new in alfresco.I have to set it up and let authenticate against kerberos.OpenSUSE 11.1KDC is setup on another SuSE 11.1Alfresco 3.2I´ve set it up correct and it´s work fine, without kerberos and jaas.OK. My problem is: i don´t know, where i have to put my jaas-authentication-context.xmland w

Re: Problems to configure Kerberosauthentication

alfone — Tue, 29 Sep 2009 11:41:27 GMT

Is there anybody out there who knows a littlebit about?
The most setting are done. And when i try to put some attributes like location of the kdc to the startfile.sh it works.
So, i think the problem is the jaas-authentication-context.xml file…that is not enabled and correct setup.

Please, if you need further information ask me, but help me please…

Re: Problems to configure Kerberosauthentication

dward — Tue, 29 Sep 2009 16:00:16 GMT

You don't need one and you don't need to put it anywhere.

You need a file $TOMCAT_HOME/share/classes/alfresco-global.properties

Then set the following properties (after reading the Wiki http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Kerberos )

authentication.chain=kerberos1:kerberos
kerberos.authentication.realm=ALFRESCO.ORG
kerberos.authentication.defaultAdministratorUserNames=adminName
kerberos.authentication.cifs.password=secret
kerberos.authentication.authenticateCIFS=true
kerberos.authentication.http.password=secret
kerberos.authentication.sso.enabled=true

Then follow this guide to configuring the Kerberos server side

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuring_against_Active_Directory

That's it.

Re: Problems to configure Kerberosauthentication

alfone — Wed, 30 Sep 2009 10:40:50 GMT

ok. first…thank you for your response. my server isn´t so nice.

i´ve done, how you describe. unfortunately it doesn´t work but i think the target isn´t far.
I think the only one problem is, the alfresco-server don´t know the ip/location of the kdc/kerberos.
And i don´t know, where i have to tell him.
i thought, i do this for the cifs-server in the file-servers.xml and for the httpserver in the web.xml…

file-servers.xml:
…
<!– CIFS Enterprise authentication sample with Kerberos –>^M
       <authenticator type="enterprise"/>^M
         <KDC>192.168.20.106</KDC>^M
         <Realm>LOCAL</Realm>^M
         <Password>pass</Password>^M
          ^M
         <kerberosDebug/>^M
      </authenticator>
…

in the web.xml i do nothing…

when i put the ip/location for the kdc/kerberos in the alfresco.sh and start up…the servers get their tickets…but only then…
mabee there is a global way, how i can tell the alfresco server, that he has to authenticate at ip=ipOfKdc

thanks for your help.

Re: Problems to configure Kerberosauthentication

alfone — Wed, 30 Sep 2009 14:11:57 GMT

OK. i solve the problem.

My mistake:

i thought, that the location of the krb5.conf file only on the kdc/ kerberos host is.
But i have to put it on the host where alfresco run.
Now it works.

thanks to my helping hand