topic NTLMv2? in Alfresco Archive

NTLMv2?

paulweb — Mon, 24 Aug 2009 10:15:26 GMT

In alfresco-global.properties I have installed following chainpassthru1assthru, ldap1:ldap-adHas customised passthru and ldap-ad Has as a result received automatic authentification in alfresco with adBut it is all works if ntlmv1How to make automatic authentification if are used ntlmv2?In help pdf

Re: NTLMv2?

dward — Tue, 25 Aug 2009 10:00:47 GMT

NTLM v2 is designed to avoid man-in-the-middle attacks, so it's not possible to use pass through authentication.

The alfrescoNtlm subsystem supports NTLM v2, but doesn't communicate with a Windows domain server. Instead, it has to store its own copy of your MD4 password hash, so you would have to create a user in Alfresco with the same username and password as your domain account.

If none of this suits, you could always try Kerberos!

Re: NTLMv2?

paulweb — Tue, 25 Aug 2009 22:42:22 GMT

We have customised through Kerberos and all works (Almost all )

but office addin 2003 when i try to authentication,does not wish to work
in log


09:01:35,091  DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=3896, UID=0, PID=65279
09:01:35,091  DEBUG [smb.protocol.auth] Using Write transaction
09:01:35,092  DEBUG [smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=967,Authenticator=EncType=3,Kvno=-1,Len=176]
09:01:35,092  DEBUG [smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
09:01:35,096  DEBUG [smb.protocol.auth] Using OID MS Kerberos5 for NegTokenTarg
09:01:35,096  DEBUG [org.alfresco.fileserver] EncApRep bytes:
09:01:35,096  DEBUG [org.alfresco.fileserver]     0 - 7b 23 30 21 a0 11 18 0f 32 30 30 39 30 38 32 35   - {#0! …20090825
09:01:35,096  DEBUG [org.alfresco.fileserver]    16 - 32 32 30 31 33 35 5a a1 04 02 02 01 75 a3 06 02   - 220135Z¡….u£..
09:01:35,096  DEBUG [org.alfresco.fileserver]    32 - 04 3d 3b 71 13 03 03 03   - .=;q….
09:01:35,097  DEBUG [org.alfresco.fileserver] Re-encoded EncapRep bytes:
09:01:35,097  DEBUG [org.alfresco.fileserver]     0 - 7b 38 30 36 a0 11 18 0f 32 30 30 39 30 38 32 35   - {806 …20090825
09:01:35,097  DEBUG [org.alfresco.fileserver]    16 - 32 32 30 31 33 35 5a a1 04 02 02 01 75 a2 13 30   - 220135Z¡….u¢.0
09:01:35,097  DEBUG [org.alfresco.fileserver]    32 - 11 a0 03 02 01 03 a1 0a 04 08 16 98 0d fe ce 7c   - . ….¡……þÎ|
09:01:35,097  DEBUG [org.alfresco.fileserver]    48 - 52 ec a3 06 02 04 3d 3b 71 13   - Rì£…=;q.
09:01:35,097  DEBUG [smb.protocol.auth] Created NegTokenTarg using updated AP-REP, added subkey
09:01:35,097  DEBUG [smb.protocol.auth] Machine account logon, ITPROGVENG2$, as null logon
09:01:35,098  DEBUG [smb.protocol.auth] Logged on using Kerberos, user ITPROGVENG2$
09:01:35,098  DEBUG [smb.protocol.auth] Using Write transaction
09:01:35,104 User:p.xxxxxxx DEBUG [webdav.auth.KerberosAuthenticationFilter] New Kerberos auth request from 10.1.0.80 (10.1.0.80:4648)
09:01:35,109 User:p.xxxxxxx DEBUG [webdav.auth.KerberosAuthenticationFilter] New Kerberos auth request from 10.1.0.80 (10.1.0.80:4649)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: NTLMv2?

paulweb — Thu, 27 Aug 2009 06:40:10 GMT

Ms office addine 2003 3.3 and kerberos
code addin here
http://svn.alfresco.com/repos/alfresco-open-mirror/alfresco/HEAD/root/projects/extensions/AlfrescoOffice2003/AlfrescoWord2003/
Ms office addine 2003 do not work with kerberos if using webdav (I did not test on CIFS )
because in
WebDAVHelper.cs line 152 m_WebAuthenticationHeader = e.Response.Headers["WWW-Authenticate"];
if using ntlm m_WebAuthenticationHeader="NTLM"
if using kerberos m_WebAuthenticationHeader="Negotiate"
line 45 function GetAuthenticationTicket
if ((xmlResponse.InnerXml.Contains("<ntlm />")) || (m_WebAuthenticationHeader == "NTLM") )
for testing i add following

if ((xmlResponse.InnerXml.Contains("<ntlm />")) || (m_WebAuthenticationHeader == "NTLM") || (m_WebAuthenticationHeader == "Negotiate"))

and addin earn, but when i have saved file, i have got error 501, but file have added to alfresco (chekin and checkout work normal)
and still
ThisAddIn.cs line 31 comment this MessageBox.Show(m_DefaultTemplate, "m_DefaultTemplate"); else if you opened word, then you got message box.