topic Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu in Alfresco Archive

Using Active directory passthru with Alfresco 3.2 on Ubuntu

dflasse — Thu, 27 Aug 2009 08:10:17 GMT

I easily installed Alfresco 3.2 on Ubuntu 9.04 using the 'partners' repository. It works smoothly out if I only use internal Alfresco authentication subsystem (AlfrescoNtlm).We need to authenticate Alfresco against our Win2k3 AD preferably using SSO (CIFS is in the pipe but that will be another stor

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dward — Thu, 27 Aug 2009 09:10:51 GMT

Well thanks for your feedback on my 'cryptic' Wiki page.

This may sound stupid, but make sure you can actually ping the domain server from the Alfresco server. Make sure you have actually opened up the domain server's firewall so that the requests get through!

It may be wise to start basic and work up.

Try just passthru in your chain and set

authentication.chain=passthru1assthru
ntlm.authentication.sso.enabled=false

This should give you basic username/password-based authentication against the domain server. And if that doesn't work then surely the logs will reveal something?

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dflasse — Thu, 27 Aug 2009 09:47:14 GMT

You should have seen my face when I realized I successfully logged on using your tip. Thanks a million. I really owe you one …. I've been trying to solve this for 2 days … I can't believe it was that simple. Thanks again!!!

However, I still don't understand why ntlm.authentication.sso.enabled has to be set to 'false'. I'd prefer by far that my users don't have to enter their password again when they log on Alfresco.

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dward — Thu, 27 Aug 2009 09:53:16 GMT

I only mentioned that because it happened to me yesterday when I tried to set up Kerberos against an Exchange Server VM!

I was only suggesting setting ntlm.authentication.sso.enabled=false to help you debug the issue. Set it back to true if it works for you now.

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dflasse — Thu, 27 Aug 2009 10:01:38 GMT

When I set it back to true, it doesn't work anymore. The behaviour comes back to what I've been experiencing for the last 48 hours.

Here's what shows the log when I set it back to true. It tells me I'm logged but, trust me, it's not obvious when I look the browser. The last line probably explains the reason of the failure but it's unclear to me.

11:57:40,298 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 172.16.177.244 (172.16.177.244:55345) SID:7109ABC7229373AB9F74993104BF0CE6
11:57:40,321 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0xa2088207,Domain:<NotSet>,Wks:<NotSet>]
11:57:40,324 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Client domain null
11:57:43,136 WARN [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] NTLM filter, error resolving CIFS host nameUBUNTUA
11:57:43,136 INFO [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] NTLM filter using server name ubuntu
11:57:43,162 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x80000203,Target:ubuntu,Ch:e5d488ee24c81d8c]
11:57:43,179 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:2e99b95dce2226bc4ede8e2c7995a3515bf0dfd90faaaee3,NTLM:2e99b95dce2226bc4ede8e2c7995a3515bf0dfd90faaaee3,Dom:ubuntu.lab.etuc.org,User:dflasse,WksFLASSE-VISTA]
11:57:43,653 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
11:57:43,654 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [dflasse,WksFLASSE-VISTA,Dom:ubuntu.lab.etuc.org,AuthSrv:ubuntu,Thu Aug 27 11:57:43 CEST 2009]
11:57:43,676 ERROR [org.apache.myfaces.lifecycle.LifecycleImpl] Assumed extension mapping, but there is no extension in /faces

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dward — Thu, 27 Aug 2009 10:07:47 GMT

The myfaces error looks serious. Is there by any chance a different version of myfaces already installed in your app server?

Could you perhaps try installing on a 'Virgin' tomcat 6, rather than a preconfigured one that came with the OS?

Re: Using Active directory passthru with Alfresco 3.2 on Ubuntu

dward — Thu, 27 Aug 2009 10:23:14 GMT

Yes, it does appear that you are using an incompatible version of myfaces. Alfresco embeds and expects myfaces 1.1.5. I cannot answer any more questions on this unsupported stack.