topic Alfresco 3.2 CIFS + AD Integration in Alfresco Archive

Alfresco 3.2 CIFS + AD Integration

heraclesbzh — Thu, 08 Oct 2009 17:02:54 GMT

Hi there,I'm trying to log by CIFS with my users synchronized in my alfresco with an active directory but the only one username I can use is the "admin" default account ( the only one that was created in Alfresco without AD )Any hint ?

Re: Alfresco 3.2 CIFS + AD Integration

dward — Thu, 08 Oct 2009 17:37:01 GMT

To support CIFS authentication via AD, you will need the passthru subsystem.

So assuming your authentication chain looks like this:

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1assthru,ldap1:ldap-ad

I recommend the following settings

ntlm.authentication.sso.enabled=false # Force alfrescoNtlm and passthru to use log in dialog
alfresco.authentication.authenticateCIFS=false # Force use of passthru subsystem for CIFS
ldap.authentication.active=false # Switch off authentication side of ldap-ad subsystem

Re: Alfresco 3.2 CIFS + AD Integration

heraclesbzh — Thu, 08 Oct 2009 17:54:26 GMT

Thank's for reply but I found this configuration that works now :

authentication.chain=passthru1assthru,alfrescoNtlm1:alfrescoNtlm
ntlm.authentication.sso.enabled=true
passthru.authentication.authenticateCIFS=true

from : http://toutpeutarriver.wordpress.com/2009/09/02/alfresco-community-3-2-sur-ubuntu-server-9-04-ntlm-passthru-sso/

I'll test your configuration on next server, this one is already launched 😕

Re: Alfresco 3.2 CIFS + AD Integration

dward — Thu, 08 Oct 2009 19:39:17 GMT

With that configuration, none of the Alfresco users such as admin will be able to log on to Alfresco Explorer (or use CIFS). Only password-based login is chained. So you may as well have left alfrescoNtlm out of the chain.

You need to understand that both alfresco and passthru are capable of authenticating CIFS. But only one of them can authenticate CIFS at a time. And that is the first one in the chain with CIFS authentication enabled.