SMB Authentication timeout

fluca1978 — Wed, 30 Mar 2011 08:43:51 GMT

Hi all,my installation of Alfresco has started to give problems with the SMB Authentication: when I execute a web application from my test machine against the Alfresco server I got a timeout execption, while if I execute the same web application from the same Alfresco server (i.e., deployed on the s

Re: SMB Authentication timeout

good710 — Fri, 08 Apr 2011 14:18:12 GMT

Thank you, for answering. But this method works for me only with .. In all other cases I get only strange results, like those below :lol:

Re: SMB Authentication timeout

unknown-user — Wed, 29 Jun 2011 20:00:07 GMT

Hi,

Were you able to solve this timeout problem? I am facing the same issue when a webservice client is talking to my Alfresco. Following is the stack trace.

Thanks in advance


net.sf.acegisecurity.AuthenticationServiceException: I/O error; nested exception is java.net.SocketTimeoutException: Read timed out
   at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:899)
   at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:554)
   at sun.reflect.GeneratedMethodAccessor451.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy204.authenticate(Unknown Source)
   at org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.processType3(BaseNTLMAuthenticationFilter.java:556)
   at org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.doFilter(BaseNTLMAuthenticationFilter.java:313)
   at sun.reflect.GeneratedMethodAccessor405.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:103)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy215.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.WebScriptSSOAuthenticationFilter.doFilter(WebScriptSSOAuthenticationFilter.java:128)
   at sun.reflect.GeneratedMethodAccessor405.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:103)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy215.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:852)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
   at java.lang.Thread.run(Thread.java:619)
Caused by: java.net.SocketTimeoutException: Read timed out
   at java.net.SocketInputStream.socketRead0(Native Method)
   at java.net.SocketInputStream.read(SocketInputStream.java:129)
   at java.io.DataInputStream.read(DataInputStream.java:132)
   at org.alfresco.jlan.netbios.NetBIOSSession.Receive(NetBIOSSession.java:1836)
   at org.alfresco.jlan.server.auth.passthru.SMBPacket.ExchangeSMB(SMBPacket.java:286)
   at org.alfresco.jlan.server.auth.passthru.AuthenticateSession.doSessionSetup(AuthenticateSession.java:1158)
   at org.alfresco.jlan.server.auth.passthru.AuthenticateSession.doSessionSetup(AuthenticateSession.java:980)
   at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:830)
   … 44 more
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: SMB Authentication timeout

fluca1978 — Thu, 30 Jun 2011 05:59:40 GMT

I don't know what was the cause and what was the solution.
The problem disappeared and never happened again. I suspect it was a problem with the windows domain controller, on which I have no control at all, but I don't know if/which parameters changed…

Re: SMB Authentication timeout

gregwright78 — Sat, 19 Jan 2013 16:18:30 GMT

Just ran into this problem last couple of days and found this post.
Not sure exactly what has changed with LDAP and/or network but started seeing the mentioned exception. I realised that it was only the Alfresco repository admin account and none of the LDAP user accounts so then suspected the authentication chain might have something to do with it.

The wiki page http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Passthru_functions provides the recommended (default maybe) authentication chain:

 Example 1: Advanced AD Chain

If you want to integrate Alfresco with Active Directory with the following requirements:

    Built-in Alfresco users and Windows users should be able to log in, with Alfresco taking precedence
    The Windows domain server should handle CIFS authentication directly
    LDAP should be used to synchronize user and group details 

Configure the following authentication chain:

alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap-ad
‍‍‍‍‍‍‍‍‍‍‍‍

Our alfresco instance was configured as:

passthru1:passthru,alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-ad‍

After setting the Alfresco recommended chain from the wiki page, both LDAP user accounts and local admin user accounts could authenticate/login without issue. (issue solved)

So it seems the LDAP response probably timed out and then seems that Alfresco did not try the next authentication option in the chain (alfrescoNtlm) and just passed up the socket timeout exception to the login page. (Haven't gone through the authentication code/debugged).

Not sure if this is relevant to anyone else but hopefully helpful to log my findings.

topic Re: SMB Authentication timeout in Alfresco Archive

SMB Authentication timeout

Re: SMB Authentication timeout

Re: SMB Authentication timeout

Re: SMB Authentication timeout

Re: SMB Authentication timeout