topic Re: NTLM Authentication with Active Directory in Alfresco Archive

NTLM Authentication with Active Directory

ianp — Fri, 17 Aug 2012 15:41:24 GMT

Hi all,Im using community 4.0.d on a vanilla Tomcat 6.0.35 install.I've been struggling for several days with this, so I'm hoping someone here might have an answer for me. I'm trying to achieve SSO in IE8 so that a user doesn't have to enter a username or password. I've managed to successfully log

Re: NTLM Authentication with Active Directory

benswitzer — Fri, 17 Aug 2012 18:48:06 GMT

Hi Ian,

What Windows OS are you running. If you're running anything newer than Windows XP, you'll have to change how authentication is handled for NTLM. Alfresco can only use NTLMv1 session security. By default, Vista and Windows 7 don't allow NTLMv1. This can be change though.

See this thread: https://forums.alfresco.com/en/viewtopic.php?f=9&t=24610#p80352

Ben

Re: NTLM Authentication with Active Directory

ianp — Mon, 20 Aug 2012 15:57:43 GMT

Hi Ben,

Thanks for your reply. I'm a little confused here though. According to the documentation (http://docs.alfresco.com/4.0/topic/com.alfresco.enterprise.doc/concepts/auth-alfrescontlm-ntlm.html), what I'm trying to achieve should be possible:

The alfrescoNtlm subsystem supports optional NTLM Single Sign-On (SSO) functions for WebDAV and the Alfresco Explorer client.
NTLM v2 is supported, which is more secure that the NTLM v1. If the client does not support NTLMv2, it will automatically downgrade to NTLMv1.
By using NTLM authentication to access Alfresco Explorer and Alfresco WebDAV sites, the web browser can automatically log in.

When SSO is enabled, Internet Explorer will use your Windows log in credentials when requested by the web server. Firefox and Mozilla also support the use of NTLM but you need to add the URI to the Alfresco site that you want to access to network.automatic-ntlm-auth.trusted-uris option (available through writing about:config in the URL field) to allow the browser to use your current credentials for login purposes.

The above describes almost (maybe that's the problem?) exactly what I'm trying to do.

The link you posted seemed to be primarily about CIFS, which I'm not trying to do (well, not yet, anyway). Have I missed something?

Many thanks,
Ian

Re: NTLM Authentication with Active Directory

ianp — Fri, 24 Aug 2012 13:34:00 GMT

Anybody?