topic Passthru Authentication on Ubuntu Server 12.04 in Alfresco Archive

Passthru Authentication on Ubuntu Server 12.04

theoribeiro — Tue, 13 Nov 2012 05:01:32 GMT

Hey everybody,I'm having trouble setting up passthru authentication on my Ubuntu box. I'm using Alfresco Community 4.2a.Passthru is not working, every time I try to login using a valid username and password I get an Invalid User Name/Password error both on /alfresco and /share.Here is catalina.out:

Re: Passthru Authentication on Ubuntu Server 12.04

sasquatch58 — Tue, 13 Nov 2012 07:57:42 GMT

There's a couple of good areas to look at for information.
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems
and
http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-subsystem-chain-config.html
These say pretty much the same thing - pass through authentication is not just an entry in Alfresco-global.properties.
How does your system line up with these?
Cheers, Sasquatch

Re: Passthru Authentication on Ubuntu Server 12.04

theoribeiro — Tue, 13 Nov 2012 13:58:18 GMT

Hi Sasquatch,

Thank you for your reply.

AFAIK passthru is an Authentication Subsystem used to pass all authentication requests directly to a Domain Controller using NTLM, which means the DC should support NTLM. All in all, the DC must be an Active Directory controller, am I right?
The thing is that my AD DC is not being reached by Alfresco. I have two different DCs here, on different networks, one AD running on Windows Server 2008 R2 and one Samba4 provisioned as an AD running on Ubuntu Server 12.04. I tried configuring passthru to reach both of them, without success. Watching the logs at both servers I can't see any signs of an authentication request coming from the Alfresco server.

Best regards,

Theo

Re: Passthru Authentication on Ubuntu Server 12.04

theoribeiro — Tue, 13 Nov 2012 18:25:55 GMT

I stand corrected, even though I cannot see authentications in any logs at our DC, by using TShark I was able to trace the SMB packets reaching with authentication information and all responses when the credentials are correct and when they are wrong.
This means that the DC is authenticating correctly, now I have to find out why isn't Alfresco accepting the authentication.

Re: Passthru Authentication on Ubuntu Server 12.04

theoribeiro — Wed, 14 Nov 2012 15:01:49 GMT

ops:
Remote Debugging my Alfresco instance I found out what I was doing wrong. As I was only using passthru in my authentication chain, my users were being authenticated by the DC but their corresponding users didn't exist in Alfresco! All because I forgot to set ldap synchronization! After setting it up correctly, login worked just fine.

For users with the same problem as me, remember: Passthru alone doesn't sync accounts, either you have to set ldap synchronization or create the corresponding accounts in Alfresco.

Re: Passthru Authentication on Ubuntu Server 12.04

jonvargas — Fri, 16 Nov 2012 06:28:11 GMT

I think something changed in this behaviour.

I am already using Passthru authentication on Alfresco 4.0.d and also Alfresco 4.1.1, and there is no need to create an account before or perform LDAP syncronization. The account seems to be created when the user logs in for the first time.

But when I use the same configuration with Alfresco 4.2.b, an account is required as you are pointing.

Is this behaviour by design on 4.2 branch?