topic CIFS & Kerberos Configuration in Alfresco Archive

CIFS & Kerberos Configuration

lux209 — Fri, 01 Jun 2012 07:51:42 GMT

Hi,I'm have trouble to configure Kerberos for CIFS with my alfresco 4. The Active Directory authentication is working for all http connection, but I'm using ldap-ad instead of kerberos. CIFS is also working but only with Alfresco accounts not with AD.I followed this guide to setup kerberos: http://d

Re: CIFS & Kerberos Configuration

mrogers — Fri, 01 Jun 2012 08:27:44 GMT

A Null pointer exception is always a bug that needs to be raised in JIRA with as much information as possible.
If you can get a stack trace it will help very much.

Re: CIFS & Kerberos Configuration

lux209 — Fri, 01 Jun 2012 08:40:19 GMT

Thanks, but my config is standard and I've installed Alfresco with the all in one package. So I don't understand why it is not woking, does it work for other people ? Or is it a bug ?

I will raised it with Jira, how can I get a stack trace ?

Re: CIFS & Kerberos Configuration

lux209 — Fri, 01 Jun 2012 11:47:32 GMT

Ok it is working now !

I changed the authentication chain, removed my ldap-ad and added kerberos and now it is working quite well ! I don't know why I thought the auth chain was only for the web access.

Re: CIFS & Kerberos Configuration

pac22 — Mon, 02 Jul 2012 18:16:03 GMT

Hi lux209, you can post how are now you chain string in alfresco-global.properties, and if you have no problem you could stick your whole alfresco.global.properties to learn.
We are making our first pilot tested with Alfresco and I see that you have yours working very well, if you can do would be helpful to us and we can take some SETTINGS reference.

Thanks, Cristian.
UTN Facultad Regional Delta
Campana, Buenos Aires
Argentina.

Re: CIFS & Kerberos Configuration

lux209 — Tue, 03 Jul 2012 08:40:48 GMT

Hi here is my auth chain:

authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm‍

I also had to change the /etc/krb5.conf file, the information I found in this setup guide (http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-kerberos-ADconfig.html) was not complete. Here is my krb5.conf file:

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = MYDOMAIN.LOCAL
 default_tkt_enctypes = rc4-hmac
 default_tgs_enctypes = rc4-hmac

[realms]
 FISCHERCONNECTORS.LOC = {
  kdc = myDC.mydomain.local
  kpasswd_server = myDC.mydomain.local
  admin_server = myDC.mydomain.local
 }

[domain_realm]
 myDC.mydomain.local = MYDOMAIN.LOCAL
 .myDC.mydomain.local = MYDOMAIN.LOCAL
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope it helped.
Lucas