topic Re: addon enable error Authorization 'NTLM' not supported in Alfresco Archive

addon enable error Authorization 'NTLM' not supported

sharifu — Thu, 23 Aug 2012 14:21:25 GMT

I get the following error when I am trying to enable an add-onThe character encoding of the plain text document was not declared. The document will render with garbled text in some browser configurations if the document contains characters from outside the US-ASCII range. The character encoding of t

Re: addon enable error Authorization 'NTLM' not supported

afaust — Fri, 24 Aug 2012 10:19:03 GMT

Hello,

it is unclear to me at which point of your procedure this error appears. Is is part of some log output, presented in a browser window …? Which file is the affected "plain tet document".

Regards
Axel

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Fri, 24 Aug 2012 10:21:25 GMT

When i browse to http://alfrescotest:8080/share/service/modules/deploy and try to deploy a module. I get that error in the console log

Re: addon enable error Authorization 'NTLM' not supported

afaust — Fri, 24 Aug 2012 11:45:06 GMT

Please check the following and provide information on:

- your filesystem encoding
- your Tomcat connector URI encoding settings
- the encoding of the affected file
- the name of the file
- which module you deploy
- what console log the output is on (Share Tomcat, Repository Tomcat, "combined" Tomcat)

Any further information you may have would be helpful.

Regards
Axel

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Fri, 24 Aug 2012 11:50:31 GMT

Im not sure of any of the things that you have listed. As I have mentioned, I followed this http://code.google.com/p/share-extras/wiki/MediaViewers guide and tried to enable the module but can't. I don't get any errors in the logs. The error appears in firefox console log.

Re: addon enable error Authorization 'NTLM' not supported

afaust — Fri, 24 Aug 2012 12:06:06 GMT

Okay,
does the addon actually work? As long as it does and the error is only shown in FireFox console, I would say "don't mind"…

Regards
Axel

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Fri, 24 Aug 2012 13:24:07 GMT

The addon does not work because of this error

The extra file is /opt/alfresco-4.0.d/tomcat/shared/classes/alfresco/web-extension/site-webscripts/org/alfresco/components/preview/web-preview.get.config.xml

contents of this file is found here http://code.google.com/p/share-extras/wiki/MediaViewers

Even the alfresco portlet extension add-on does not work

Re: addon enable error Authorization 'NTLM' not supported

wabson — Tue, 28 Aug 2012 15:04:53 GMT

Hi,

Please provide post a screenshot of the error that you see in the browser, and the full stack trace associated with the error, from your log file (or the console).

This is common best practice on technical forums and is part of the Alfresco forum guidelines. I would suggest you review these if you have not already done so.

The error text you mention is not familiar to me, but it would be interesting to know if you also see issues when using the packaged version of the add-on, rather than compiling it yourself, and also if you still see the error after removing your custom web-preview.get.config.xml file.

Thanks,
Will

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Tue, 28 Aug 2012 15:20:41 GMT

This is what I see

[img]http://img818.imageshack.us/img818/4239/37229016.png[/img]

When I add any of the modules and try to apply changes i get the following. I do not get anything in the log files. I also get the same when i remove the media-preview add-on

[img]http://img593.imageshack.us/img593/3808/pdfviewer.png[/img]

Re: addon enable error Authorization 'NTLM' not supported

wabson — Tue, 28 Aug 2012 15:36:55 GMT

The screenshots are really helpful. The red text is not an error. It's a warning from your browser indicating that it can't display the content for some reason. I've never seen it before myself, I'm afraid.

Since you're using Firebug, you could use the Net panel to see what actual response text gets returned from the server (or try a different browser to see if it will display it). Assuming the response is not empty, there may be some clues in there as to what's going wrong.

Cheers,
Will

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Tue, 28 Aug 2012 15:44:40 GMT

The following is what i can see when i click on Net on firebug console


HeadersPostCookies
Response Headersview source
Content-Length   0
Date   Tue, 28 Aug 2012 15:36:39 GMT
Server   Apache-Coyote/1.1
Request Headersview source
Accept   text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding   gzip, deflate
Accept-Language   en-us,en;q=0.5
Authorization   Basic c2hhcmlmdTp3b2tpbmc=
Connection   keep-alive
Cookie   JSESSIONID=172A0BF47F6B7AEBCB0227390183132E
Host   alfrescotest:8080
Referer   http://alfrescotest:8080/share/service/modules/deploy
User-Agent   Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
Request Headers From Upload Stream
Content-Length   289
Content-Type   application/x-www-form-urlencoded
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Parametersapplication/x-www-form-urlencoded
deployedModules   {"id":"Alfresco Portlet Extension","evaluatorId":"portlet.module.evaluator","evaluatorProperties":{"portletUrls":".*"}}
evaluator   {"id":"portlet.module.evaluator","requiredProps":["portletUrls"]}
Source
evaluator=%7B%22id%22%3A%22portlet.module.evaluator%22%2C%22requiredProps%22%3A%5B%22portletUrls%22%5D%7D&deployedModules=%7B%22id%22%3A%22Alfresco+Portlet+Extension%22%2C%22evaluatorId%22%3A%22portlet.module.evaluator%22%2C%22evaluatorProperties%22%3A%7B%22portletUrls%22%3A%22.*%22%7D%7D‍‍‍‍‍


Sent Cookies
JSESSIONID
   
172A0BF47F6B7AEBCB0227390183132E
   
172A0BF47F6B7AEBCB0227390183132E
      
42 B
   
   
   
   
Value

172A0BF47F6B7AEBCB0227390183132E
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[img]http://img222.imageshack.us/img222/7253/consolealfrescodeploy.png[/img]

I get the following sometimes in IE




The Web Script /share/page/modules/deploy has responded with a status of 500 - .





500 Description:

 



 



Message:

07280000 Authorization 'NTLM' not supported.




 



Exception:

org.springframework.extensions.webscripts.WebScriptException - 07280000 Authorization 'NTLM' not supported.




 




org.springframework.extensions.webscripts.BasicHttpAuthenticatorFactory$BasicHttpAuthenticator.authenticate(BasicHttpAuthenticatorFactory.java:146)




org.springframework.extensions.webscripts.PresentationContainer.executeScript(PresentationContainer.java:68)




org.springframework.extensions.webscripts.LocalWebScriptRuntimeContainer.executeScript(LocalWebScriptRuntimeContainer.java:239)




org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:372)




org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)




org.springframework.extensions.webscripts.servlet.mvc.WebScriptView.renderMergedOutputModel(WebScriptView.java:99)




org.springframework.web.servlet.view.AbstractView.render(AbstractView.java:250)




org.springframework.web.servlet.DispatcherServlet.render(DispatcherServlet.java:1047)




org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:817)




org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:719)




org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:644)




org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:560)




javax.servlet.http.HttpServlet.service(HttpServlet.java:637)




javax.servlet.http.HttpServlet.service(HttpServlet.java:717)




org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)




org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)




org.alfresco.web.site.servlet.MTAuthenticationFilter.doFilter(MTAuthenticationFilter.java:74)




org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)




org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)




org.alfresco.web.site.servlet.SSOAuthenticationFilter.processType3(SSOAuthenticationFilter.java:922)




org.alfresco.web.site.servlet.SSOAuthenticationFilter.doFilter(SSOAuthenticationFilter.java:499)




org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)




org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)




org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)




org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)




org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)




org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)




org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)




org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)




org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)




org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)




org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)




org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)




java.lang.Thread.run(Thread.java:662)




 



Server:

Spring WebScripts - v1.0.0 (Release 958) schema 1,000



Time:

28-Aug-2012 16:43:37




 



Diagnostics:

Inspect Web Script (extensibility/moduleDeployment.post)

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I believe my ntlm is set up correctly

   <config evaluator="string-compare" condition="Remote">
      <remote>
         <connector>
            <id>alfrescoCookie</id>
            <name>Alfresco Connector</name>
            <description>Connects to an Alfresco instance using cookie-based authentication</description>
            <class>org.springframework.extensions.webscripts.connector.AlfrescoConnector</class>
         </connector>

         <endpoint>
            <id>alfresco</id>
            <name>Alfresco - user access</name>
            <description>Access to Alfresco Repository WebScripts that require   user authentication   </description>
            <connector-id>alfrescoCookie</connector-id>
            <endpoint-url>http://alfrescotest.uk.xxx.com:8080/alfresco/wcs</endpoint-url>
            <identity>user</identity>
            <external-auth>true</external-auth>
         </endpoint>

      </remote>
   </config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Alfresco_Share_SSO_using_NTLM i am using v 4.0.0

I can access my sites and explorer etc. It just on the add-on page where it throws up a login box and then errors

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Wed, 29 Aug 2012 11:50:51 GMT

Hello,

it is unclear to me at which point of your procedure this error appears. Is is part of some log output, presented in a browser window …? Which file is the affected "plain tet document".

Regards
Axel

I believe the file is ./webapps/share/css/webscripts.css

which I copied over from ./webapps/alfresco/css/webscripts.css

Re: addon enable error Authorization 'NTLM' not supported

wabson — Wed, 29 Aug 2012 12:36:26 GMT

I just noticed the reference to NTLM at the end of your last post. I suspect this is related, and if you compare the URLs in your browser address bar in your screenshot you will see there is a key difference between the two

List modules: GET /share/service/modules/deploy
Save modules: POST /share/page/modules/deploy

What seems likely to me is that the 'page' context is not working with your NTLM configuration, but 'service' is. I'd suggest you double-check you've performed all the steps necessary for SSO, and (since you seem to be using the Enterprise edition) log a ticket with Alfresco Support if it still doesn't work.

Cheers,
Will

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Wed, 29 Aug 2012 12:40:27 GMT

I just noticed the reference to NTLM at the end of your last post. I suspect this is related, and if you compare the URLs in your browser address bar in your screenshot you will see there is a key difference between the two

List modules: GET /share/service/modules/deploy
Save modules: POST /share/page/modules/deploy

What seems likely to me is that the 'page' context is not working with your NTLM configuration, but 'service' is. I'd suggest you double-check you've performed all the steps necessary for SSO, and (since you seem to be using the Enterprise edition) log a ticket with Alfresco Support if it still doesn't work.

Cheers,
Will

I have double checked the configuration and followed through http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Alfresco_Share_SSO_using_NTLM. I am using community edition.



###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/alfresco-4.0.d/alf_data

alfresco.context=alfresco
alfresco.host=127.0.0.1
alfresco.port=8080
alfresco.protocol=http

share.context=share
share.host=127.0.0.1
share.port=8080
share.protocol=http

### database connection properties ###
db.driver=org.gjt.mm.mysql.Driver
db.username=root
db.password=support
db.name=alfresco
db.url=jdbc:mysql://localhost:3306/alfresco?useUnicode=yes&characterEncoding=UTF-8

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=21
ftp.ipv6.enabled=false

### RMI service ports ###
alfresco.rmi.services.port=50500
monitor.rmi.service.port=50508
alfresco.rmi.services.external.host=172.16.0.49
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### External executable locations ###
ooo.exe=/opt/alfresco-4.0.d/openoffice/program/soffice.bin
ooo.enabled=false
ooo.port=8100
ooo.port=8100
img.root=/opt/alfresco-4.0.d/common
img.dyn=${img.root}/lib
img.exe=${img.root}/bin/convert
swf.exe=/opt/alfresco-4.0.d/common/bin/pdf2swf
jodconverter.enabled=false 
jodconverter.officeHome=/opt/alfresco-4.0.d/openoffice 
jodconverter.portNumbers=8100 

### Initial admin password ###
alfresco_user_store.adminpassword=1e1dd34b128de1968a44212e05d9e942

### E-mail site invitation setting ###
notification.email.siteinvite=false

### File Protocol Root ###
protocols.rootPath=/${spaces.company_home.childname}/${spaces.sites.childname}

### License location ###
dir.license.external=/opt/alfresco-4.0.d

### Solr indexing ###
index.subsystem.name=lucene
dir.keystore=${dir.root}/keystore
solr.port.ssl=8443

### BPM Engine ###
system.workflow.engine.jbpm.enabled=false


### AD SSO
authentication.chain=passthru1:passthru,ldap1:ldap-ad
alfresco.authentication.authenticateCIFS=false
ntlm.authentication.sso.enabled=true
passthru.authentication.authenticateCIFS=true
ldap.authentication.active=false
ldap.synchronization.active=true
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin=false
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://echo.uk.domain.com:389
ldap.synchronization.java.naming.security.authenticaton=simple
ldap.synchronization.java.naming.security.principal=administrator@domain.com
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.userSearchBase=ou\=Sites,dc\=domain,dc\=com
synchronization.synchronizeChangesOnly=false
### synchronization.import.cron=0 0 0 * * ?
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=true
passthru.authentication.domain=domain
passthru.authentication.servers=domain\\echo.uk.domain.com,domain\\fezziwig.uk.domain.com
passthru.authentication.defaultAdministratorUserNames=johnl,markw,administrator,alfresco,sharifu

ldap.synchronization.queryBatchSize=1000
#ldap.synchronization.groupDifferentialQuery=(&(objectclass=nogroup)(!(modifyTimestamp<\={0})))
#ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
#ldap.synchronization.personDifferentialQuery=(& (objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=cn\=users,dc\=domain,dc\=com

# Delay indexing to improve replication performance
#index.tracking.disableInTransactionIndexing=true
#lucene.maxAtomicTransformationTime=0

replication.enabled=false

#db.schema.update=true

#
# Index Recovery Mode
#————-
#index.recovery.mode=FULL

ffmpeg.exe=/usr/local/bin/ffmpeg
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: addon enable error Authorization 'NTLM' not supported

wabson — Wed, 29 Aug 2012 13:18:19 GMT

Alfresco 4.0.0 is the Enterprise version, which you mentioned you were using.

If you don't have a support subscription then you could hack the web script that implements the list modules page to force the HTML form to submit the save data to /share/service/modules/deploy. The real fix would be to get the 'page' context working with your SSO, but the dynamic servlet filters which implement Share SSO are complex and would require a good knowledge to troubleshoot. My suggestion would be to hack up the temporary fix in your installation and open a JIRA issue to report the 'page' context not working.

Cheers,
Will

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Wed, 29 Aug 2012 13:26:12 GMT

Alfresco 4.0.0 is the Enterprise version, which you mentioned you were using.

If you don't have a support subscription then you could hack the web script that implements the list modules page to force the HTML form to submit the save data to /share/service/modules/deploy. The real fix would be to get the 'page' context working with your SSO, but the dynamic servlet filters which implement Share SSO are complex and would require a good knowledge to troubleshoot. My suggestion would be to hack up the temporary fix in your installation and open a JIRA issue to report the 'page' context not working.

Cheers,
Will

[img]http://img51.imageshack.us/img51/5373/alfrescoversion.png[/img]

Can you explain what file and where I need to change what please. If you can talk me through it.

created in jira https://issues.alfresco.com/jira/browse/ALF-15738

Re: addon enable error Authorization 'NTLM' not supported

marc75 — Thu, 20 Sep 2012 09:17:53 GMT

Hi,

i have the similar authorization problem when i want to activate modules. Im using Alfresco 4.0e community version. The only difference is that i'm using Kerberos authentification. Everything works fine with authentification but to enable a module within the module deployment console http://servernameort/share/page/modules/deploy produces the error 08200002 Authorization 'Negotiate' not supported. See Screenshots:

[img]http://www.ransbach-baumbach.de/sites/default/files/bilder/alfreso_01.png[/img]

[img]http://www.ransbach-baumbach.de/sites/default/files/bilder/alfreso_02.png[/img]

I followed the kerberos installation here: http://docs.alfresco.com/4.0/topic/com.alfresco.enterprise.doc/tasks/auth-kerberos-shareSSO.html
But as i said everything with authentification works fine except on this site.

Maybe you could help me out. Thanks.

Re: addon enable error Authorization 'NTLM' not supported

sharifu — Mon, 08 Oct 2012 14:14:55 GMT

This is what I have


<config evaluator="string-compare" condition="Remote">
      <remote>
         <connector>
            <id>alfrescoCookie</id>
            <name>Alfresco Connector</name>
            <description>Connects to an Alfresco instance using cookie-based authentication</description>
            <class>org.springframework.extensions.webscripts.connector.AlfrescoConnector</class>
         </connector>

         <endpoint>
            <id>alfresco</id>
            <name>Alfresco - user access</name>
            <description>Access to Alfresco Repository WebScripts that require user authentication</description>
            <connector-id>alfrescoCookie</connector-id>
            <endpoint-url>http://tanaga.usa.xxx.com:8080/alfresco/wcs</endpoint-url>
            <identity>user</identity>
            <external-auth>true</external-auth>
         </endpoint>

      </remote>
   </config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

you configured kerberos, i used ntlm
http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-kerberos-shareSSO.html

what do you have?