topic Can't get SSO working on 3.4d in Alfresco Archive

Can't get SSO working on 3.4d

georgej — Thu, 04 Aug 2011 13:51:58 GMT

Hi AllI'm sure this has been mentioned before but I simply can't find anything that seems to be simple or detailed enough to help. It's now day 4 of google and Alfresco forums and I' about to abandon the product unless I can get this working. I have Alfresco Share community 3.4d installed on a Win

Re: Can't get SSO working on 3.4d

michaeldam — Thu, 04 Aug 2011 21:50:19 GMT

I'm also just starting. Just found out that despite the Admin password one enters during setup, the uid/pw for Admin after install defaults to admin/admin.
So I got in using pw "admin" for uid "admin" but now I'm clueless how to make MS Office to find the Sharepoint server (running on localhost, Win 7 64bit). 🙂 More to setup it appears.
Of for a weeks vacation now. Hope this helps for you. Good luck.
Michael.

Re: Can't get SSO working on 3.4d

georgej — Fri, 05 Aug 2011 06:56:06 GMT

Sadly, admin / admin too doesn't work at all.

Please, to whomever can add their knowledge, not that where i work, the average IQ is lower than that of a brick. People here forget the passwords they have been using for months just to log into Windows so it would be best to have it in such a way that when they open their browsers, their home / dashboard should automatically open. This username and password will simply not fly with these people.

Can someone please offer some help or point me in the right direction? I swear we have actively goggled our fingers to the bone and I myself have spend days scouring the forum for answers to no avail.

Re: Can't get SSO working on 3.4d

georgej — Mon, 08 Aug 2011 08:00:51 GMT

Can somebody please assist me? I'm not asking you to waste your time, just point me to a thread that may help as my searches are coming up with no threads that can help.

Re: Can't get SSO working on 3.4d

sriram_g77 — Sun, 21 Aug 2011 05:23:56 GMT

By default Windows 7 disables NTLM. So try enabling it on the user's desktop.
Do this Start > Run > secpol.msc Local Policies > Security Options > Network Security LAN Manager authenticating level Select Send LM & NTLM - use NTLMv2 session security if negotiated

If this doesn't work check if you see any error on the log. I have deployed 3.4EE and using NTLM is a pain. I am thinking of switching over to Kerberos.

Re: Can't get SSO working on 3.4d

michaeldam — Mon, 22 Aug 2011 06:46:06 GMT

[…]
Do this Start > Run > secpol.msc Local Policies > Security Options > Network Security LAN Manager authenticating level Select Send LM & NTLM - use NTLMv2 session security if negotiated
[…]

secpol.msc is not available on Windows 7 Home Premium which I'm running. I found the following on the net and verified in change of the regkey using a laptop running Windows 7 professional. the secpol.msc instruction correspond with the following regkey/value pair:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
1. If it doesn't already exist, create a DWORD value named
LmCompatibilityLevel
3. Set the value to 1

Value 1 corresponds with "Send LM & NTLM - use NTLMv2 session security if negotiated "

Probably won't have time to check this against Alfresco this week so I thought to share it in case someone needs it now.

I suggest who ever gets this running changing any LSA setting posts all the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa values in this thread.

edit: typo tread -> thread

Re: Can't get SSO working on 3.4d

michaeldam — Mon, 22 Aug 2011 20:52:17 GMT

Could not wait 🙂 I can logon now!

Setting the LmCompatibilityLevel to 1 does the trick for Windows 7 Home Premium.

Using services.msc I did had to start the "alfresco Tomcat" services manually first! (eventhough it was on automatic.

Now I'm having the next challenge.

I'm a sharepoint/alfresco newby. Word and Excel don't seen to see the Sharepoint server.

Using sysinternals' Tcpview I do see Tomcat is listening on port 7070 (Sharepoint default right?).

I thought I would see the Sharepoint….but simply wouldn't be able to save anything.

If anyone could share how to expose the locahost sharepoint it would be appreciated.