topic Re: Kerberos and passthru authentication chan in Alfresco Archive

Kerberos and passthru authentication chan

ivan_plestina — Wed, 10 Aug 2011 14:07:41 GMT

Hello,is it possible to have the kerberos SSO and passthru SSO chained (as fallback for non-Kerberos)? If SSO is not available for both is it possible to at least to have Kerberos SSO and fallback to passthru login so that we can support non-LAN users (or is LDAP better choice here for fallback?)?Re

Re: Kerberos and passthru authentication chan

litie — Fri, 23 Mar 2012 19:16:09 GMT

Hi there, any update about that? i've got the same issue…

Re: Kerberos and passthru authentication chan

ashex — Tue, 27 Mar 2012 21:15:58 GMT

I don't believe you can enable SSO on multiple subsystems for the same reason you can't enable CIFS on more then one subsystem, however you can point users to the login form if SSO is not working. Take a look at this section of the Authentication Subsystems page:

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuring_the_Authentication_Chain

Re: Kerberos and passthru authentication chan

litie — Thu, 29 Mar 2012 21:17:37 GMT

Are you sure is it possible? For example, in that case:

authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

if kerberos failed ( pc out of domain) i'm not able to logon to the share because i cannot see any login form.

I don't understand…

please can you help me?

regards

Re: Kerberos and passthru authentication chan

ashex — Fri, 30 Mar 2012 20:24:11 GMT

At the end of Example 1 in the wiki page I linked it explains a bit about using the login page directly, this one:

http://localhost:8080/alfresco/faces/jsp/login.jsp

Re: Kerberos and passthru authentication chan

litie — Sat, 31 Mar 2012 13:01:43 GMT

Ok, but it's true for HTTP connection. What about CIFS?

Re: Kerberos and passthru authentication chan

ashex — Tue, 03 Apr 2012 20:14:12 GMT

Take a look at the wiki page I linked.