topic Re: enable SSO in Alfresco Archive

enable SSO

christian1980 — Wed, 07 Dec 2011 08:11:40 GMT

Hello,I'm currently trying to configure SSO in alfresco and share 4.0.For now I've already installed active directory synchronization and it's working. Now I'm trying to configure SSO but I can't find an easy step by step tutorial for version 4.Where can I find such information ? The doc is not expl

Re: enable SSO

throwback — Fri, 16 Dec 2011 12:50:19 GMT

Hi Christian,

I managed this recently on an AD 2003 based domain, but using Ubuntu 10.04 as the platform, using MySql as database. I started by using the stack installer and then worked from there.

I could see no real benefits to using windows server, although I am sure more knowledgeable users here can correct me!

I went for ldap synch and kerberos authentication. How far have you got so far?

I have taken extensive notes also.

I found the trick is to build your authentication chain up gradually in layers- get ldap-ad sync/auth working first, then add kerberos and disable ldap Auth, let ldap sync users and kerberos handle authentication. Also, be completely uncompromising about documenting every single change you make to the configuration, and take copious backups. I built up on a VM and ended up with about 30 snapshots.

Main guide I followed was:

http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-kerberos-ADconfig.html

I ended up putting all my authentication configuration etc in ./tomcat/shared/classes/alfresco-global.properties

Ignore guides for anything earlier than 3.4, try to stay close to the alfresco 4.0 documentation linked above. I wasted a lot of time following obsolete documentation.

Kind regards,

Iain Bagnall

Re: enable SSO

gronfelt — Tue, 03 Jan 2012 09:07:26 GMT

Which variant have you considered for SSO? NTLM or Kerberos?

I've managed to set up NTLM SSO with the passthru subsystem in Alfresco running on Win 2k8r2. However, since that requires NTLMv1 I decided to go with Kerberos instead. I never got that working in Windows, so instead I installed Alfresco on a Linux server (CentOS) and then everything works.

So, please let us know what your intentions are and how far you've gotten.