Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

rglauser — Fri, 29 Jan 2016 18:54:28 GMT

HiI have problems to connect to alfresco with LDAP-Users. I activated Kerberos authentication which works perfectly for CIFS and HTTP Share. Users are synced also correctly with my LDAP configuration.My problem is now, that Kerberos-Usernames and LDAP-Usernames are not in sync, so I cannot login on

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

rglauser — Tue, 09 Feb 2016 12:08:00 GMT

Hi again

I tried different things to solve my problem with Alfresco Mobile Application on Android but I am still not able to login even though Login is working correctly with the browser by using UID as Login-ID. Also Kerberos authentication for CIFS and Share SSO is working.

When I try to login with Alfresco Mobil I get the following error in the log:

2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Unknown SPNEGO token type
2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Clearing session.
2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Issuing login challenge to browser.

It seems, that the mobil-application does not find the alfresco user (synced to alfresco with ldap) when I try to login with UID. In Browser Share I also use the same username and it works perfectly. For kerberos the authentication is done with UID@DOMAIN.LOCAL. This works also for the mobile application but this is not what I expect because, then a new independent user with UID@DOMAIN.LOCAL is created automatically in Alfresco.

My authentication-chain looks as followed:

authentication.chain=ldap-ad1:ldap-ad,kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm

As I understand the online-descriptions in docs.alfresco.com, ldap shout be used before kerberos to authenticate the user. But why the ldap-authentication is not working in the mobile-app but it is in the browser share?

Hope someone can help me to find the reason of my problem or what could I do to debug this situation?

Thank you very much.

Best regards,
René

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

mikeh — Sat, 13 Feb 2016 00:13:26 GMT

You need to give more information: which exact version of Alfresco are you using? Have you tested with CMIS Workbench using HTTP Basic auth?

Thanks,
Mike

topic Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync in Alfresco Archive

Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync