Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

rglauser — Fri, 29 Jan 2016 18:54:28 GMT

HiI have problems to connect to alfresco with LDAP-Users. I activated Kerberos authentication which works perfectly for CIFS and HTTP Share. Users are synced also correctly with my LDAP configuration.My problem is now, that Kerberos-Usernames and LDAP-Usernames are not in sync, so I cannot login on

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

rglauser — Tue, 09 Feb 2016 12:08:00 GMT

Hi again

I tried different things to solve my problem with Alfresco Mobile Application on Android but I am still not able to login even though Login is working correctly with the browser by using UID as Login-ID. Also Kerberos authentication for CIFS and Share SSO is working.

When I try to login with Alfresco Mobil I get the following error in the log:

2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Unknown SPNEGO token type
2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Clearing session.
2016-02-09 12:52:04,722 DEBUG [app.servlet.KerberosAuthenticationFilter] [ajp-apr-8009-exec-9] Issuing login challenge to browser.

It seems, that the mobil-application does not find the alfresco user (synced to alfresco with ldap) when I try to login with UID. In Browser Share I also use the same username and it works perfectly. For kerberos the authentication is done with UID@DOMAIN.LOCAL. This works also for the mobile application but this is not what I expect because, then a new independent user with UID@DOMAIN.LOCAL is created automatically in Alfresco.

My authentication-chain looks as followed:

authentication.chain=ldap-ad1:ldap-ad,kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm

As I understand the online-descriptions in docs.alfresco.com, ldap shout be used before kerberos to authenticate the user. But why the ldap-authentication is not working in the mobile-app but it is in the browser share?

Hope someone can help me to find the reason of my problem or what could I do to debug this situation?

Thank you very much.

Best regards,
René

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

mikeh — Sat, 13 Feb 2016 00:13:26 GMT

You need to give more information: which exact version of Alfresco are you using? Have you tested with CMIS Workbench using HTTP Basic auth?

Thanks,
Mike

topic Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync in Alfresco Archive

Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync

Re: Authentication problem with Alfresco Mobil with Kerberos authentication and LDAP sync