Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

mathias_lin — Tue, 02 Feb 2016 10:53:49 GMT

I try to add Alfresco 5.0.d CE as a Sharepoint place within MS Office Mobile (Android 5). Sharepoint protocol and online edit via Share generally works fine with MS Office desktop version. VTI is configured to run via https on port 7070 (as per http://blyx.com/2014/04/01/alfresco-tip-how-to-enable-s

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

eswbitto — Tue, 02 Feb 2016 16:59:31 GMT

What operating system are you running Alfresco on? Need these kind of details.

We are using Centos with apache as a reverse proxy and had to configure in a way for the mobile app to work. If you have a similar setup I can post the notes I have for it.

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

mathias_lin — Thu, 04 Feb 2016 15:13:00 GMT

I'm on Windows Server 2012 R2, with Alfresco 5.0.d CE. I have Alfresco running just on Tomcat (port 8080) without any reverse proxy / httpd in front.

<strong>Update:</strong>

I did setup a reverse proxy now (Apache httpd), but I still don't see how port 7070 fits in there exactly. I search for other posts, and contrary to the first blog I found, they usually use 443 as the external VTI port, and not 7070.

<ul>
<li> https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/ssl-sharepoint-behind-ngnix
<li> https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/proxy-spp-apache-and-ssl
<li> https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/sharepoint-protocol-over-ssl
<li> https://github.com/marsbard/puppet-alfresco/issues/18
</ul>

Now, this is my vti setting:


vti.server.port=7070
vti.server.protocol=http
vti.server.ssl.keystore=C:/Alfresco/alf_data/keystore/ssl.keystore
vti.server.ssl.password=kT9X6oe68t
vti.server.url.path.prefix=/alfresco
vti.server.external.host=drive.sorba.ch
vti.server.external.port=443
vti.server.external.protocol=https
vti.server.external.contextPath=/alfresco
‍‍‍‍‍‍‍‍‍‍‍

and this is the virtual host config:


<VirtualHost *:80>

   #LoadModule rewrite_module modules/mod_rewrite.so

   RewriteEngine   on
   RewriteCond     %{SERVER_PORT}   !^443$
   RewriteRule     ^(.*)$           https://alfresco.mycompany.ch/share$1       [R=301,NC,L]

</VirtualHost>

<VirtualHost *:443>
        ServerAdmin mlin@mycompany.ch
        ServerName alfresco.mycompany.ch

        # share is our default application
        Redirect / /share/

        # Possible values include: debug, info, notice, warn, error, crit, alert, emerg.
        LogLevel warn

        #   SSL Engine Switch:
        SSLEngine on

        SSLCertificateFile      /etc/ssl/certs/chainfile.domaincert.key.crt
        SSLCertificateKeyFile   /etc/ssl/private/Star_MyCompany.key
        SSLCertificateChainFile /etc/ssl/certs/chainfile.domaincert.key.crt

         <FilesMatch "\.(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>
        <Directory /usr/lib/cgi-bin>
                SSLOptions +StdEnvVars
        </Directory>


        # SSL Protocol Adjustments:
        BrowserMatch "MSIE [2-6]" \
                nokeepalive ssl-unclean-shutdown \
                downgrade-1.0 force-response-1.0
        # MSIE 7 and newer should be able to use keepalive
        BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown

        TimeOut 3600
        KeepAlive On

        # Einstellungen fuer den Alfresco-Tomcat
        AddDefaultCharset UTF-8

        # Einstellungen fuer den AJP Proxy
        ProxyPass               /alfresco       http://alfresco.mycompany.ch:8080/alfresco
        ProxyPassReverse        /alfresco       http://alfresco.mycompany.ch:8080/alfresco

        ProxyPass               /share          http://alfresco.mycompany.ch:8080/share
        ProxyPassReverse        /share          http://alfresco.mycompany.ch:8080/share

        <Proxy *>
           AddDefaultCharset on
           Order deny,allow
           Allow from all
       </Proxy>

</VirtualHost>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

How does the port 7070 configuration (ProxyPass, ProxyPassReverse) fit in here? In other forum postings, I also so some RuleConditions where they check for the client to be of "Microsoft Office" beforehand. Not sure how to proceed from here now. Thanks for any advice.

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

eswbitto — Fri, 05 Feb 2016 23:58:41 GMT

The reverse proxy really just handles the SSL handshake instead of allowing alfresco to do it. Usually you would have a direct connection from your alfresco server to your proxy server because that connection will not be SSL. I am about to leave the office, but on Tuesday (sorry long weekend) I can post notes I have for linux and see if you can incorporate that into your setup.

topic Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.' in Alfresco Archive

Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'

Re: Alfresco/Sharepoint and MS Office Mobile: 'We don't support this authentication scheme.'