topic Kerberos Authentication 5.0.a in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/kerberos-authentication-5-0-a/m-p/283765#M236895 <HTML><HEAD></HEAD><BODY><SPAN>Hi, </SPAN><BR /><BR /><SPAN>I have been struggling for a few days trying to get Alfresco Community 5.0.a to work with Kerberos on a Windows Server 2008r2 domain. </SPAN><BR /><BR /><BR /><SPAN>I have installed the JCE files to support AES256-SHA1 and followed the instructions here : </SPAN><BR /><BR /><A href="http://docs.alfresco.com/community/tasks/auth-kerberos-ADconfig.html" rel="nofollow noopener noreferrer">http://docs.alfresco.com/community/tasks/auth-kerberos-ADconfig.html</A><BR /><BR /><BR /><BR /><SPAN>This is the Error I get in the log file when starting the Server: </SPAN><BR /><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />15:11:37,170 ERROR [org.alfresco.web.site.servlet.SSOAuthenticationFilter] [localhost-startStop-1] HTTP Kerberos web filter error<BR />javax.security.auth.login.LoginException: No LoginModules configured for ShareHTTP<BR />&nbsp;&nbsp;&nbsp;at javax.security.auth.login.LoginContext.init(LoginContext.java:272)<BR />&nbsp;&nbsp;&nbsp;at javax.security.auth.login.LoginContext.&lt;init&gt;(LoginContext.java:425)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.site.servlet.SSOAuthenticationFilter.init(SSOAuthenticationFilter.java:298)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterConfig.initFilter(ApplicationFilterConfig.java:279)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:260)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterConfig.&lt;init&gt;(ApplicationFilterConfig.java:105)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:4809)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5485)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:632)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1073)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1857)<BR />&nbsp;&nbsp;&nbsp;at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)<BR />&nbsp;&nbsp;&nbsp;at java.util.concurrent.FutureTask.run(FutureTask.java:262)<BR />&nbsp;&nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<BR />&nbsp;&nbsp;&nbsp;at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<BR />&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Thread.java:745)<BR /><BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>I also Receive a 404 page when navigating to </SPAN><A href="http://alfresco:9090/share" rel="nofollow noopener noreferrer">http://alfresco:9090/share</A><SPAN> (I change the default port numbers)</SPAN><BR /><BR /><SPAN>Changing the "share-config-custom.xml" back to the original will remove the 404 page. </SPAN><BR /><BR /><SPAN>This is a section of my "share-config-custom.xml" file. </SPAN><BR /><SPAN>&lt;code&gt;</SPAN><BR /><SPAN> &lt;config evaluator="string-compare" condition="Kerberos" replace="true"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;kerberos&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Password for HTTP service account.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The account name *must* be built from the HTTP server name, in the format :</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HTTP/&lt;server_name&gt;@&lt;realm&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (NB this is because the web browser requests an ST for the</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HTTP/&lt;server_name&gt; principal in the current realm, so if we're to decode</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; that ST, it has to match.)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;password&gt;mypassword&lt;/password&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Kerberos realm and KDC address.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;realm&gt;DS.MYCOMPANY.COM&lt;/realm&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Service Principal Name to use on the repository tier.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; This must be like: HTTP/host.name@REALM</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;</SPAN><BR /><SPAN><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;endpoint-spn&gt;</SPAN><A class="jive-link-email-small" href="mailto:HTTP/ALFRESCO.ds.mycompany.com@DS.MYCOMPANY.COM" rel="nofollow noopener noreferrer">HTTP/ALFRESCO.ds.mycompany.com@DS.MYCOMPANY.COM</A><SPAN>&lt;/endpoint-spn&gt;</SPAN></SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; JAAS login configuration entry name.</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; –&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;config-entry&gt;ShareHTTP&lt;/config-entry&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/kerberos&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp; &lt;/config&gt;</SPAN><BR /><SPAN>&lt;code&gt;</SPAN><BR /><BR /><BR /><BR /><BR /><SPAN>Could someone please help me? </SPAN><BR /><BR /><SPAN>Josh </SPAN><BR /><BR /><BR /><BR /><BR /></BODY></HTML> Mon, 07 Jul 2014 15:17:39 GMT jwright 2014-07-07T15:17:39Z Kerberos Authentication 5.0.a https://connect.hyland.com/t5/alfresco-archive/kerberos-authentication-5-0-a/m-p/283765#M236895 Hi, I have been struggling for a few days trying to get Alfresco Community 5.0.a to work with Kerberos on a Windows Server 2008r2 domain. I have installed the JCE files to support AES256-SHA1 and followed the instructions here : http://docs.alfresco.com/community/tasks/auth-kerberos-ADconfig.htmlThi Mon, 07 Jul 2014 15:17:39 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-authentication-5-0-a/m-p/283765#M236895 jwright 2014-07-07T15:17:39Z Re: Kerberos Authentication 5.0.a https://connect.hyland.com/t5/alfresco-archive/kerberos-authentication-5-0-a/m-p/283766#M236896 <HTML><HEAD></HEAD><BODY><SPAN>You might want to include your configuration of your alfresco-global.properties file. If you haven't configured this part than that is your issue. </SPAN></BODY></HTML> Mon, 07 Jul 2014 15:48:05 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-authentication-5-0-a/m-p/283766#M236896 eswbitto 2014-07-07T15:48:05Z