Share SSO with Kerberos AD

jackjm — Wed, 05 Jun 2013 19:24:12 GMT
Hello all,I am trying to implement SSO for share using Kerberos AD and followed the directions listed in the official documentation at docs.alfresco.com. I keep getting the following exception 2013-06-05 12:02:30,998 WARN [site.servlet.KerberosSessionSetupPrivilegedAction] [http-80-3] Caught GSS E
Re: Share SSO with Kerberos AD

jackjm — Fri, 07 Jun 2013 22:57:00 GMT
I don't know if it matters but I see the following messages before the exception

2013-06-05 12:03:34,436  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-4] Authentication not required (user), chaining …
 2013-06-05 12:03:34,436  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] New Kerberos auth request from 10.1.100.180 (10.1.100.180:64546)
 2013-06-05 12:03:34,452  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-4] Authentication not required (user), chaining …
 2013-06-05 12:03:34,467  INFO  [web.site.EditionInterceptor] [http-80-5] Successfully retrieved license information from Alfresco.
 2013-06-05 12:03:34,483  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-4] Authentication not required (user), chaining …
 2013-06-05 12:03:34,749  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-4] Authentication not required (filter), chaining …
 2013-06-05 12:03:34,749  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (filter), chaining …
 2013-06-05 12:03:34,811  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (filter), chaining …
 2013-06-05 12:03:34,858  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (filter), chaining …
 2013-06-05 12:03:34,936  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:35,030  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,061  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,124  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,139  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,155  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,186  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,217  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,233  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,249  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,264  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,280  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,295  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,311  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,327  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,342  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,358  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,374  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,389  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,405  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,420  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,436  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,452  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,467  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,483  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,639  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,655  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (filter), chaining …
 2013-06-05 12:03:35,702  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:35,999  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:36,624  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:36,889  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:36,983  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:37,014  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-6] Authentication not required (user), chaining …
 2013-06-05 12:03:37,030  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-7] Authentication not required (user), chaining …
 2013-06-05 12:03:37,061  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (user), chaining …
 2013-06-05 12:03:37,092  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-10] Authentication not required (user), chaining …
 2013-06-05 12:03:37,108  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-8] Authentication not required (user), chaining …
 2013-06-05 12:03:37,108  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-6] Authentication not required (user), chaining …
 2013-06-05 12:03:37,155  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:37,217  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-8] Authentication not required (user), chaining …
 2013-06-05 12:03:37,374  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-10] Authentication not required (user), chaining …
 2013-06-05 12:03:38,374  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (user), chaining …
 2013-06-05 12:03:38,780  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-9] Authentication not required (user), chaining …
 2013-06-05 12:03:38,796  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-6] Authentication not required (user), chaining …
 2013-06-05 12:03:38,811  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-6] Authentication not required (user), chaining …
 2013-06-05 12:03:38,952  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-5] Authentication not required (user), chaining …
 2013-06-05 12:03:38,967  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-1] Authentication not required (user), chaining …
 2013-06-05 12:03:39,077  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-9] Authentication not required (user), chaining …
 2013-06-05 12:03:39,092  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-3] Authentication not required (user), chaining …
 2013-06-05 12:03:39,124  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-3] Authentication not required (user), chaining …
 2013-06-05 12:03:39,421  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-2] Authentication not required (user), chaining …
 2013-06-05 12:03:39,421  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-6] Authentication not required (user), chaining …
 2013-06-05 12:03:39,796  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-11] Authentication not required (user), chaining …
 2013-06-05 12:03:39,811  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-2] Authentication not required (user), chaining …
 2013-06-05 12:03:39,874  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-12] Authentication not required (user), chaining …
 2013-06-05 12:03:39,889  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-13] Authentication not required (user), chaining …
 2013-06-05 12:03:39,936  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-11] Authentication not required (user), chaining …
 2013-06-05 12:03:39,952  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-12] Authentication not required (user), chaining …
 2013-06-05 12:03:42,733  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-10] Authentication not required (user), chaining …
2013-06-05 12:03:42,780  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-80-10] New Kerberos auth request from machine.ip (ma.ch.ine.ip:64613)
 Checksum failed !
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍
Any suggestions are greatly appreciated since this one of the last steps for deploying the community edition across the company and then hopefully purchasing the enterprise edition.

thanks a lot for your time
topic Re: Share SSO with Kerberos AD in Alfresco Archive

Share SSO with Kerberos AD

Re: Share SSO with Kerberos AD
