topic Re: CIFS Kerberos issue in Alfresco Archive

CIFS Kerberos issue

gmccullough — Tue, 22 Apr 2014 18:47:44 GMT

I'm getting the following error in the logs when trying to connect to the cifs server from windows: 2014-04-22 12:55:49,696 ERROR [auth.cifs.EnterpriseCifsAuthenticator] [AlfJLANWorker10] No authentication mechanism for SPNEGO foundKerberos login from Share interface works fine.Have the following c

Re: CIFS Kerberos issue

gmccullough — Wed, 23 Apr 2014 14:28:00 GMT

Like I said, logging in from Share app with my AD creds works fine. I noticed in the logs that it successfully logs into the HTTP principal twice, don't know if that is normal or not…


2014-04-23 09:23:08,055  DEBUG [app.servlet.KerberosAuthenticationFilter] [localhost-startStop-1] Processing the JAAS callback list of 1 items.
 2014-04-23 09:23:08,056  DEBUG [app.servlet.KerberosAuthenticationFilter] [localhost-startStop-1] Request for password.
 2014-04-23 09:23:08,065  DEBUG [app.servlet.KerberosAuthenticationFilter] [localhost-startStop-1] HTTP Kerberos login successful
 2014-04-23 09:23:08,065  DEBUG [app.servlet.KerberosAuthenticationFilter] [localhost-startStop-1] Logged on using principal HTTP/yeti.ad.clintonok.gov@AD.CLINTONOK.GOV
 2014-04-23 09:23:08,133  INFO  [management.subsystems.ChildApplicationContextFactory] [asynchronouslyRefreshedCacheThreadPool1] Starting 'Search' subsystem, ID: [Search, managed, solr]
 2014-04-23 09:23:08,532  INFO  [management.subsystems.ChildApplicationContextFactory] [asynchronouslyRefreshedCacheThreadPool1] Startup of 'Search' subsystem, ID: [Search, managed, solr] complete
 2014-04-23 09:23:09,091  DEBUG [webdav.auth.KerberosAuthenticationFilter] [localhost-startStop-1] Processing the JAAS callback list of 1 items.
 2014-04-23 09:23:09,091  DEBUG [webdav.auth.KerberosAuthenticationFilter] [localhost-startStop-1] Request for password.
 2014-04-23 09:23:09,097  DEBUG [webdav.auth.KerberosAuthenticationFilter] [localhost-startStop-1] HTTP Kerberos login successful
 2014-04-23 09:23:09,098  DEBUG [webdav.auth.KerberosAuthenticationFilter] [localhost-startStop-1] Logged on using principal HTTP/yeti.ad.clintonok.gov@AD.CLINTONOK.GOV
 2014-04-23 09:23:09,114  INFO  [management.subsystems.ChildApplicationContextFactory] [localhost-startStop-1] Startup of 'Authentication' subsystem, ID: [Authentication, managed, kerberos1] complete
‍‍‍‍‍‍‍‍‍‍‍‍‍

Also tried installing samba and joining the machine to the AD, but still have same results.

Re: CIFS Kerberos issue

gmccullough — Thu, 08 May 2014 13:12:32 GMT

I guess I'll just revert back to passthru, which I've been able to make work in the past. Nobody has any clue?

Re: CIFS Kerberos issue

gmccullough — Tue, 20 May 2014 14:24:28 GMT

OK, couldn't give up, finally was able to make it work. Removed samba from the machine, just to be sure. Had to adjust the krb5.conf to add rc4-hmac enctypes, and lastly, removed the "A" from the cifs name property. I guess that's there for windows installs, by default, but is working for me on a linux install without the A.
I probably just had a typo somewhere.

If this might help someone, I'll gladly post the relevant configs.

Re: CIFS Kerberos issue

sudheer424 — Sat, 23 May 2015 12:11:08 GMT

I have followed the documentation to set up kerberos for AD authentication .There are no errors found in the log file during startup of alfresco services.The web application is working fine.However when i access from windows 7 machine connected to AD(Microsoft 2008 R2 server)the CIFS shared folders i get an error as shown in the image.I have implemented Alfresco on Ubuntu server.

Any suggestions on this issue,and also please post your config files.

Thank You,
Sudheer