topic Workaround for ALF-21129? in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/workaround-for-alf-21129/m-p/299323#M252453 <HTML><HEAD></HEAD><BODY><SPAN>Hello to all,</SPAN><BR /><BR /><SPAN>We are working on an internal project on Alfresco CE 4.2.f. For this project,</SPAN><BR /><SPAN>I am trying to access the CMIS 1.1 browser bindings via javascript on a</SPAN><BR /><SPAN>Cross-Origin (CORS) setup, using JQuery.ajax with a</SPAN><BR /><SPAN>&nbsp; "xhrFields: {withCredentials=true}"</SPAN><BR /><SPAN>setting. Our settings for the rest of Alfresco (and share) includes NTLM,</SPAN><BR /><SPAN>which works fine.</SPAN><BR /><BR /><SPAN>This triggers </SPAN><A href="https://issues.alfresco.com/jira/browse/ALF-21129" rel="nofollow noopener noreferrer">https://issues.alfresco.com/jira/browse/ALF-21129</A><SPAN>, which is as yet</SPAN><BR /><SPAN>unresolved.</SPAN><BR /><BR /><SPAN>By my findings, Firefox and Mozilla pop up an authentication dialog (which, at</SPAN><BR /><SPAN>least, provides for authentication albeit with a degraded user experience), whereas</SPAN><BR /><SPAN>MSIE fails altogether the connection, at least with my current settings (I have</SPAN><BR /><SPAN>read of a modified setting here:</SPAN><BR /><SPAN> </SPAN><A href="http://stackoverflow.com/questions/20614809/cors-authentication-in-internet-explorer-using-jquery" rel="nofollow noopener noreferrer">http://stackoverflow.com/questions/20614809/cors-authentication-in-internet-explorer-using-jquery</A><BR /><SPAN>), which however is unacceptable for our case, since it would require all users</SPAN><BR /><SPAN>to make changes to their IE settings, even for a pilot tryout.</SPAN><BR /><BR /><SPAN>Since we have NTLM Authentication on and working (and we are also in the way of</SPAN><BR /><SPAN>setting up Kerberos/SSPNEG), we would like to have NTLM and/or SSPNEG working</SPAN><BR /><SPAN>for the CMIS 1.1 browser binding, too.</SPAN><BR /><BR /><SPAN>My question is, has anyone worked around ALF-21129 and managed to provide e.g. NTLM</SPAN><BR /><SPAN>(or SSPNEG) authentication for the CMIS 1.1 browser binding on 4.2? Our demo setup</SPAN><BR /><SPAN>runs on Tomcat, so even a Tomcat-specific workaround would be acceptable at this</SPAN><BR /><SPAN>point.</SPAN><BR /><BR /><SPAN>Of course, I would be delighted to hear when a fix for ALF-21129 is scheduled, too,</SPAN><BR /><SPAN>and whether this will only be available for 5.0.</SPAN><BR /><BR /><SPAN>Regards,</SPAN><BR /><BR /><SPAN>Angelos</SPAN><BR /></BODY></HTML> Wed, 04 Mar 2015 16:32:18 GMT a_varvitsiotis 2015-03-04T16:32:18Z Workaround for ALF-21129? https://connect.hyland.com/t5/alfresco-archive/workaround-for-alf-21129/m-p/299323#M252453 Hello to all,We are working on an internal project on Alfresco CE 4.2.f. For this project,I am trying to access the CMIS 1.1 browser bindings via javascript on aCross-Origin (CORS) setup, using JQuery.ajax with a&nbsp; "xhrFields: {withCredentials=true}"setting. Our settings for the rest of Alfresco (and Wed, 04 Mar 2015 16:32:18 GMT https://connect.hyland.com/t5/alfresco-archive/workaround-for-alf-21129/m-p/299323#M252453 a_varvitsiotis 2015-03-04T16:32:18Z Re: Workaround for ALF-21129? https://connect.hyland.com/t5/alfresco-archive/workaround-for-alf-21129/m-p/299324#M252454 <HTML><HEAD></HEAD><BODY><SPAN>I am replying to my own post, to note that </SPAN><A href="https://issues.alfresco.com/jira/browse/ALF-21129" rel="nofollow noopener noreferrer">https://issues.alfresco.com/jira/browse/ALF-21129</A><BR /><SPAN>seems to have been fixed in 5.0.d which came out recently. We shall give it a testing shot.</SPAN><BR /><SPAN>Thanks to Kevin Roast for fixing it!</SPAN><BR /><BR /><SPAN>Regards,</SPAN><BR /><BR /><SPAN>Angelos</SPAN></BODY></HTML> Fri, 27 Mar 2015 03:59:47 GMT https://connect.hyland.com/t5/alfresco-archive/workaround-for-alf-21129/m-p/299324#M252454 a_varvitsiotis 2015-03-27T03:59:47Z