topic NTLM SSO with CMIS in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/ntlm-sso-with-cmis/m-p/301947#M255077 <HTML><HEAD></HEAD><BODY><SPAN>Hello,</SPAN><BR /><SPAN>I'm trying to set up a simple Alfresco installation with NTLM SSO authentication. Since this is for testing purposes, I’m free to use passthru or just alfrescoNtlm. I tried both possibilities and everything worked quite well with Alfresco share, i.e. I wasn’t prompted for my password when accessing </SPAN><A href="http://myalfrescoserver:8080/share" rel="nofollow noopener noreferrer">http://myalfrescoserver:8080/share</A><SPAN>. </SPAN><BR /><SPAN>Still, I get errors when trying to connect via CMIS: “Forbidden: Permission Denied” with OpenCmis and “Unauthorized” with DotCmis. Sadly, it doesn't say anything else. The only thing I found was in localhost_access-log : "GET /alfresco/cmisatom HTTP/1.1" 401 995.</SPAN><BR /><SPAN>Looking at this thread:&nbsp; </SPAN><A href="http://stackoverflow.com/questions/10519347/how-to-access-cmis-without-a-password" rel="nofollow noopener noreferrer">http://stackoverflow.com/questions/10519347/how-to-access-cmis-without-a-password</A><SPAN>&nbsp; it should definitely work somehow?</SPAN><BR /><SPAN>I’m new to the whole authentification business so I’m unsure whether or not I made the right changes in alfresco-global.properties or if there are changes (except for share-config-custom.xml) needed to be done in other files for CMIS to work correctly. Or could it be that this problem stems from a completely different point in my infrastructure?</SPAN><BR /><BR /><SPAN>This is the corresponding part of my alfresco-global.properties:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />ntlm.authentication.sso.enabled=true<BR />authentication.chain=passthru1:passthru,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap<BR /><BR />passthru.authentication.sso.enabled=true<BR />passthru.authentication.allowGuestLogin=false<BR />passthru.authentication.authenticateCIFS=false<BR />passthru.authentication.authenticateFTP=false<BR /><BR />passthru.authentication.servers=myldapserver.com<BR />passthru.authentication.domain=<BR />passthru.authentication.useLocalServer=false<BR />passthru.authentication.defaultAdministratorUserNames=Administrator<BR />passthru.authentication.connectTimeout=5000<BR />passthru.authentication.offlineCheckInterval=300<BR />passthru.authentication.protocolOrder=TCPIP,NETBIOS<BR /><BR />ldap.authentication.active=false<BR />ldap.authentication.java.naming.security.authentication=simple<BR />ldap.authentication.userNameFormat=%s<BR />ldap.authentication.allowGuestLogin=false<BR />ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://myldapserver.com:389<BR /><BR />ldap.authentication.escapeCommasInBind=false<BR />ldap.authentication.escapeCommasInUid=false<BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'<BR /><BR />ldap.synchronization.active=true<BR />ldap.synchronization.java.naming.security.principal=myldapusername<BR />ldap.synchronization.java.naming.security.credentials=myldappassword<BR />ldap.synchronization.queryBatchSize=1000<BR />ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass=group)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.personQuery=(&amp;(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))<BR />ldap.synchronization.personDifferentialQuery=(&amp; (objectclass=user)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.groupQuery=(objectclass\=group)<BR /><BR />ldap.synchronization.groupSearchBase=OU=Alfresco,DC=mydomain,DC=com<BR />ldap.synchronization.userSearchBase=OU=Alfresco,DC=mydomain,DC=com<BR /><BR />ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp<BR /><BR />ldap.synchronization.userIdAttributeName=sAMAccountName<BR />ldap.synchronization.userFirstNameAttributeName=givenName<BR />ldap.synchronization.userLastNameAttributeName=sn<BR />ldap.synchronization.userEmailAttributeName=mail<BR />ldap.synchronization.userOrganizationalIdAttributeName=msExchALObjectVersion<BR />ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider<BR />ldap.synchronization.groupIdAttributeName=cn<BR />ldap.synchronization.groupType=group<BR />ldap.synchronization.personType=user<BR />ldap.synchronization.groupMemberAttributeName=member<BR /><BR />synchronization.synchronizeChangesOnly=true<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><BR /><SPAN>This is the code I use for CMIS (using DotCmis 0.6):</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />Dictionary&lt;string, string&gt; parameters = new Dictionary&lt;string, string&gt;();<BR />parameters[SessionParameter.AtomPubUrl] = "https://&lt;alfrescoserver&gt;:8443/alfresco/cmisatom";<BR />parameters[SessionParameter.BindingType] = BindingType.AtomPub;<BR />parameters[SessionParameter.AuthenticationProviderClass] = "DotCMIS.Binding.NtlmAuthenticationProvider";<BR /><BR />SessionFactory factory = SessionFactory.NewInstance();<BR />ISession session = factory.GetRepositories(parameters)[0].CreateSession();<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE></BODY></HTML> Thu, 22 May 2014 08:10:19 GMT antonia 2014-05-22T08:10:19Z NTLM SSO with CMIS https://connect.hyland.com/t5/alfresco-archive/ntlm-sso-with-cmis/m-p/301947#M255077 Hello,I'm trying to set up a simple Alfresco installation with NTLM SSO authentication. Since this is for testing purposes, I’m free to use passthru or just alfrescoNtlm. I tried both possibilities and everything worked quite well with Alfresco share, i.e. I wasn’t prompted for my password when acce Thu, 22 May 2014 08:10:19 GMT https://connect.hyland.com/t5/alfresco-archive/ntlm-sso-with-cmis/m-p/301947#M255077 antonia 2014-05-22T08:10:19Z Re: NTLM SSO with CMIS https://connect.hyland.com/t5/alfresco-archive/ntlm-sso-with-cmis/m-p/301948#M255078 <HTML><HEAD></HEAD><BODY><SPAN>I've the same issue, did you found the solution?</SPAN><BR /><BR /><SPAN>(a little bump for this one)</SPAN></BODY></HTML> Mon, 27 Oct 2014 15:04:47 GMT https://connect.hyland.com/t5/alfresco-archive/ntlm-sso-with-cmis/m-p/301948#M255078 prignony 2014-10-27T15:04:47Z