topic Re: NTLM Passthru in Alfresco Archive

NTLM Passthru

burner — Thu, 08 Feb 2007 13:17:28 GMT

Hii bought the Alfresco book and hoped, that this helps me with NTLM Passthru but it isnt really explained there how to configure.In the wiki i read about the ntlm.Do i have to uncommet the lines in the web.xml when i want to have NTLM passthru?And then i have to rename the ntlm…sample into ntlm…xml

Re: NTLM Passthru

ejml — Thu, 22 Feb 2007 09:12:15 GMT

Comment this line:


<!–
<property name="useLocalServer">
<value>false</value>
</property> 
–>
‍‍‍‍‍‍‍

Greetings

Re: NTLM Passthru

burner — Thu, 22 Feb 2007 13:58:23 GMT

I tried that but i get this ERROR MEssage:

INFO: Server startup in 40423 ms
22.02.2007 14:55:08 org.apache.catalina.loader.WebappClassLoader loadClass
INFO: Illegal access: this web application instance has been stopped already. Could not load java.io.FileDescriptor. The eventual following stack trace is caused by an error thrown for debugging purposes as well as to attempt to terminate the thread which caused the illegal access, and has no functional impact.

What am i supposed to do!
I commented that line.

Re: NTLM Passthru

ejml — Thu, 22 Feb 2007 14:20:43 GMT

What alfresco's version you use ?

Re: NTLM Passthru

burner — Thu, 22 Feb 2007 14:49:36 GMT

Oh hi! I use 1.4!

Re: NTLM Passthru

ejml — Thu, 22 Feb 2007 15:57:59 GMT

comment the domain:


<bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <!–
        <property name="domain">
            <value>domain</value>
        </property>
        –>
        <property name="servers">
            <value>xxx.xxx.xxx.xxx,xxx.xxx.xxx.xxx</value>
        </property>
        <!–
        <property name="useLocalServer">
            <value>true</value>
        </property>
        –>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

You must create the file file-servers-custom.xml with the next content:


<config evaluator="string-compare" condition="Filesystem Security" replace="true"> 
       <authenticator type="passthru"> 
          <Server>xxx.xxx.xxx.xxx</Server> 
       </authenticator> 
   </config>
   
   <config evaluator="string-compare" condition="Filesystems" replace="true">

      <filesystems>
      
          <!– Default share –>
         <filesystem name="Alfresco">
   
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>
   
            <!– Enable Web client launch shortcut in all folders –>
            <urlFile>
   
               <!– Change the filename as required, keeping the .url extension –>
               <filename>_Alfresco.url</filename>
   
               <!– Change 'localhost' to the name or IP of the Alfresco server –>
               <webpath>http://localhost:8080/alfresco/</webpath>
   
            </urlFile>
   
         </filesystem>
      </filesystems>
      
   </config>

   <!– Allow guest access to file systems –>
   <config evaluator="string-compare" condition="Filesystem Security">

      <authenticator type="alfresco">
         <allowGuest/>
         <!– Map any unknown user to guest –>
         <!–
         <mapUnknownUserToGuest/>
         –>
      </authenticator>

   </config>

</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: NTLM Passthru

burner — Thu, 22 Feb 2007 16:31:05 GMT

Hi thanx for the reply but in my extension folder i have two file-server-custom.xml.

One is with xml at the and and the other is with sample, so i guess i take the first one.
But what about the domain?when i comment the servers and the domain like you got it and add the servers into the file-custom….
there is no information about the Domain.

And why isnt it explained like that on the wiki?

Well but thank you that youre helping me:-)

Re: NTLM Passthru

ejml — Thu, 22 Feb 2007 17:03:22 GMT

I followed the wiki's instruction and it doesn't work.

On file-servers-custom.xml you say what server is the DC for passthru, I don't have the domain information and my configuratoin work fine.

Greetings.

Re: NTLM Passthru

burner — Fri, 23 Feb 2007 15:08:03 GMT

Hi i tried what you told me. I changed the file-server-custom.xml and i adjust the web.xml.But i still got this error:

net.sf.acegisecurity.AuthenticationServiceException: Failed to open passthru auth session

Details verbergen

net.sf.acegisecurity.AuthenticationServiceException: Failed to open passthru auth session
at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:757)
at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:514)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
at $Proxy16.authenticate(Unknown Source)
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType1(NTLMAuthenticationFilter.java:507)
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:385)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:868)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:663)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)

Re: NTLM Passthru

ejml — Fri, 23 Feb 2007 18:22:28 GMT

Have you enable NTLMAuthentication in web.xml?
Have you a proxy or firewal between Alfresco Server and Domain Controller?

Re: NTLM Passthru

burner — Sat, 24 Feb 2007 12:52:04 GMT

Yes i have enabled NTLM in the web.xml.

Well Alfresco is running in a company domain so there is no firewall between Alfresco and DC but we use a prxy server!

Re: NTLM Passthru

gary_spencer — Wed, 07 Mar 2007 12:26:23 GMT

Hi,

Could you send me your alfresco.log file so I can see some of the passthru authentication startup where it should try to contact the configured servers.

Which ports are you proxying between Alfresco and the DC ?.

Cheers

Gary

Re: NTLM Passthru

burner — Wed, 07 Mar 2007 13:05:51 GMT

Hi i read the last days through other topics and i changed the name from the bean like in the wiki now and took out the domain property from the bean.So right now i come through.well i had to disable my ntlm security service on my pc too.

I have some cifs errors right now and try to fix them today but thank you.

I ll post when i have a new problem:-)

Thanx

Re: NTLM Passthru

burner — Wed, 07 Mar 2007 16:24:28 GMT

This is my error now with ntlm:

org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required

Details verbergen

org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required
at org.alfresco.repo.transaction.AlfrescoTransactionSupport.registerSynchronizations(AlfrescoTransactionSupport.java:371)
at org.alfresco.repo.transaction.AlfrescoTransactionSupport.getSynchronization(AlfrescoTransactionSupport.java:356)
at org.alfresco.repo.transaction.AlfrescoTransactionSupport.bindDaoService(AlfrescoTransactionSupport.java:210)
at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:66)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
at $Proxy1.getNode(Unknown Source)
at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:160)
at sun.reflect.GeneratedMethodAccessor145.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:221)
at $Proxy2.exists(Unknown Source)
at sun.reflect.GeneratedMethodAccessor145.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
at org.alfresco.repo.node.MLPropertyInterceptor.invoke(MLPropertyInterceptor.java:227)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
at $Proxy3.exists(Unknown Source)
at org.alfresco.repo.security.person.PersonServiceImpl.getPersonOrNull(PersonServiceImpl.java:202)
at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:155)
at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:840)
at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:521)
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:727)
at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:400)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)

Hmm i dont get it, when i go on the full adress http://localhost:8080/alfrescofaces/jsp/login.jsp i can log in but when i go on

http://localhost:8080/alfresco

i get this error message (because its the SSO) but why?

Re: NTLM Passthru

andy — Thu, 08 Mar 2007 08:50:05 GMT

Hi

This is a bug in the 2.0 community edition.

http://issues.alfresco.com/browse/AR-1263

Andy

Re: NTLM Passthru

burner — Thu, 08 Mar 2007 14:44:00 GMT

Hi oh i dont understand what i have to do to fix it!

Svn dont work!

But i go through http and i found that java file. But i guess i have to compile it and put into a jarfile right?

But which one iand can i just compile and change the files?

Re: NTLM Passthru

diegolaranjeira — Fri, 01 Aug 2008 13:05:44 GMT

I have the same problem
Somebody help please