NTLM authentication error Alfresco 2.0prev

hsantander — Mon, 29 Jan 2007 17:27:03 GMT

Hello allI have a problem with the new release of alfresco.I've been working on authentication with Alfresco 1.4. I use the LDAP export to get the users on alfresco. That works without problems with 1.4 and 2.0prev. When I try to log into alfresco on 1.4 using NTLM passtrouhgt it works, but the same

Re: NTLM authentication error Alfresco 2.0prev

gary_spencer — Tue, 30 Jan 2007 10:03:19 GMT

Hi,

Could you email me your authentication configuration XML files, plus the file-servers.xml and file-servers-custom.xml (if you have the custom file).

Thanks

Gary

Re: NTLM authentication error Alfresco 2.0prev

hsantander — Tue, 30 Jan 2007 16:26:52 GMT

Hello Gary

I already send you by email the files. I put it here too for document this problem in the forum.

When I first tried the url of the web client I get this errors:

javax.faces.FacesException: Cannot get value for expression '#{NavigationBean.companyHomeVisible}'
caused by:
org.apache.jasper.JasperException: Cannot get value for expression '#{NavigationBean.companyHomeVisible}'
caused by:
javax.faces.el.EvaluationException: Cannot get value for expression '#{NavigationBean.companyHomeVisible}'
caused by:
javax.faces.el.EvaluationException: org.alfresco.web.bean.NavigationBean
caused by:
javax.faces.el.EvaluationException: Bean: org.alfresco.web.bean.NavigationBean, property: companyHomeVisible
caused by:
java.lang.reflect.InvocationTargetException
caused by:
net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext‍‍‍‍‍‍‍‍‍‍‍‍‍

Then I use the Disconnect link at the botton of errors and the NTLM window (using firefox) ask me the user/password to authenticate. Then alfresco troughts the error about MD4.

org.alfresco.error.AlfrescoRuntimeException: Not implemented‍

The extension/custom-file-servers.xml (I haven't modified file-servers.xml):


<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>

   <config evaluator="string-compare" condition="CIFS Server" replace="true">
      <host name="${localname}_A"/>
      <comment>Alfresco CIFS Server</comment>

      <!– Set to the broadcast mask for the subnet –>
      <broadcast>255.255.255.255</broadcast>

      <!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –>
      <tcpipSMB platforms="linux,solaris,macosx"/>
      <netBIOSSMB platforms="linux,solaris,macosx"/>
      <hostAnnounce interval="5"/>

      <!– Use Win32 NetBIOS interface on Windows –>
      <Win32NetBIOS/>
      <Win32Announce interval="5"/>

      <WINS>
         <primary>10.226.128.46</primary>
      </WINS>

      <sessionDebug flags="Negotiate,Socket"/>
   </config>

   <config evaluator="string-compare" condition="Filesystems" replace="true">
      <filesystems>

         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

            <!– Add a URL file to each folder that links back to the web client –>
            <urlFile>
               <filename>__Alfresco.url</filename>
               <webpath>http://${localname}:8080/alfresco/</webpath>
            </urlFile>

            <!– Mark locked files as offline –>
            <offlineFiles/>

            <!– Desktop actions –>
<!–
            <desktopActions>
               <global>
                  <path>alfresco/desktop/Alfresco.exe</path>
                  <webpath>http://${localname}:8080/alfresco/</webpath>
               </global>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.CheckInOutDesktopAction</class>
                  <name>CheckInOut</name>
                  <filename>__CheckInOut.exe</filename>
               </action>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction</class>
                  <name>JavaScriptURL</name>
                  <filename>__ShowDetails.exe</filename>
                  <script>alfresco/desktop/showDetails.js</script>
                  <attributes>anyFiles</attributes>
                  <preprocess>copyToTarget</preprocess>
               </action>

            </desktopActions>
–>
<!–
            <accessControl default="Write">
               <user name="admin" access="Write"/>
               <address subnet="90.1.0.0" mask="255.255.0.0" access="Write"/>
            </accessControl>
–>
         </filesystem>
      </filesystems>
   </config>
   <config evaluator="string-compare" condition="Filesystem Security">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>TTTTHACIENDA_DO</Domain>
        </authenticator>
   </config>
</alfresco-config>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The extension/custom-authentication-services-context.xml:


<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>


<beans>
    <!– The person service.                                                –>

    <bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl">
                <property name="nodeService">
                    <ref bean="nodeService" />
                </property>
                <property name="searchService">
                    <ref bean="searchService" />
                </property>
                <property name="permissionServiceSPI">
                        <ref bean="permissionServiceImpl" />
                </property>
        <property name="authorityService">
           <ref bean="authorityService" />
        </property>
                <property name="namespacePrefixResolver">
                        <ref bean="namespaceService" />
                </property>
        <!– Configurable properties.                                 –>
        <!–                                                          –>
        <!– TODO:                                                    –>
        <!– Add support for creating real home spaces adn setting    –>
        <!– permissions on the hame space and people created.        –>
        <!–                                                          –>
        <!– The store in which people are persisted.                 –>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <!– Some authentication mechanisms may need to create people –>
        <!– in the repository on demand. This enables that feature.  –>
        <!– If dsiabled an error will be generated for missing       –>
        <!– people. If enabled then a person will be created and     –>
        <!– persisted.                                               –>
        <!– Valid values are                                         –>
        <!–     ${server.transaction.allow-writes}                   –>
        <!–     false                                                –>
        <property name="createMissingPeople">
<!–           <value>${server.transaction.allow-writes}</value> –>
                <value>false</value>
        </property>
                <property name="userNamesAreCaseSensitive">
          <value>${user.name.caseSensitive}</value>
        </property>
        <!– New properties after 1.4.0 to deal with duplicate user ids when found –>
        <property name="processDuplicates">
            <value>true</value>
        </property>
        <!– one of:  LEAVE, SPLIT, DELETE –>
        <property name="duplicateMode">
            <value>SPLIT</value>
        </property>
        <property name="lastIsBest">
            <value>true</value>
        </property>
        <property name="includeAutoCreated">
            <value>false</value>
        </property>
    </bean>

    <bean name="homeFolderManager" class="org.alfresco.repo.security.person.HomeFolderManager">
        <property name="nodeService">
                    <ref bean="nodeService" />
                </property>
        <property name="policyComponent">
                    <ref bean="policyComponent" />
                </property>
        <property name="defaultProvider">
                    <ref bean="personalHomeFolderProvider" />
                </property>
    </bean>

    <bean name="companyHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider">
        <property name="serviceRegistry">
                    <ref bean="ServiceRegistry" />
                </property>
        <property name="path">
           <value>/${spaces.company_home.childname}</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
                        <ref bean="homeFolderManager" />
                </property>
    </bean>

    <bean name="guestHomeFolderProvider" class="org.alfresco.repo.security.person.ExistingPathBasedHomeFolderProvider">
        <property name="serviceRegistry">
                    <ref bean="ServiceRegistry" />
                </property>
        <property name="path">
           <value>/${spaces.company_home.childname}/${spaces.guest_home.childname}</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
                        <ref bean="homeFolderManager" />
                </property>
        <property name="userPemissions">
            <set>
                <value>Consumer</value>
            </set>
        </property>
    </bean>

    <bean name="bootstrapHomeFolderProvider" class="org.alfresco.repo.security.person.BootstrapHomeFolderProvider">
        <property name="homeFolderManager">
                        <ref bean="homeFolderManager" />
                </property>
    </bean>

    <bean name="personalHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider">
        <property name="serviceRegistry">
                    <ref bean="ServiceRegistry" />
                </property>
        <property name="path">
<!–           <value>/${spaces.company_home.childname}</value> –>
                <value>/${spaces.company_home.childname}/cm:Usuarios</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
                        <ref bean="homeFolderManager" />
                </property>
        <property name="inheritsPermissionsOnCreate">
            <value>false</value>
        </property>
        <property name="ownerPemissionsToSetOnCreate">
            <set>
                <value>All</value>
            </set>
        </property>
        <property name="userPemissions">
            <set>
                <value>All</value>
            </set>
        </property>
    </bean>

        <bean name="userHomesHomeFolderProvider" class="org.alfresco.repo.security.person.UIDBasedHomeFolderProvider">
        <property name="serviceRegistry">
                    <ref bean="ServiceRegistry" />
                </property>
        <property name="path">
           <value>/${spaces.company_home.childname}/${spaces.user_homes.childname}</value>
        </property>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <property name="homeFolderManager">
                        <ref bean="homeFolderManager" />
                </property>
        <property name="inheritsPermissionsOnCreate">
            <value>false</value>
        </property>
        <property name="ownerPemissionsToSetOnCreate">
            <set>
                <value>All</value>
            </set>
        </property>
        <property name="userPemissions">
            <set>
                <value>All</value>
            </set>
        </property>
    </bean>

    <!– The ticket component.                                              –>
    <!– Used for reauthentication                                          –>
    <bean id="ticketComponent" class="org.alfresco.repo.security.authentication.InMemoryTicketComponentImpl">
        <property name="ticketsCache">
            <ref bean="ticketsCache"/>
        </property>
        <!– The period for which tickets are valid in XML duration format. –>
        <!– The default is P1H for one hour.                               –>
        <property name="validDuration">
            <value>P1H</value>
        </property>
        <!– Do tickets expire or live for ever?                            –>
        <property name="ticketsExpire">
            <value>false</value>
        </property>
        <!– Are tickets only valid for a single use?                       –>
        <property name="oneOff">
            <value>false</value>
        </property>
    </bean>

    <!– Here for now. Probably want remote-context.xml file. –>
    <!– The AuthenticationService exported as an RMI service. –>
        <bean id="rmiAuthenticationService" class="org.springframework.remoting.rmi.RmiServiceExporter">
                <property name="service">
                        <ref bean="AuthenticationService"/>
                </property>
                <property name="serviceInterface">
                        <value>org.alfresco.service.cmr.security.AuthenticationService</value>
                </property>
                <property name="serviceName">
                        <value>authentication</value>
                </property>
                <property name="registryPort">
                        <value>${avm.remote.port}</value>
                </property>
        </bean>
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As I comment in the first post, the same configuration works without problems in Alfresco 1.4 (the only problem is documented in JIRA AR-1120, so tha's the reason I want to Alfresco 2.0preview works with this configuration).

I look at the forum but anybody seems to have this problem.

Any help will be appretieted. Thanks

Re: NTLM authentication error Alfresco 2.0prev

hsantander — Thu, 01 Feb 2007 12:00:37 GMT

Gary, did you find somthing about this error?

Any help will be appreciated. Thanks

Re: NTLM authentication error Alfresco 2.0prev

hsantander — Mon, 05 Feb 2007 10:34:18 GMT

Any of the Alfresco Engineers can help me? I know Alfresco 2.0 is a preview but, this configuration works on 1.4 except AR-1120.

Thanks

Re: NTLM authentication error Alfresco 2.0prev

andy — Mon, 19 Feb 2007 10:51:41 GMT

Hi

Make sure you have changed any beans called "authenticationComponentImpl" to "authenticationComponent".
This was changed in 2.0 to tidy up some transactional bean definitions.

It sounds like you have configured the alfresco authentication with the NTLM DAO - which would most likely arise as described above.

Regards

Andy

Re: NTLM authentication error Alfresco 2.0prev

hsantander — Mon, 19 Feb 2007 13:13:32 GMT

This didn't work for my installation.

Thanks

topic Re: NTLM authentication error Alfresco 2.0prev in Alfresco Archive

NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev

Re: NTLM authentication error Alfresco 2.0prev