topic Re: CAS and CIFS/FTP in Alfresco Archive

CAS and CIFS/FTP

alarocca — Mon, 05 Feb 2007 16:40:52 GMT

Hi,I have Alfresco authenticating smoothly against CAS (and this on behalf of LDAP). By means of a synchronization tool, for each LDAP user an account is created into Alfresco. With CAS up, passwords stored within alfresco are useless. CAS rules, and users authenticate successfully even if they chan

Re: CAS and CIFS/FTP

andy — Tue, 06 Feb 2007 08:52:58 GMT

Hi

CIFS can authenticate against:

1) kerberos + ActiveDirectory
2) an authentication component that knows the MD4 password hash
3) the NTLM authentication component

FTP should work if you have a suitable authentication component impl.

What is your LDAP server?

CIFS and FTP are just using the default authentication component implementation, this can be changed or configured. You could authenticate against LDAP - but this will not give you CIFS.

Regards

Andy

Re: CAS and CIFS/FTP

alarocca — Wed, 07 Feb 2007 11:54:51 GMT

Thanks Andy.

My LDAP server is Active Directory. I will search more about CIFS authentication against kerberos + AD, as you suggested.

According your reply even FTP authentication seems to be accomplished. Could you point me to what class should be implemented and where would be configured.

Regards, Alessandro

Re: CAS and CIFS/FTP

andy — Wed, 07 Feb 2007 14:43:03 GMT

Hi

I am not sure why you need to use CAS at all here??
Is it portal SSO or IE SSO you want?

You could use configurations that go against active directory/LDAP.
See the wiki for NTLM/CIFS, LDAP and JAAS/Kerberos.

We can use acegi authentication via Spring config but the acegi version we use (0.8.2) may be too old for LDAP.

Regards

Andy

Re: CAS and CIFS/FTP

alarocca — Wed, 07 Feb 2007 15:33:40 GMT

Hi Andy,

CAS is mainly for web SSO. One great benefit is that each web application requiring user authentication can count on it. And only CAS knows the authentication resource (LDAP, database, multiple sources, …) used. This allows me even to change it without any impact on the web apps.

For CIFS and FTP, I don't need SSO but just to use the same authentication resource (LDAP) pointed by CAS. So I have configured LDAP for the authenticationComponentImpl bean.

FTP works!

CIFS prints the following error: CIFS server configuration error, Wrong authentication setup for alfresco authenticator.

Alessandro

Re: CAS and CIFS/FTP

andy — Tue, 13 Feb 2007 09:54:17 GMT

Hi

You are nearly done - you just need to configure CIFS to go direct to your AD server.

See
http://wiki.alfresco.com/wiki/Configuring_the_CIFS_server_for_Kerberos/Active_Directory_integration
http://wiki.alfresco.com/wiki/CIFS_Server_Authentication
http://wiki.alfresco.com/wiki/Configuring_NTLM

If you do not want to set up CIFS and Kerberos you will have to configure in NTLM authentication instead of the LDAP authentication.

Regards

Andy