topic Re: NTLM configuration problem with WCM2.0preview in Alfresco Archive

NTLM configuration problem with WCM2.0preview

lgr — Tue, 06 Feb 2007 13:07:56 GMT

Hi,With the old versions of Alfresco, adding these lines in shared/file-servers-custom.xml worked. <config evaluator="string-compare" condition="Filesystem Security" replace="true"> <authenticator type="passthru"> <Server>192.168.0.1</Server> </au

Re: NTLM configuration problem with WCM2.0preview

hsantander — Tue, 06 Feb 2007 17:56:16 GMT

Hi
I have problems with NTLM and CIFS authentication on Alfresco 2.0 preview too. They are detailed at http://forums.alfresco.com/viewtopic.php?t=5040, but haven't news from Alfresco engineers for several days.
What are your ntlm-authentication-context.xml, ldap-authentication-context.xml, authentication-services-context.xml and file-servers.xml configuration files?

Thanks

Re: NTLM configuration problem with WCM2.0preview

hazzanz — Wed, 07 Feb 2007 03:35:16 GMT

I also get the Null Pointer exception EXCEPT when debug is enabled. In which case it works just fine!

That should make it fun to debug……

Re: NTLM configuration problem with WCM2.0preview

lgr — Wed, 07 Feb 2007 09:39:50 GMT

Yes, i've browsed all posts related to ntlm and cifs, including yours.
My configuration files are the default one, with a few modifications :

In /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/web.xml, comment of:

<filter-class>org.alfresco.web.app.servlet.AuthenticationFilter</filter-class>‍

In the same file, uncomment of:

<filter-class>org.alfresco.web.app.servlet.NTLMAuthenticationFilter</filter-class>
‍‍

   <filter-mapping>
        <filter-name>Authentication Filter</filter-name>
        <url-pattern>/navigate/*</url-pattern>
     </filter-mapping>‍‍‍‍

Rename of /opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml.sample
in
/opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml

And replace in /opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml
of:

        <property name="useLocalServer">
            <value>true</value>
        </property>‍‍‍

        <property name="servers">
            <value>192.168.2.2</value>
        </property>‍‍‍

I've done some other changes in other files, that shouldn't have any impact on ntlm authentication (like defining a windows domain in CIFS or adding administrative rights to a specific user).

But none of these modifications does make Alfresco bug.

An error is generated only by adding the passthru authenticator (as specified in my previous post).

If i remove this passthru definition, Alfresco behaves well.

Laurent.

Re: NTLM configuration problem with WCM2.0preview

hsantander — Wed, 07 Feb 2007 12:23:45 GMT

Hello again

First of all, I'm not sure if you use LDAP sync for users. Please tell me.

The difference between your web.xml and mine is that I uncommented all the references to NTLM and commented the previous deffinitions. Your way of modifying the web.xml now only gives me the second error:

org.alfresco.error.AlfrescoRuntimeException: Not implemented
 at org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao.getMD4HashedPassword(NullMutableAuthenticationDao.java:293)
 at org.alfresco.repo.security.authentication.AuthenticationComponentImpl.getMD4HashedPassword(AuthenticationComponentImpl.java:99)
 at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:658)
 at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:392)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
 at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
 at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
 at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
 at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
 at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
 at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
 at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
 at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
 at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
 at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
 at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
 at java.lang.Thread.run(Thread.java:595)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Anyway, could you send me your configuration files on the extension configuration? (I supposed you didn't modifyed the original in the alfresco deplay) and I'll send you mine If you want to see the differences. I only configured in the extension directory:

custom-file-servers.xml
custom-ntlm-authentication-context.xml
custom-authentication-services-context.xml
custom-ldap-authentication-context.xml‍‍‍‍

Thanks

Re: NTLM configuration problem with WCM2.0preview

lgr — Wed, 07 Feb 2007 12:40:43 GMT

No, i only use ntlm authentication.

About config files, here is my file-servers-custom.xml :

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>
   
   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
       <authenticator type="passthru">
          <Server>192.168.2.2</Server>
       </authenticator>
   </config>

   <config evaluator="string-compare" condition="Filesystems" replace="true">
      <filesystems>

         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

            <!– Add a URL file to each folder that links back to the web client –>
            <urlFile>
               <filename>__Alfresco.url</filename>
               <webpath>http://${localname}/alfresco/</webpath>
            </urlFile>

            <!– Mark locked files as offline –>
            <offlineFiles/>

            <!– Desktop actions –>

            <desktopActions>
               <global>
                  <path>alfresco/desktop/Alfresco.exe</path>
                  <webpath>http://${localname}/alfresco/</webpath>
               </global>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.CheckInOutDesktopAction</class>
                  <name>CheckInOut</name>
                  <filename>__CheckInOut.exe</filename>
               </action>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction</class>
                  <name>JavaScriptURL</name>
                  <filename>__ShowDetails.exe</filename>
                  <script>alfresco/desktop/showDetails.js</script>
                  <attributes>anyFiles</attributes>
                  <preprocess>copyToTarget</preprocess>
               </action>

            </desktopActions>

<!–
            <accessControl default="Write">
               <user name="admin" access="Write"/>
               <address subnet="90.1.0.0" mask="255.255.0.0" access="Write"/>
            </accessControl>
–>
         </filesystem>
      </filesystems>
   </config>

</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

My ntlm-authentication-context.xml :

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>
    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <property name="servers">
            <value>192.168.2.2</value>
        </property>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
    </bean>
    
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The two other don't exist in the shared folder, but are located in the web-inf/classes folder where they are unchanged since the first installation.

In fact, this is a rather simple installation, and i've used the same procedure since v1.0 at least. It did always work, except for this version. And my knowledge about java and beans is too tiny to diagnose anything. So, i'm embarrassed, and don't know what to think about that situation.

Anyway, i greatly thank you for your help,

Laurent.

Re: NTLM configuration problem with WCM2.0preview

hsantander — Wed, 07 Feb 2007 13:42:07 GMT

Hi Laurent

Thanks for your quick reply.

I have almost the same configuration the only difference is that I use ldap sync of users (but if I disable got the same error) and the custom-file-server.xml:

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>

   <config evaluator="string-compare" condition="CIFS Server" replace="true">
      <host name="${localname}_A"/>
      <comment>Alfresco CIFS Server</comment>

      <!– Set to the broadcast mask for the subnet –>
      <broadcast>255.255.255.255</broadcast>

      <!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –>
      <tcpipSMB platforms="linux,solaris,macosx"/>
      <netBIOSSMB platforms="linux,solaris,macosx"/>
      <hostAnnounce interval="5"/>

      <!– Use Win32 NetBIOS interface on Windows –>
      <Win32NetBIOS/>
      <Win32Announce interval="5"/>

      <WINS>
         <primary>10.226.128.46</primary>
      </WINS>

      <sessionDebug flags="Negotiate,Socket"/>
   </config>
   <config evaluator="string-compare" condition="Filesystems" replace="true">
      <filesystems>

         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

            <!– Add a URL file to each folder that links back to the web client –>
            <urlFile>
               <filename>__Alfresco.url</filename>
               <webpath>http://${localname}:8080/alfresco/</webpath>
            </urlFile>

            <!– Mark locked files as offline –>
            <offlineFiles/>
         </filesystem>
      </filesystems>
   </config>

   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>MYDOMAIN</Domain>
        </authenticator>
   </config>
</alfresco-config>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As you can see the only difference is that I include the configuration for CIFS Server at the begining.

It's quite embarrasing that the configuration that works on 1.4 doesn't on 2.0preview. Maybe this will be solved on 2.0 final. Maybe Alfresco engineers could tell us something about it, even just "We are working on it".

Anyway Laurent, it's a weird thing that we got different erros with almost the same configuration.

Hugo

Thanks, again

Re: NTLM configuration problem with WCM2.0preview

andy — Wed, 07 Feb 2007 14:56:01 GMT

Hi

We removed some transactional wrappers that were not required.
I think this is a Spring config issue from this.

The authenticationComponentImpl bean is now deprecated; you should now be replacing the definition for the bean authenticationComponent. It looks like the alias for this is not doing what we expected in this case and finding the default bean from the alias.

I will be checking through this stuff again.

Regards

Andy

Re: NTLM configuration problem with WCM2.0preview

hsantander — Wed, 07 Feb 2007 16:24:17 GMT

Hi Andy

Good news have news from you.

If I understand what you say I have to change authenticationComponent where is authenticationComponentImpl. I made those changes and I got another error:

17:13:51,406 DEBUG [web.app.ContextListener] HTTP session created: 21192A55E2C1EFD9B5D7830B2A2F508A
17:13:51,453 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 10.226.138.237 (10.226.138.237:55652)
17:13:58,565 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0x205,Domain:<NotSet>,Wks:<NotSet>]
17:13:58,566 DEBUG [smb.protocol.auth] Open authenticate session to [sfha00n2.ceh.junta-andalucia.es:10.226.128.113:Online:0,0]
17:13:58,567 DEBUG [smb.protocol.auth] New auth session from hsantander.ceh.junta-andalucia.es_2 to \\10.226.128.113\IPC$\
17:13:58,571 DEBUG [smb.protocol.auth] Trying address 10.226.128.113
17:13:58,608 DEBUG [smb.protocol.auth] Connected to address 10.226.128.113
17:13:58,608 DEBUG [smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
17:13:58,612 DEBUG [smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
17:13:58,689 DEBUG [app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x201,Target:HSANTANDER_A,Ch:00312106fb66aef3]
17:13:58,752 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:<Null>,NTLM:c3b3be67683a053ca50559e5d839e43915acc6b94e42ae50,Dom:HSANTANDER_A,User:hugo,Wks:]
17:13:58,776 ERROR [[localhost].[/alfresco].[Faces Servlet]] Servlet.service() para servlet Faces Servlet lanzÃ³ excepciÃ³n
org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.registerSynchronizations(AlfrescoTransactionSupport.java:363)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.getSynchronization(AlfrescoTransactionSupport.java:348)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.bindDaoService(AlfrescoTransactionSupport.java:202)
        at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:58)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy3.getNode(Unknown Source)
        at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:152)
        at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213)
        at $Proxy4.exists(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
        at org.alfresco.repo.node.MLPropertyInterceptor.invoke(MLPropertyInterceptor.java:111)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy5.exists(Unknown Source)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPersonOrNull(PersonServiceImpl.java:194)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:147)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:832)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:513)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:719)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:392)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:595)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The configuration files I have changed with references to authenticationComponentImpl are:

custom-authority-services-context.xml
custom-ldap-authentication-context.xml
custom-ntlm-authentication-context.xml
‍‍‍‍

I read the forum and discover a topic with the same error http://forums.alfresco.com/viewtopic.php?t=4970. You said it's a bug http://issues.alfresco.com/browse/AR-1183, maybe this bug not only affect FTP and affects CIFS and NTLM authentication. Could be the same bug masked with the alias problem?

Thanks for your reply andy

Hugo

Re: NTLM configuration problem with WCM2.0preview

hazzanz — Sun, 11 Feb 2007 20:33:48 GMT

As already mentioned I have a working config with LDAP for the web client and NTLM for CIFS on 2.0preview provided debug is enabled for cifs auth otherwise I see similar errors to you guys. ie

log4j.logger.org.alfresco.smb.protocol.auth=debug

in log4j.properties. It would be interesting if you could give it a try…

Cheers

Re: NTLM configuration problem with WCM2.0preview

hsantander — Fri, 16 Feb 2007 13:16:50 GMT

Hello again:
There is a wiki reference to this problem: http://wiki.alfresco.com/wiki/Upgrading_to_2.0
I tried to download the sample configuration files but I don't know where can I find it? The prevew available has the same date (19 January 2007) so it's supposed to have the same sample configuration files.
Maybe the new sample files could help me to solve my problem, but where can I find it?

Thanks

Re: NTLM configuration problem with WCM2.0preview

andy — Fri, 16 Feb 2007 16:40:59 GMT

Hi

1) re-name any bean called authenticationComponentImpl to authenticationComponent.

2) Auto creation of people when you log in via CIFS/FTP and WebDav is not working at the moment - this is the issue in the stack trace.

See http://issues.alfresco.com/browse/AR-1245

When the user does exist - via LDAP import or from log in via the client - all should be well.

Regards

Andy

Re: NTLM configuration problem with WCM2.0preview

hsantander — Mon, 19 Feb 2007 12:13:19 GMT

Hi Andy
I already make this changes and my users are created via ldap sync, but I got the error I posted a few post before.

org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required‍

It's not working even if I make the changes you comment in the files at the extension directory and in the webapp/alfresco/WEB-INF/classes/alfresco/*

What else can I do or configure?

Thanks

Re: NTLM configuration problem with WCM2.0preview

andy — Tue, 20 Feb 2007 19:19:08 GMT

Hi

Wait for the user to be imported.

Set auto creation of people false (personServiceImpl bean in authentication-services-context.xml). Then you will have to wait!

Regards

Andy

Re: NTLM configuration problem with WCM2.0preview

hsantander — Wed, 21 Feb 2007 11:18:38 GMT

Hi Andy:
Thanks for your post.
Sorry, but I already have the automatic user creation set to false from the beginning and wait until the user import before trying the log in.
Here is my definition of personService bean in the custom-authentication-services-context.xml:

    <bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl">
                <property name="nodeService">
                    <ref bean="nodeService" />
                </property>
                <property name="searchService">
                    <ref bean="searchService" />
                </property>
                <property name="permissionServiceSPI">
                        <ref bean="permissionServiceImpl" />
                </property>
        <property name="authorityService">
           <ref bean="authorityService" />
        </property>
                <property name="namespacePrefixResolver">
                        <ref bean="namespaceService" />
                </property>
        <!– Configurable properties.                                 –>
        <!–                                                          –>
        <!– TODO:                                                    –>
        <!– Add support for creating real home spaces adn setting    –>
        <!– permissions on the hame space and people created.        –>
        <!–                                                          –>
        <!– The store in which people are persisted.                 –>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <!– Some authentication mechanisms may need to create people –>
        <!– in the repository on demand. This enables that feature.  –>
        <!– If dsiabled an error will be generated for missing       –>
        <!– people. If enabled then a person will be created and     –>
        <!– persisted.                                               –>
        <!– Valid values are                                         –>
        <!–     ${server.transaction.allow-writes}                   –>
        <!–     false                                                –>
        <property name="createMissingPeople">
                <value>false</value>
        </property>
                <property name="userNamesAreCaseSensitive">
          <value>${user.name.caseSensitive}</value>
        </property>
        <!– New properties after 1.4.0 to deal with duplicate user ids when found –>
        <property name="processDuplicates">
            <value>true</value>
        </property>
        <!– one of:  LEAVE, SPLIT, DELETE –>
        <property name="duplicateMode">
            <value>SPLIT</value>
        </property>
        <property name="lastIsBest">
            <value>true</value>
        </property>
        <property name="includeAutoCreated">
            <value>false</value>
        </property>
    </bean>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I think the definition of this bean is correct, even when I have the problem with the users imported, I never configured the automatic user creation because I want all the Alfresco users been imported.
Anyway, I delete the entire repository and database and start Alfresco again. Same results and NTLM authentication not working. Well, thats not a surprise to me.

Thanks

Re: NTLM configuration problem with WCM2.0preview

andy — Thu, 22 Feb 2007 15:38:35 GMT

Hi

Apologies, that is indeed a bug, which is fixed in the 2.0 release.
A bit of tunnel vision there. See http://issues.alfresco.com/browse/AR-1263

Regards

Andy

Re: NTLM configuration problem with WCM2.0preview

hsantander — Thu, 22 Feb 2007 15:53:13 GMT

Hi Andy.

Thanks for your quick reply. I suppossed this could be a bug. I'm waiting impatiently for the 2.0 release (when?) and see the NTLM authentication problem solved (I really hope this!).

Thanks

Re: NTLM configuration problem with WCM2.0preview

andy — Fri, 23 Feb 2007 16:55:29 GMT

Hi

The community 2.0 final release has been available for a day or so.

Andy

Re: NTLM configuration problem with WCM2.0preview

hsantander — Mon, 26 Feb 2007 13:26:00 GMT

Hi Andy

I download and installled the new Alfresco 2.0 release, wondering my problems dissapear with this release.
But things goes wrong from the begining. The first errors are abot CIFS. Where the previous versions haven't problems, new version prints:

14:11:14,308 ERROR [smb.protocol.auth] No valid CIFS authentication combination available
14:11:14,308 ERROR [smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
14:11:14,314 ERROR [alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.initialize(EnterpriseCifsAuthenticator.java:348)
        at org.alfresco.filesys.server.config.ServerConfiguration.setAuthenticator(ServerConfiguration.java:3310)
        at org.alfresco.filesys.server.config.ServerConfiguration.processSecurityConfig(ServerConfiguration.java:2310)
        at org.alfresco.filesys.server.config.ServerConfiguration.init(ServerConfiguration.java:634)
        at org.alfresco.filesys.server.config.ServerConfiguration.onBootstrap(ServerConfiguration.java:4007)
        at org.alfresco.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:62)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:45)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:225)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:323)
        at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:134)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:184)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3763)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4211)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I used the same custom-file-servers.xml than previous version.

But this is only the beginning. When uncommented the NTLM configuration lines at web.xml, this is the error I got:

14:22:58,772 ERROR [[Catalina].[localhost].[/alfresco]] ExcepciÃ³n arrancando filtro WebDAV Authentication Filter
javax.servlet.ServletException: Required authentication mode not available
        at org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter.init(NTLMAuthenticationFilter.java:173)
        at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:223)
        at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:304)
        at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:77)
        at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3634)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4217)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
14:22:58,785 ERROR [[Catalina].[localhost].[/alfresco]] ExcepciÃ³n arrancando filtro Authentication Filter
javax.servlet.ServletException: Required authentication mode not available
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.init(NTLMAuthenticationFilter.java:188)
        at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:223)
        at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:304)
        at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:77)
        at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3634)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4217)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
26-feb-2007 14:22:58 org.apache.catalina.core.StandardContext start
GRAVE: Error filterStart
26-feb-2007 14:22:58 org.apache.catalina.core.StandardContext start
GRAVE: FallÃ³ en arranque del Contexto [/alfresco] debido a errores previos
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This is a fatal error, so the application didn't start.

Where is the problem now?

Thanks

Re: NTLM configuration problem with WCM2.0preview

andy — Mon, 26 Feb 2007 15:02:34 GMT

Hi

The clue is:

Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords‍

You have got enterprise configuration configured for CIFS. As the error says, this only supports Kerberos and MD4 based authentication. I assume you want to use the NTLM authentication component. In custom-file-servers.xml, or similar, you will ned to specify "alfresco" instead of "enterprise". This version works with NTLM. Alternatively, you can set up Kerberos as described on the wiki.

Regards

Andy