topic Alfresco 2.1RC1 Community and LDAP authentication in Alfresco Archive

Alfresco 2.1RC1 Community and LDAP authentication

cricalix — Thu, 19 Jul 2007 12:21:41 GMT

Greetings all,I'm attempting to get the community edition of Alfresco to speak LDAP to our AD server so that I can provide unified logins across our internal services. Unfortunately, this isn't going too well.1) The Alfresco code appears to hammer the supplied principal with a series of invalid pas

Re: Alfresco 2.1RC1 Community and LDAP authentication

douglasheld — Mon, 23 Jul 2007 17:49:24 GMT

In case it's helpful, I have a working configuration of Alfresco integrated with Windows domain authentication here: http://forums.alfresco.com/viewtopic.php?t=7441

Doug

Re: Alfresco 2.1RC1 Community and LDAP authentication

cricalix — Tue, 24 Jul 2007 08:19:42 GMT

Unfortunately, Alfresco doesn't seem to be picking up the changes I've made per that posting. It's still authenticating to the internal DB only, nary a peep across the network to our DCs (watching with wireshark).

I might just go start from scratch again - goodness knows what cruft I've possibly accumulated over the past week or so trying to get either LDAP or NTLM to work.

Re: Alfresco 2.1RC1 Community and LDAP authentication

cricalix — Tue, 24 Jul 2007 09:12:53 GMT

Well, I'm back to the issue you had originally:


javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
java.lang.SecurityException: Unable to locate a login configuration
caused by:
java.io.IOException: Unable to locate a login configuration
‍‍‍‍‍‍‍‍‍

That's on a clean install with the changes suggested in your thread (and krb5.ini in windows and winnt). Getting tempted to boot a Linux VM and see if it'll play nicer in there.

Edit: Doh, missed the Java security files. Put them back in place, and now it won't even authenticate my login. Doesn't even send a packet to the DC to enquire about the login.

Re: Alfresco 2.1RC1 Community and LDAP authentication

cricalix — Tue, 24 Jul 2007 10:00:29 GMT

And another follow-up.

If I enable some more debugging, I can see:

10:54:49,156 DEBUG [org.alfresco.smb.protocol.auth] Passthru finding domain controller for DOMAIN …
10:54:49,172 DEBUG [org.alfresco.smb.protocol.auth]   Found 1 domain controller(s)
10:54:49,172 DEBUG [org.alfresco.smb.protocol.auth] Added passthru server [DOMAIN\DC01:10.150.20.1:Offline:0,0]
‍‍‍‍

(Names changed to protect the innocent.)

CIFS works. I can browse the Alfresco SMB server, and I see the data dictionary etc, and a folder named after my login. All well and good.

Alfresco HTTP interface still insists that I don't exist. So I must be missing one final bit to make Alfresco query the domain for credentials. Rather frustrating!

Re: Alfresco 2.1RC1 Community and LDAP authentication

alcaldo — Fri, 27 Jul 2007 15:51:15 GMT

Did you check for your java.security and java.login.config files to be in the appropriate folder of the used JRE?
Check JAVA_HOME env. variable to see which is used..
Hope this helps,

L.

As you, I'm still struggling with chaining AD and Alfresco users…

Re: Alfresco 2.1RC1 Community and LDAP authentication

cricalix — Fri, 27 Jul 2007 15:56:28 GMT

Yes - for the CIFS/SMB auth to work, the java security files have to be in place. It's just the standard web login that refuses to acknowledge the configuration - it never even tries.