topic CIFS vs AD in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96578#M66383 <HTML><HEAD></HEAD><BODY><SPAN>I have installed Alfresco Ent. Ed. v. 23.0&nbsp;&nbsp; under JBoss 4.0.2 in a RedHat 3 ES server, and it works correctly.</SPAN><BR /><SPAN>Then I activated CIFS according to 'File Server Configuration' Wiki, which worked as well, but the client had to authenticate with an Alfresco user credentials.</SPAN><BR /><SPAN>Now the customer asks for accessing Alfresco dirs via CIFS&nbsp; using his Windows ASD credentials.</SPAN><BR /><SPAN>So, I&nbsp; started applying the ' Configuring CIFS Server for Kerberos/AD integration'&nbsp; document, but I was not able to make it work. </SPAN><BR /><SPAN> I hope someone can help me.</SPAN><BR /><BR /><SPAN>Basing on that document:</SPAN><BR /><BR /><SPAN>1. 'Create user account….' –&gt; the&nbsp; user name 'must' be 'alfrescocifs', and if not , this user name has some referenxe somewhere in some Alfresco config file? This user name has nothing to do with the Alfresco server name?</SPAN><BR /><BR /><SPAN>3. 'Create the SPN ….'&nbsp; —&gt; the 'alfresco-cifs' string in the 'setspn ' command has some reference&nbsp; somewhere else?</SPAN><BR /><BR /><SPAN>4. 'Use the ktpass utility….' –&gt; in the command&nbsp; 'ktpass -princ cifs/alfresco@realm ….'&nbsp;&nbsp; the 'alfresco' string must be replaced with the fully qualified Alfresco server name?</SPAN><BR /><BR /><SPAN>6. in my case c:/krb5.ini becomes /etc/krb5.conf –&gt; in [domain realm] paragraph the 'adsrv.alfresco.org = ALFRESCO.ORG' string should be 'mydomain = MYDOMAIN' , I guess.</SPAN><BR /><BR /><SPAN>7. in java.login.config&nbsp; the 'AlfrescoCIFS' label must match with something else somewhere other than the &lt;LoginEntry&gt; tag in file-servers.xml at #9?</SPAN><BR /><BR /><SPAN>. in file-servers.xml, the&nbsp; 'name' in&nbsp; the </SPAN><BR /><SPAN>'&nbsp; &lt;host name="name_A" domain="mydomain"/&gt; tag is somehow related to the AD user account created at #1?</SPAN><BR /><BR /><SPAN>. should I configure some other configuration files in /extension ?</SPAN><BR /><BR /><SPAN>In conclusion, this is a part of&nbsp; my file-servers.xml:</SPAN><BR /><SPAN>&lt;alfresco-config area="file-servers"&gt;</SPAN><BR /><BR /><SPAN>&nbsp;&nbsp; &lt;config evaluator="string-compare" condition="CIFS Server"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;serverEnable enabled="true"/&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!–&lt;host name="${localname}_A"/&gt;–&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;host name="alfresco-a" domain="insiel.it"/&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;comment&gt;Alfresco CIFS Server&lt;/comment&gt;</SPAN><BR /><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;!– Set to the broadcast mask for the subnet –&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;broadcast&gt;255.255.248.0&lt;/broadcast&gt;</SPAN><BR /><SPAN>….</SPAN><BR /><SPAN>….</SPAN><BR /><SPAN>….</SPAN><BR /><SPAN>&lt;!–</SPAN><BR /><SPAN>&nbsp;&nbsp; &lt;config evaluator="string-compare" condition="Filesystem Security"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type="alfresco"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;</SPAN><BR /><SPAN> –&gt;</SPAN><BR /><BR /><SPAN> &lt;config evaluator="string-compare" condition="Filesystem Security"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;authenticator type="enterprise"&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;KDC&gt;myadserver.mydomain&lt;/KDC&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Realm&gt;mydomain&lt;/Realm&gt;&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Password&gt;alfresco-a&lt;/Password&gt;</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/authenticator&gt;</SPAN><BR /><BR /><BR /><SPAN> …..</SPAN><BR /><BR /><BR /><BR /><SPAN>this is what I get in JBoss server.log:</SPAN><BR /><BR /><SPAN>'…….2007-06-19 21:13:24,507 ERROR [org.alfresco.smb.protocol.auth] CIFS Kerberos authenticator error</SPAN><BR /><SPAN>javax.security.auth.login.FailedLoginException: Password Incorrect/Password Required</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:166)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at org.jboss.security.auth.spi.UsersRolesLoginModule.login(UsersRolesLoginModule.java:136)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)</SPAN><BR /><SPAN>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces….</SPAN><BR /><SPAN>…..</SPAN><BR /><SPAN>……..'.</SPAN><BR /><BR /><SPAN>I defined&nbsp; 'alfresco-a ' (password 'alfresco-a')&nbsp; user in AD.</SPAN><BR /><BR /><BR /><BR /><SPAN>Any help appreciated.</SPAN><BR /><BR /><SPAN>thanks</SPAN></BODY></HTML> Tue, 19 Jun 2007 20:12:51 GMT peltuinum 2007-06-19T20:12:51Z CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96578#M66383 I have installed Alfresco Ent. Ed. v. 23.0&nbsp;&nbsp; under JBoss 4.0.2 in a RedHat 3 ES server, and it works correctly.Then I activated CIFS according to 'File Server Configuration' Wiki, which worked as well, but the client had to authenticate with an Alfresco user credentials.Now the customer asks for acc Tue, 19 Jun 2007 20:12:51 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96578#M66383 peltuinum 2007-06-19T20:12:51Z Re: CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96579#M66384 <HTML><HEAD></HEAD><BODY><SPAN>Where can one find the document "Configuring CIFS Server for Kerberos/AD integration'" document. ?</SPAN><BR /><BR /><SPAN>regards</SPAN><BR /><SPAN>Andreas</SPAN></BODY></HTML> Fri, 06 Jul 2007 10:32:18 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96579#M66384 deas0815 2007-07-06T10:32:18Z Re: CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96580#M66385 <HTML><HEAD></HEAD><BODY><SPAN>We do same but use NTLM authentication and use domain controler for authentication </SPAN><BR /><BR /><BR /><SPAN>Hope that helps</SPAN></BODY></HTML> Fri, 06 Jul 2007 13:27:16 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96580#M66385 haroonzc 2007-07-06T13:27:16Z Re: CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96581#M66386 <HTML><HEAD></HEAD><BODY><SPAN>&gt;&gt;&gt;&gt;&gt;&gt;Where can one find the document "Configuring CIFS Server for Kerberos/AD integration'" document. ? </SPAN><BR /><BR /><A href="http://wiki.alfresco.com/wiki/Configuring_the_CIFS_server_for_Kerberos/Active_Directory_integration" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Configuring_the_CIFS_server_for_Kerberos/Active_Directory_integration</A></BODY></HTML> Fri, 06 Jul 2007 14:07:30 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96581#M66386 peltuinum 2007-07-06T14:07:30Z Re: CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96582#M66387 <HTML><HEAD></HEAD><BODY><SPAN>&gt;&gt;&gt;&gt;&gt;&gt; We do same but use NTLM authentication and use domain controler for authentication </SPAN><BR /><SPAN>_____________________________________________</SPAN><BR /><SPAN>I tested your solution under v 2.1 Comm. Ed. and it worked !</SPAN><BR /><BR /><SPAN>Thank you!</SPAN></BODY></HTML> Mon, 09 Jul 2007 06:57:39 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96582#M66387 peltuinum 2007-07-09T06:57:39Z Re: CIFS vs AD https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96583#M66388 <HTML><HEAD></HEAD><BODY><SPAN>does u CIFS work with Active Directly .</SPAN><BR /><SPAN>can u sent the steps to me plz</SPAN></BODY></HTML> Sun, 16 Sep 2007 13:51:12 GMT https://connect.hyland.com/t5/alfresco-archive/cifs-vs-ad/m-p/96583#M66388 daliakamal2005 2007-09-16T13:51:12Z