topic Re: Which Authentication Method in Alfresco Archive

Which Authentication Method

invantix — Thu, 17 May 2007 13:48:58 GMT

Looking at the WIKIs there are a lot of options for authentication (JAAS, LDAP, NTLM). I am trying to figure out which would work best for us.1. All clients are Windows XP.2. All internal users are on the same AD domain.3. I want to use CIFS for some drag and drop loading operations.4. I would pref

Re: Which Authentication Method

invantix — Thu, 17 May 2007 15:18:13 GMT

I followed the WIKI for Client Side NTLM and NTLM Passthru Authentication and am having some problems.

1. When I start the server I see a problem with CIFS:
   11:08:43,983 ERROR [smb.protocol.auth] No valid CIFS authentication combination available
   11:08:43,983 ERROR [smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
   11:08:43,983 ERROR [alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration

2. When I point my browser at alfresco with IE7 I am prompted for a uid/pw. This should not happen.

3. When I enter the uid/pw and submit, I get:
org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required

Re: Which Authentication Method

invantix — Fri, 18 May 2007 14:04:34 GMT

OK,

Now I have things closer. I am no monger asked to log in from IE but I go directly to an error page with an exception. It looks like poor (or lack of) exception handling to me. There is no person and it fails on creation so it reports a Transaction must be active??? I am guessing if I am using NTLM on the UI and 'alfresco' on the file system I need to somehow load the users from AD into alfresco.

org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.registerSynchronizations(AlfrescoTransactionSupport.java:371)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.getSynchronization(AlfrescoTransactionSupport.java:356)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.bindDaoService(AlfrescoTransactionSupport.java:210)
        at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:66)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy1.getStore(Unknown Source)
        at org.alfresco.repo.node.db.DbNodeServiceImpl.getRootNode(DbNodeServiceImpl.java:238)
        at sun.reflect.GeneratedMethodAccessor107.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:221)
        at $Proxy2.getRootNode(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor107.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
        at org.alfresco.repo.node.MLPropertyInterceptor.invoke(MLPropertyInterceptor.java:227)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy3.getRootNode(Unknown Source)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPeopleContainer(PersonServiceImpl.java:581)
        at org.alfresco.repo.security.person.PersonServiceImpl.createPerson(PersonServiceImpl.java:575)
        at org.alfresco.repo.security.person.PersonServiceImpl.createMissingPerson(PersonServiceImpl.java:555)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:160)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:840)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:521)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:727)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:400)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:595)

Re: Which Authentication Method

nyugi — Wed, 23 May 2007 15:58:54 GMT

Hi!

Unfortunately I have the same problem. The only thing I can't understand, that the same thing (NTLM+SSO) with the same settings works fine with the trial version of Enterprise Network (alfresco-enterprise-tomcat-2.0.0.zip).

I am curious to know the solution of this problem.

Re: Which Authentication Method

invantix — Wed, 23 May 2007 17:37:30 GMT

This is not the first evidence I have seen of this. It looks to me like fixes in the enterprise version do not make it to the community.

It seems like one way open source to me. community->enterprise.

Enterprise 2.0.1 has been out for a month but nothing for the community unless you want to go the the untested nightly builds…

Re: Which Authentication Method

diable666 — Thu, 05 Jul 2007 07:46:59 GMT

I expect de same problem :
org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required

I run alfresco 2.0.0 community on tomcat on CentOS in a vmware and I want alfresco login use my PDC samba which runs into the same LAN.
What is synchronisation ? I don't need the availlability to modify user trough alfresco. Just login … But it doesn't work!

Please help me;

thanks

Re: Which Authentication Method

andy — Mon, 16 Jul 2007 11:27:43 GMT

Hi

There is a bug in 2.0 community that stops people being auto-created by the SSO NTLM filter. This should be fixed in 2.1 and was provided as an enterprise patch.

Andy

Re: Which Authentication Method

diable666 — Mon, 16 Jul 2007 12:03:16 GMT

Yep, it works with the 2.1.