topic Re: Problem with JAAS configuration not working in Alfresco Archive

Problem with JAAS configuration not working

stk137 — Tue, 26 Jun 2007 15:08:49 GMT

How is JAAS supposed to be configured for a plain old JAAS login module (not Kerberos)?I can't get it to work with my JAAS login module. For simplicity's sake, I am also trying to get it working with the Sample login module from Sun's, but also with no success. These modules are installed and conf

Re: Problem with JAAS configuration not working

stk137 — Wed, 27 Jun 2007 19:38:33 GMT

just to add some info
if I do use the second bean in the sample I get

org.springframework.beans.factory.BeanIsNotAFactoryException: Bean named 'authenticationDao' must be of type [org.springframework.beans.factory.FactoryBean], but was actually of type [org.alfresco.repo.security.authentication.RepositoryAuthenticationDao]

Is the any example for settting up JAAS that works?

Re: Problem with JAAS configuration not working

andy — Fri, 29 Jun 2007 14:41:21 GMT

Hi

Which repo version are you using?

For 2.0 and after the bean to override is authenticationComponent and not authenticationComponentImpl.

Make sure your app server is picking up the security configuration via the java command line or the java installation and that it is using the jre you expect.

If you take the standard install you can get at all the JRE info to check it from the admin console.

You should only have one authenticationComponent bean.

Hope this helps

Andy

Re: Problem with JAAS configuration not working

peltuinum — Mon, 02 Jul 2007 09:24:30 GMT

did you solve your problem?

I'm getting the same error:

2007-07-02 11:12:37,430 ERROR [org.springframework.web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanIsNotAFactoryException: Bean named 'authenticationDao' must be of type [org.springframework.beans.factory.FactoryBean], but was actually of type [org.alfresco.repo.security.authentication.RepositoryAuthenticationDao]

I installed v. 2.0 under JBoss, and this is my jaas-authentication-context.xml :

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>
    <!– The authentication component.                                      –>

    <!– Jass authentication - most of the config goes somewhere else       –>

    <bean id="authenticationComponent"
                 class="org.alfresco.repo.security.authentication.jaas.JAASAuthenticationComponent">
        <property name="realm">
            <value>INSIEL.IT</value>
        </property>
        <property name="jaasConfigEntryName">
            <value>Alfresco</value>
        </property>
    </bean>

                <bean id="alfDaoImpl" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
                        <property name="proxyInterfaces">
                                        <value>
                                                org.alfresco.repo.security.authentication.MutableAuthenticationDao
                                        </value>
                        </property>
                        <property name="transactionManager">
                                        <ref bean="transactionManager" />
                        </property>
                        <property name="target">
                                        <bean class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />
                        </property>
                        <property name="transactionAttributes">
                                <props>
                                        <prop key="*">${server.transaction.mode.default}</prop>
                                </props>
                        </property>
                </bean>

</beans>

Re: Problem with JAAS configuration not working

stk137 — Mon, 02 Jul 2007 15:22:09 GMT

Hi
Which repo version are you using?

For 2.0 and after the bean to override is authenticationComponent and not authenticationComponentImpl.

…
Andy

This error was with 2.0.
I got it working with a 2.1 nightly. Now that I see your reply, I can try 2.0 again. The sample that comes with 2.0 has the wrong bean.

thanks

Steve

Re: Problem with JAAS configuration not working

stk137 — Mon, 02 Jul 2007 15:29:41 GMT

did you solve your problem?

I'm getting the same error:

2007-07-02 11:12:37,430 ERROR [org.springframework.web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanIsNotAFactoryException: Bean named 'authenticationDao' must be of type [org.springframework.beans.factory.FactoryBean], but was actually of type [org.alfresco.repo.security.authentication.RepositoryAuthenticationDao]

I installed v. 2.0 under JBoss, and this is my jaas-authentication-context.xml :

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>
    <!– The authentication component.                                      –>

    <!– Jass authentication - most of the config goes somewhere else       –>

    <bean id="authenticationComponent"
                 class="org.alfresco.repo.security.authentication.jaas.JAASAuthenticationComponent">
        <property name="realm">
            <value>INSIEL.IT</value>
        </property>
        <property name="jaasConfigEntryName">
            <value>Alfresco</value>
        </property>
    </bean>

                <bean id="alfDaoImpl" class="org.springframework.transaction.interceptor.TransactionProxyFactoryBean">
                        <property name="proxyInterfaces">
                                        <value>
                                                org.alfresco.repo.security.authentication.MutableAuthenticationDao
                                        </value>
                        </property>
                        <property name="transactionManager">
                                        <ref bean="transactionManager" />
                        </property>
                        <property name="target">
                                        <bean class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />
                        </property>
                        <property name="transactionAttributes">
                                <props>
                                        <prop key="*">${server.transaction.mode.default}</prop>
                                </props>
                        </property>
                </bean>

</beans>

I got it working with a 2.1 nightly build starting with the sample that comes with it.
I haven't gone back and tried 2.0 again, but now that I see you are using authenticationComponent and not authenticationComponentImpl and still getting an error, I may not bother.

Re: Problem with JAAS configuration not working

andy — Tue, 03 Jul 2007 15:57:09 GMT

Hi

The config example is wrong.
See http://issues.alfresco.com/browse/AR-1564


<bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" >
        <property name="allowDeleteUser">
            <value>true</value>
        </property>
    </bean>    
‍‍‍‍‍‍‍

Should sort this out.

Andy

Re: Problem with JAAS configuration not working

peltuinum — Fri, 06 Jul 2007 09:38:19 GMT

I installed 2.1 Community Ed. and the error disappeared.
Many thanks

Re: Problem with JAAS configuration not working

coffman — Mon, 03 Sep 2007 13:08:47 GMT

Hello

Hi

The config example is wrong.
See http://issues.alfresco.com/browse/AR-1564


<bean name="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" >
        <property name="allowDeleteUser">
            <value>true</value>
        </property>
    </bean>    
‍‍‍‍‍‍‍

Should sort this out.

Andy

I have the same error, i am using the community 2.0, but i have a question:
What must we do with this code to fix on version 2.0 ??
I try to add the code to jaas-authentication-context.xml without success.
If i comment out the lines with alfDaoImpl, the error dissapear, but when i try to acces alfresco from CIFS or web I can display this one:

15:00:11,732 ERROR [alfresco.smb.protocol] Closing session due to exception
org.alfresco.error.AlfrescoRuntimeException: Not implemented
        at org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao.getMD4HashedPassword(DefaultMutableAuthenticationDao.java:394)
        at org.alfresco.repo.security.authentication.AuthenticationComponentImpl.getMD4HashedPassword(AuthenticationComponentImpl.java:107)
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.doNTLMv1Logon(EnterpriseCifsAuthenticator.java:1267)
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.doNtlmsspSessionSetup(EnterpriseCifsAuthenticator.java:942)
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.processSessionSetup(EnterpriseCifsAuthenticator.java:637)
        at org.alfresco.filesys.smb.server.NTProtocolHandler.procSessionSetup(NTProtocolHandler.java:407)
        at org.alfresco.filesys.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:221)
        at org.alfresco.filesys.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1450)
        at org.alfresco.filesys.smb.server.SMBSrvSession.run(SMBSrvSession.java:1351)
        at java.lang.Thread.run(Thread.java:595)
‍‍‍‍‍‍‍‍‍‍‍‍‍

Thanks

Re: Problem with JAAS configuration not working

andy — Mon, 10 Sep 2007 14:29:58 GMT

Hi

You need to configure CIFS to use Kerberos or passthrough authentication. See the wiki.

Andy