topic Re: Alfresco 5.2 CIFS AD integration problem in Alfresco Forum

Alfresco 5.2 CIFS AD integration problem

torigabor — Tue, 30 May 2017 13:18:39 GMT

Hi All!I have a RHEL7 server with Alfresco 5.2. The web gui work well with Windows 2016 AD users. But CIFS isn't working with AD users. CIFS is working with admin (local) user.I need for two funcionality. Web gui, and CIFS with AD authentication.Does anyone have a live sample configuration? Or... Wh

Re: Alfresco 5.2 CIFS AD integration problem

mehe — Tue, 30 May 2017 18:01:08 GMT

I use in a similar setup:

passthru.authentication.servers=domain\\domaindc1.domain.loc
ldap.authentication.authenticateCIFS=false

IP for the server should work, but CIFS auth should be handled by passthru only

Re: Alfresco 5.2 CIFS AD integration problem

torigabor — Wed, 31 May 2017 12:24:37 GMT

Thank You for response!

I tried it. Unfortunately, it does not work for me. I set up this:

ldap.authentication.authenticateCIFS=false

passthru.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true

alfresco.authentication.authenticateCIFS=false
alfresco.authentication.allowGuestLogin=false

ntlm.authentication.sso.enabled=false
ntlm.authentication.authenticateCIFS=false

Re: Alfresco 5.2 CIFS AD integration problem

torigabor — Wed, 31 May 2017 12:49:00 GMT

2017-05-31 14:48:01,216 ERROR [auth.cifs.PassthruCifsAuthenticator] [AlfJLANWorker14] org.alfresco.jlan.smb.SMBException: Invalid parameter

Re: Alfresco 5.2 CIFS AD integration problem

mehe — Wed, 31 May 2017 19:11:11 GMT

Just asking: You already tweaked the clients registry for use of SMBv1? - Alfresco is only able to offer SMBv1 not SMBv2

Re: Alfresco 5.2 CIFS AD integration problem

torigabor — Tue, 06 Jun 2017 13:56:47 GMT

Hmm. Thank You for idea. I will check it soon.

Re: Alfresco 5.2 CIFS AD integration problem

torigabor — Tue, 06 Jun 2017 15:02:27 GMT

I have an Ubuntu 16.04 LTS client, and a Windows 10 client. Admin user cifs share login ok on Linux and Windows, but AD user not working.

Re: Alfresco 5.2 CIFS AD integration problem

colinvv — Tue, 17 Dec 2019 23:16:55 GMT

Did you ever find a fix for connecting Windows clients via AD?

Re: Alfresco 5.2 CIFS AD integration problem

colinvv — Thu, 19 Dec 2019 09:17:49 GMT

I gave up on Samba and went to WebDAV... that is working well for all tested Windows clients. Just need to set the 'HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters\BasicAuthLevel' value to '2'.

Re: Alfresco 5.2 CIFS AD integration problem

afaust — Thu, 19 Dec 2019 10:23:34 GMT

Using passthru relies on NTLMv1, which as far as I know has been disabled / removed from the most recent Windows 10 versions / updates. Using kerberos instead of passthru might still work - as long as you can still reactivate SMBv1, which also is disabled by default in the most recent Windows versions, and probably going to not be reactivateable in the next version(s). Using WebDAV + SSL is the (Alfresco) recommended alternative for mapping Alfresco as a file system. That can be combined with Kerberos for SSO when using Active Directory.