topic Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users in Alfresco Forum

Desactivate NTLM for CMIS but keep NTLM authenticate for users

jcoupey — Tue, 17 Oct 2017 13:32:15 GMT

Hello,I'm trying to connect a CMIS portlet from an other solution to an alfresco, doesn't work ( but works with an Alfresco without NTLM)However, I need to keep the NTLM for my users.Is there a way to keep the NTLM for users but deactivate only the one for CMIS ?Thank you,Joffrey

Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users

afaust — Tue, 17 Oct 2017 20:41:47 GMT

I am afraid there is not. Either you have HTTP SSO enabled or not. There currently is no differentiation between different HTTP-based APIs unless you manually rewire the authentication filter mapping.

Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users

cesarista — Wed, 18 Oct 2017 14:37:21 GMT

This reminds me that in some Alfresco 5.1 versions, when enabling Single Sign On, it is not possible to auth in CMIS endpoint. Maybe he is refering to this:

GitHub - keensoft/alf-21757-repo: Patch to ALF-21757 and ALF-21521

May you confirm your Alfresco version ?

Regards.

--C.

Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users

jcoupey — Wed, 18 Oct 2017 14:49:35 GMT

Hello,

Thanks for your comments, my Alfresco version is 5.2.

regards,

Joffrey

Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users

jcoupey — Thu, 19 Oct 2017 09:01:26 GMT

Mr Faust,

I'm not sure to understand how to manually rewire the authentication filter mapping, may I ask you further informations ?

Thank you

Sincerely,

Joffrey

Re: Desactivate NTLM for CMIS but keep NTLM authenticate for users

afaust — Fri, 20 Oct 2017 12:07:20 GMT

My remarks should not be construed as an advice on what to do. They were merely meant to explain that this is not supported, and you'd need to change a central piece of out-of-the-box configuration/implementation.

If you'd really wanted to go in that direction, you would have to change the servlet filter mappings inside the web.xml file bundled in the Alfresco Repository WAR. To do that, you should be familiar with the servlets specification, what the various Alfresco filters do and how they interact with other components of Alfresco. Again, this is not something that I advice or recommend.