cancel
Showing results for 
Search instead for 
Did you mean: 

Alfresco 3.4c kerberos authentication

mvba
Champ in-the-making
Champ in-the-making
I seem unable to get kerberos authentication to work.

alfresco starts without errors, but biggest problem is that i seem not to have any logging about users connecting???

i disabled SSO, and since then a linux firefox can log into alfresco, but not with the administrator account.

It's a AD windows2008 R2, and test client is a win7 machine with IE.

kinit works like this, but fails with the second form (i donno if this is normal)
[]# kinit -V -k -t kerberos/alfrescohttp.keytab "HTTP/alfresco.alfresco.ba.be"
Authenticated to Kerberos v5
[]# kinit -V -k -t kerberos/alfrescohttp.keytab "alfrescohttp@ALFRESCO.BA.BE"
kinit(v5): Key table entry not found while getting initial credentials


alfresco-global.properties file:
———————
authentication.chain=kerberos1:kerberos

kerberos.authentication.realm=ALFRESCO.BA.BE
kerberos.authentication.sso.enabled=false
kerberos.authentication.authenticateCIFS=true
kerberos.authentication.cifs.password=Z0g3k2n9p1!
kerberos.authentication.http.password=Z3k5n7k8q2!
kerberos.authentication.defaultAdministratorUserNames=Administrator,admin

cifs.localname=Alfresco
cifs.serverName=Alfresco
cifs.domain=ALFRESCO
cifs.broadcast=172.16.1.255
cifs.announce=true
cifs.hostannounce=true
cifs.WINS.primary=172.16.1.1
filesystem.name=Documenten
filesystem.domainMappings=ALFRESCO
filesystem.domainMappings.value.ALFRESCO.subnet=172.16.1.0
filesystem.domainMappings.value.ALFRESCO.mask=172.16.1.255
1 REPLY 1

mvba
Champ in-the-making
Champ in-the-making
apparently too much fiddling with AD and windows-7. reinstalled both and redid keytabs, now it works.