Alfresco Community CIFS for usual users

[smgeeper]

Dear All!

I'm faced with some strange situation.

I'm install Alfresco community version to Centos 7.0.

I install CIFS connection

#### alfresco-global.properties

alfresco.authentication.authenticateCIFS=true

cifs.enabled=true

cifs.serverName=${localname}

cifs.tcpipSMB.port=1445

cifs.netBIOSSMB.namePort=1137

cifs.netBIOSSMB.datagramPort=1138

cifs.netBIOSSMB.sessionPort=1139

and add redirect rules to iptables. It works for local admin.

But it doesn't works for ActiveDirectory users, who can use web-interface.

Please let me know if somebody already connect to alfresco community via CIFS with AD authorization.

[badim]

try

# CIFS configuration

#

cifs.enabled=true

cifs.ipv6=disabled

cifs.serverName=doc

cifs.domain=DOMAIN.LAN

cifs.hostannounce=true

cifs.urlfile.prefix=http://${localname}:8080/alfresco

cifs.bindto=0.0.0.0

cifs.broadcast=255.255.255.255

cifs.hostannounce=true

cifs.tcpipSMB.port=10445

cifs.netBIOSSMB.sessionPort=10139

cifs.netBIOSSMB.namePort=10137

cifs.netBIOSSMB.datagramPort=10138

cifs.platforms=linux,solaris,macosx

cifs.WINS.autoDetectEnabled=true

[afaust · Accepted solution]

With CIFS you can only have an "either-or" configuration. Either "local users" (such as the default admin) OR AD users can be authenticated.

To enable authentication for AD users, you typically have to configure either the passthru or kerberos authentication subsystems and then set the respective subsystem to "authenticateCIFS", e.g. for passthru: passthru.authentication.authenticateCIFS=true

Since the default admin cannot authenticate on CIFS with passthru or kerberos, it is recommended to create / use an AD user as an additional admin. The default admin will only be used as a fallback then...