cancel
Showing results for 
Search instead for 
Did you mean: 

authenticate users with pc not in domain

sharifu
Confirmed Champ
Confirmed Champ
I am trying to use a pc that is not joined to domain to log in to alfresco. i am able to do so with a pc that is joined to domain. i recieve the follwoing error



ERROR [app.servlet.NTLMAuthenticationFilter] [http-apr-8080-exec-131] Client IT-MANAGER-PC using NTLMv2 logon, not valid with passthru authentication


my config is as follows


authentication.chain=passthru1:passthru,ldap1:ldap-ad
alfresco.authentication.authenticateCIFS=false
ntlm.authentication.sso.enabled=true
passthru.authentication.authenticateCIFS=true
ldap.authentication.active=false
ldap.synchronization.active=true
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin=false
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://echo.uk.domain.com:389
ldap.synchronization.java.naming.security.authenticaton=simple
ldap.synchronization.java.naming.security.principal=administrator@domain.com
ldap.synchronization.java.naming.security.credentials=****
ldap.synchronization.userSearchBase=ou\=Sites,dc\=domain,dc\=com
synchronization.synchronizeChangesOnly=false
### synchronization.import.cron=0 0 0 * * ?
synchronization.syncWhenMissingPeopleLogIn=true
synchronization.autoCreatePeopleOnLogin=true
passthru.authentication.domain=SPECTRUM
passthru.authentication.servers=SPECTRUM\\echo.uk.domain.com,DOMAIN\\akutan.usa.domain.com
passthru.authentication.defaultAdministratorUserNames=johnl,markw,administrator,alfresco,sharifu

ldap.synchronization.queryBatchSize=1000
#ldap.synchronization.groupDifferentialQuery=(&(objectclass=nogroup)(!(modifyTimestamp<\={0})))
#ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))
#ldap.synchronization.personDifferentialQuery=(& (objectclass=user)(!(modifyTimestamp<\={0})))
ldap.synchronization.groupQuery=(objectclass\=group)

ldap.synchronization.groupSearchBase=cn\=users,dc\=domain,dc\=com



what do i need to amend?
2 REPLIES 2

sujaypillai
Confirmed Champ
Confirmed Champ
What is the outcome when you enter the IP address of the Alfresco server and try to login from browser?

kavilash23
Champ on-the-rise
Champ on-the-rise
As far as I know only NTLM v1 is supported in this configuration. Have you tried using NTLM v2 if negotiated?