Basic SSO and NTLM help, please... Getting frustrated...

[deaconboogie]

This is really wearing me down…  :shock:

I'm using 3.2 and have read http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems pretty heavily, and I still can't seem to get this to work correctly.

All I want to do is the following:

1. User visits an Alfresco page and based on the logged in domain user, logs in as that user.
2. If the browser presents no NTLM, it prompts and the user can enter (DOMAIN\user or user@domain).

I need to use passthru because I don't want to worry about password sync-up.

Here are the only file modifications I've made to alfresco-global.properties:

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru

ntlm.authentication.sso.enabled=true
ntlm.authentication.mapUnknownUserToGuest=false
passthru.authentication.domain=MYDOMAIN
passthru.authentication.servers=MYDOMAIN\\dc.mydomain.local
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=true
passthru.authentication.guestAccess=true
passthru.authentication.defaultAdministratorUserNames=administrator
‍‍‍‍‍‍‍‍‍‍‍

Right now, it prompts me for credentials, but it wont accept anything I put in other than the local default admin/admin Alfresco user credentials.

Can anyone share some straightforward, non-confusing examples or help me untangle the above configuration?

Thanks!

[dward]

It would appear that guest logons are validated against the back-end domain server. So you would have to actually enable the domain guest account to enable guest logins using passthru.

[_sax]

Okay, thank you! I checked webscripts, and they are working, even though I'm not able to login manually as guest. So all is well 

[wiz561]

OK, I have a similar situation.  Bottom line is that I got the web authentication working by using the information in this post.

I'm having a problem with trying to authenticate with my AD credentials to the cifs share.  I can login to the share using the local default admin/admin username and password, but can't use my AD credentials.

I have a feeling that I didn't set an option up properly.  Can somebody assist in giving a hint on how to accomplish this?