CIFS Issues

[durrell]

This is my last remaining issue with my Alfresco implementation.

I can't map drives to Alfresco, nor can I authenticate by just trying to connect to \\alfresco.

Error log is telling me this:

11:32:23,721 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=7, auth ctx=[NTLM,Challenge=299c1e9102a9485e]
11:32:23,725 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
11:32:23,727 ERROR [org.alfresco.smb.protocol.auth] org.alfresco.jlan.smb.SMBException: Invalid parameter
11:32:23,734 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
11:32:23,735 ERROR [org.alfresco.smb.protocol.auth] org.alfresco.jlan.smb.SMBException: Invalid parameter

I'm also having an issue from within the Alfresco site. It seems to want to append an "a" to the Alfresco hostname within all of the download links. That can't work, since obviously our Alfresco hostname is simple "alfresco".

Any ideas? I can get more log information if necessary. I'm running on an Ubuntu server and running Alfresco as root (for now, since I haven't changed the CIFS ports to non-privileged ports).

[durrell]

I found the correct file and specified the domain, but it's still not working. 

[ofrxnz]

Sorry for the delay here is that config.  it works for me …..It doesnt have the domain mappings in it, but it will choak if they are in the wrong spot….

some things to throw out, Is alfresco running as "root" if not, the CIFS ports may be privlaged and you may need to port map around it…

general firewall issues….

in this config DOMAIN = domain withouth the suffix…..eg domain.com is wrong

domain must be ALL CAPS

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

   <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao" >
         <property name="allowSetEnabled" value="true" />
         <property name="allowGetEnabled" value="true" />
         <property name="allowDeleteUser" value="true" />
         <property name="allowCreateUser" value="true" />
   </bean>


   <!– The authentication component.                                      –>

   <!– Use the passthru authentication component to authenticate using    –>
   <!– user accounts on one or more Windows servers.                      –>

   <!– Properties that specify the server(s) to use for passthru          –>
   <!– authentication :-                                                  –>
   <!–   useLocalServer   use the local server for authentication         –>
   <!–   domain           use domain controllers from the specified domain–>
   <!–   servers          comma delimted list of server addresses or      –>
   <!–                    names                                           –>

   <bean id="authenticationComponent"
         class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl"
         parent="authenticationComponentBase">
       <property name="useLocalServer">
           <value>false</value>
       </property>
       <property name="servers">
           <value>DOMAIN\10.0.0.1,DOMAIN\10.0.0.2,10.0.0.1</value>
       </property>
       <property name="personService">
           <ref bean="personService" />
       </property>
       <property name="nodeService">
           <ref bean="nodeService" />
       </property>
       <property name="transactionService">
           <ref bean="transactionComponent" />
       </property>
       <property name="guestAccess">
           <value>false</value>
       </property>


   </bean>

</beans>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

[durrell]

NTLM broke my authentication completely when I used that config. No errors in the log, it just wouldn't authenticate.

I believe we're going to use Kerberos, and we're going to let Alfresco's support team take care of it. We purchased our enterprise license this week, so this coming week we'll be opening a support ticket.

I'll update this thread when we find the solution and get it working. I'm hoping that Kerberos does the trick.

[womer]

I've been looking around for an answer related to this statement below.  I need to enter multiple subnets for the same domain, but when I add a second Domain name line, I get an error stating there's multiple mappings for the same domain.  To be honest, I don't even care, is there a global subnet/mask that would encompass every possible IP/subnet combo?  I only have the one domain, but 12,000 clients across multiple subnets like 192.168.1.*, 172.16.* and 10.*

Thanks,
Scott

Mapped client /10.0.7.201 to domain null

looks like you need to manually map NTLM domains in alfresco….

basicaly they are rules that say, if the client doesn't specify their domain, assume this is their domain based on their ipaddress

you can enter multiple domain/subnets by simply repeating the Domain Name line for each one

<DomainMappings>
  <Domain name="ALFRESCO" subnet="192.168.1.0" mask="192.168.1.255"/>
</DomainMappings>
‍‍‍‍