CIFS, Webdav, Sharepoint wiht AD kerberos (SSO) + alfrescoNtlm

[alfresquiviris]

Hello,

We have configured AD Kerberos + SSO for domain users and alfrescoNtlm (alfresco internal database) for externals users (non domain)

All is working properly except CIFS, WebDav and Sharepoint acces for external users.

When trying to access as a a non domain user I am able to access to share via http://server/share/page/page?pt=login but if a try to access via WEBDAV or CIFS a user/password login pop-up appears but seems it's always expecting a windows domain user and I can't login as a external user.

Our setup should work as intended? Is there any way to accomplish what we need?

Thanks

[afaust]

Hello,

when you have setup SSO for your domain users, CIFS and SharePoint will not work for external users at all. You might be able to get WebDAV to work when you point users to the Alfresco Explorer login page first, but WebDAV will also not work for mapping network drives, since you only can access the login page from a browser.
For the interfaces listed it is pretty much impossible to have SSO via Kerberos and access for external users at the same time, unless you support some kind of authentication federation where your AD trusts the AD / DC of the external users (if there is any).

Regards
Axel

[alfresquiviris]

Thanks Axel, so If I disable Kerberos SSO it should work? And as is an SSO problem related if I change the Kerberos for passthru I'll get the same result? Isn't it?

[afaust]

Correct.

[alfresquiviris]

Thanks Axel