CMIS authentication

[narfix]

Hello,

We are running Alfresco 3.4.7. It authenticates user from our domain automatically and it works fine.

I'm trying to make queries through cmis. But I must specify user and password to be able to query. It works when I specify them but problem is I don't have any other password than mine.

If I query use the following url : http://server/alfresco/service/cmis?repositoryId=XXXX without basic auth, the server sends back a 401 with WWW-Authenticate: Basic realm="Alfresco".

Can Cmis be configured to use the same SSO Share uses ?
Can Cmis be configured to use ntlm ?

Thanks a lot for any help.

[jpfi]

Hi,
as far as i know you should be able to use wcs & thereby the configured Alfresco authentication chain:
http://server/alfresco/wcs/cmis?repositoryId=XXXX
cheers, jan

[narfix]

yes but it doesn't…
here is my share-config-custom.xml

<alfresco-config>
  <config evaluator="string-compare" condition="Remote">
     <remote>
        <connector>
           <id>alfrescoCookie</id>
           <name>Alfresco Connector</name>
           <description>Connects to an Alfresco instance using cookie-based authentication</description>
           <class>org.springframework.extensions.webscripts.connector.AlfrescoConnector</class>
        </connector>
        <endpoint>
           <id>alfresco</id>
           <name>Alfresco - user access</name>
           <description>Access to Alfresco Repository WebScripts that require user authentication</description>
           <connector-id>alfrescoCookie</connector-id>
           <endpoint-url>http://localhost:8080/alfresco/wcs</endpoint-url>
           <identity>user</identity>
           <external-auth>true</external-auth>
        </endpoint>
     </remote>
  </config>

</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

and the auth section of the alfresco-global.properties :

authentication.chain=passthru1:passthru,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad

alfresco.authentication.allowGuestLogin=false

ntlm.authentication.sso.enabled=true

passthru.authentication.useLocalServer=false
passthru.authentication.domain=DOMAIN
passthru.authentication.servers=
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=Administrators

ldap.authentication.allowGuestLogin=false
ldap.authentication.userNameFormat=%s@domain.int
ldap.authentication.java.naming.provider.url=ldap://server:389
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I tried adding an "alfresco-feed" endpoint but it didn't work even with identity none.

Is it possible share-config-custom.xml be ignored ? (if the xml is malformed everything works… shouldn't it be offline ?)

Thanks a lot !!

[jpfi]

Hi,
cmis & http://server/alfresco/wcs/cmis?repositoryId=XXXX or  http://server/alfresco/service/cmis?repositoryId=XXXX has nothing to to with share & share's remote/endpoint configs.
cheers, jan

[narfix]

Oh !! I didn't know !!
Where should I look then ??

[narfix]

I completly misunderstood you !!
I didn't notice the url weren't the same between /service and /wcs…  *Doh*   ops:
The queries are now working ok

Sorry for that and a real big thanks for your help !!!

[jpfi]

You're welcome -> enjoy CMIS 😉