cancel
Showing results for 
Search instead for 
Did you mean: 

CMIS & Kerberos issue

vincent-kali
Star Contributor
Star Contributor
Hi,
I'm trying to synchronize share site with CmisSync or Alfresco Desktop Sync.

I made it working, but as soon as I add Kerberos as authentication subsystem, Cmis sync is not working anymore,
and the URL https://alfrescoserver.mydomain.local/cmisatom doesn't return anything (blank screen), and
generate the log ouput below:
My authentication chain:
authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap-ad1:ldap-ad,kerberos1:kerberos

SSO enabled on Kerberos subsystem only.


SEVERE: Servlet.service() for servlet [cmisatom10] in context with path [/alfresco] threw exception
java.lang.ArrayIndexOutOfBoundsException: End of data buffer
   at org.alfresco.jlan.server.auth.asn.DERBuffer.unpackBytes(DERBuffer.java:189)
   at org.alfresco.jlan.server.auth.asn.DERApplicationSpecific.derDecode(DERApplicationSpecific.java:89)
   at org.alfresco.jlan.server.auth.asn.DERBuffer.unpackObject(DERBuffer.java:363)
   at org.alfresco.jlan.server.auth.asn.DERBuffer.unpackApplicationSpecific(DERBuffer.java:753)
   at org.alfresco.jlan.server.auth.spnego.NegTokenInit.decode(NegTokenInit.java:185)
   at org.alfresco.repo.webdav.auth.BaseKerberosAuthenticationFilter.authenticateRequest(BaseKerberosAuthenticationFilter.java:387)
   at org.alfresco.repo.webdav.auth.BaseSSOAuthenticationFilter.doFilter(BaseSSOAuthenticationFilter.java:135)
   at sun.reflect.GeneratedMethodAccessor455.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
   at java.lang.reflect.Method.invoke(Method.java:606)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:112)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at com.sun.proxy.$Proxy294.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
   at org.alfresco.web.app.servlet.CmisSecurityContextCleanerFilter.doFilter(CmisSecurityContextCleanerFilter.java:49)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
   at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:61)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
   at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
   at org.apache.coyote.ajp.AjpAprProcessor.process(AjpAprProcessor.java:197)
   at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
   at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.java:1852)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:724)


Thanks for you help !
Vincent




2 REPLIES 2

vincent-kali
Star Contributor
Star Contributor
Solution found: Disable Kerberos SSO, and CMIS auth is working (SSO still remains active for CIFS).

Vincent

nicolasraoul
Star Contributor
Star Contributor
Hello Vincent,

CmisSync Business can be used with SSO.
We can send you an evaluation version.
For more details see http://cmissync.com/get/

Cheers!
Nicolas