cancel
Showing results for 
Search instead for 
Did you mean: 

Custom Authentication Subsystem + CIFS

andrepra
Champ in-the-making
Champ in-the-making
I wrote a custom authentication subsystem to authenticate user on an external database for some protocols (ftp, cmis, cifs,…) and support CAS SSO for standard HTTP request. The subsystem works fine but I can't use the CIFS protocol.

authentication.chain=myDbCAS1:myDbCAS

myDbCAS is the custom susbsystem

Reading the wiki I found that the standard alfrescoNTLM subsystem can manage the CIFS authetication, so I added it to my authentication chain

authentication.chain=pumaCAS1:pumaCAS,alfrescoNtlm1:alfrescoNtlm


Now I can access via CIFS with the Alfresco local user (ie: admin). I would access the CIFS with the user stored in myDb.
My authenticationComponent class implements NLTMAuthenticator interface. If I change the file alfresco-authentication-context.xml using my class




   <bean id="authenticationComponent" class="it.quix.alfresco.repo.security.authentication.MyDbAuthenticationComponentImpl"
      parent="authenticationComponentBase">
      <property name="nodeService">
         <ref bean="nodeService" />
      </property>
      <property name="personService">
         <ref bean="personService" />
      </property>
      <property name="transactionService">
         <ref bean="transactionService" />
      </property>
      <property name="defaultAdministratorUserNameList">
         <value>${mydb.authentication.defaultAdministratorUserNames}</value>
      </property>     
   </bean>
  
…..

I can perform CIFS authentication on MyDb. But don't appear to be a clear solution. I would prefer that mydb subsystem support CIFS protocol. What I have to do?

Thanks
1 REPLY 1

afaust
Legendary Innovator
Legendary Innovator
Hello,

your authentication subsystem needs to provide a bean called "cifsAuthenticator" (implementing the ICIFSAuthenticator interface) in order to be invoked when CIFS connections need to be authenticated. That bean than ties into your DB based authentication.

Regards
Axel