cancel
Showing results for 
Search instead for 
Did you mean: 

Disable CIFS and FTP with LDAP

morleyd
Champ in-the-making
Champ in-the-making
I'm using LDAP for authentication and get: "org.alfresco.error.AlfrescoRuntimeException: Wrong authentication setup for alfresco authenticator" when Alfresco starts. Additionally, we do not expect to use FTP because it is an unsecure protocol. We do plan to use WebDAV connections from Windows Explorer. Alfresco is running on Red Hat Linux. Here are my questions:

1) Does Alfresco use secure FTP?
2) Can Alfresco FTP be disabled and, if so, how? (I saw this post: http://forums.alfresco.com/viewtopic.php?t=1962 which explains how to change the bootstrap-context.xml file, but I'd like to avoid rebuilding the .war file if I can.)
3) Can CIFS be disabled and, if so, how? (Are there Important Things that depend on CIFS being configured?)
5 REPLIES 5

sdavis139
Champ in-the-making
Champ in-the-making
As far as disabling, you can alter the settings in $ALF_HOME/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml

slickshow
Champ in-the-making
Champ in-the-making
I'd like to turn off CIFS without having to modify the war file (commenting out the cifs bean on bootstrap-context.xml or modifying file-servers.xml). Is there a way to do that?

I tried to modify the file-servers-custom.xml by setting replace=true and serverEnable enabled="false", but did not seem to help. I've included the logs as well and BTW, I use AD for authentication and that works fine.

   <config evaluator="string-compare" condition="CIFS Server" replace="true">
          <serverEnable enabled="false"/>
      <host name="${localname}_A"/>
      <comment>Alfresco CIFS Server</comment>

      <!– Set to the broadcast mask for the subnet –>
      <broadcast>255.255.255.255</broadcast>

      <!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –>
      <tcpipSMB platforms="linux,solaris,macosx"/>
      <netBIOSSMB platforms="linux,solaris,macosx"/>

           <!– Can be mapped to non-privileged ports, then use firewall rules to forward
                    requests from the standard ports –>
          <!–
      <tcpipSMB port="1445" platforms="linux,solaris,macosx"/>
      <netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,mac
osx"/>
          –>

      <hostAnnounce interval="5"/>

      <!– Use Win32 NetBIOS interface on Windows –>
      <Win32NetBIOS/>
      <Win32Announce interval="5"/>

<!–
      <WINS>
         <primary>1.2.3.4</primary>
         <secondary>5.6.7.8</secondary>
      </WINS>
–>
      <sessionDebug flags="Negotiate,Socket"/>
   </config>

Logfile:
11:39:53,757 ERROR [org.alfresco.smb.protocol.auth] No valid CIFS authentication combination available
11:39:53,758 ERROR [org.alfresco.smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
11:39:53,768 ERROR [org.alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.initialize(EnterpriseCifsAuthenticator.java:348)
        at org.alfresco.filesys.server.config.ServerConfiguration.setAuthenticator(ServerConfiguration.java:3329)
        at org.alfresco.filesys.server.config.ServerConfiguration.processSecurityConfig(ServerConfiguration.java:2329)
        at org.alfresco.filesys.server.config.ServerConfiguration.init(ServerConfiguration.java:634)
        at org.alfresco.filesys.server.config.ServerConfiguration.onBootstrap(ServerConfiguration.java:4026)
        at org.alfresco.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:62)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:45)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:225)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:323)
        at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:134)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:184)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3854)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4359)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:761)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:741)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:553)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)

Thanks in advance.

stk137
Champ in-the-making
Champ in-the-making

I tried to modify the file-servers-custom.xml by setting replace=true and serverEnable enabled="false"
….

I am having the same problem.  Is there a bug causing Alfresco to ignore file-servers-custom.xml in regards to disabling CIFS?

stk137
Champ in-the-making
Champ in-the-making

robertoroberto
Champ in-the-making
Champ in-the-making
I have modified code of "ServerConfiguration" class in Repository Lib for disabling CIFS.
regards