enable SSO

[christian1980]

Hello,

I'm currently trying to configure SSO in alfresco and share 4.0.

For now I've already installed active directory synchronization and it's working. Now I'm trying to configure SSO but I can't find an easy step by step tutorial for version 4.

Where can I find such information ? The doc is not explaining the steps like a tutorial so it's not very easy to configure it.

Alfresco run on a Windows 2008 R2 server.

[throwback]

Hi Christian,

I managed this recently on an AD 2003 based domain, but using Ubuntu 10.04 as the platform, using MySql as database. I started by using the stack installer and then worked from there.

I could see no real benefits to using windows server, although I am sure more knowledgeable users here can correct me!

I went for ldap synch and kerberos authentication. How far have you got so far?

I have taken extensive notes also.

I found the trick is to build your authentication chain up gradually in layers- get ldap-ad sync/auth working first, then add kerberos and disable ldap Auth, let ldap sync users and kerberos handle authentication. Also, be completely uncompromising about documenting every single change you make to the configuration, and take copious backups. I built up on a VM and ended up with about 30 snapshots.

Main guide I followed was:

http://docs.alfresco.com/4.0/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-kerberos-...

I ended up putting all my authentication configuration etc in ./tomcat/shared/classes/alfresco-global.properties

Ignore guides for anything earlier than 3.4, try to stay close to the alfresco 4.0 documentation linked above. I wasted a lot of time following obsolete documentation.

Kind regards,

Iain Bagnall

[gronfelt]

Which variant have you considered for SSO? NTLM or Kerberos?

I've managed to set up NTLM SSO with the passthru subsystem in Alfresco running on Win 2k8r2. However, since that requires NTLMv1 I decided to go with Kerberos instead. I never got that working in Windows, so instead I installed Alfresco on a Linux server (CentOS) and then everything works.

So, please let us know what your intentions are and how far you've gotten.