Okay, so I have some additional information that may help elicit a response from the Alfresco Community. I have everything functioning properly with LDAP-AD as far as authentication and synchronization goes. If I enable SSO in passthru/ntlm-filter.properties, set ldap.authentication.active=false in ldap-ad/ldap-ad-authentication.properties and add passthru1
assthru into my authentication chain, I get the following error:
If I disable SSO, it lets me get in just fine by entering the credentials manually.
Here are the debug logs for the last few authentication attempts:
As you can see from the logs, the username is not correctly being passed in both IE8 and Firefox 3.6.10. I have added our server IP address to the about:config in Firefox as the Wiki explains and other posts have explained as well as added the server in IE8 as a trusted Intranet server.
Any help would be greatly appreciated! I am running on Windows Server 2008, MySQL Database, and Alfresco CE 3.4a. I would really like to get SSO working as this will be used company-wide for our Intranet portal and would prefer to not force users to login each session.
Regards,
Matthew Rose
assthru into my authentication chain, I get the following error:net.sf.acegisecurity.AuthenticationServiceException: Failed to open passthru auth session at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:783)
If I disable SSO, it lets me get in just fine by entering the credentials manually.
Here are the debug logs for the last few authentication attempts:
09:33:57,111 DEBUG [alfresco.passthru.auth] Authenticate user=admin via local credentials
09:33:57,111 DEBUG [alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMLocalToken@1165281: Username: admin; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
Exception in thread "Thread-73" org.apache.chemistry.opencmis.commons.exceptions.CmisRuntimeException: Unauthorized
at org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.convertStatusCode(AbstractAtomPubService.java:411)
at org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.read(AbstractAtomPubService.java:483)
at org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.getRepositoriesInternal(AbstractAtomPubService.java:635)
at org.apache.chemistry.opencmis.client.bindings.spi.atompub.RepositoryServiceImpl.getRepositoryInfos(RepositoryServiceImpl.java:68)
at org.apache.chemistry.opencmis.client.bindings.impl.RepositoryServiceImpl.getRepositoryInfos(RepositoryServiceImpl.java:85)
at org.apache.chemistry.opencmis.client.runtime.SessionFactoryImpl.getRepositories(SessionFactoryImpl.java:108)
at org.alfresco.wcm.client.util.impl.GuestSessionFactoryImpl.getRepository(GuestSessionFactoryImpl.java:105)
at org.alfresco.wcm.client.util.impl.GuestSessionFactoryImpl.run(GuestSessionFactoryImpl.java:115)
at java.lang.Thread.run(Thread.java:619)
09:34:08,518 DEBUG [alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMPassthruToken@194ef9f: Username: null; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
09:34:20,736 User:guest DEBUG [alfresco.passthru.auth] Authenticate org.alfresco.repo.security.authentication.ntlm.NTLMPassthruToken@624159: Username: null; Password: [PROTECTED]; Authenticated: false; Details: null; Not granted any authorities via token
09:34:20,846 User:guest DEBUG [alfresco.passthru.auth] Passthru stage 1 token org.alfresco.repo.security.authentication.ntlm.NTLMPassthruToken@624159: Username: null; Password: [PROTECTED]; Authenticated: false; Details: [DOMAIN]\[SERVER_IP],TCP/IP NetBIOS; Not granted any authorities
09:35:22,222 DEBUG [alfresco.passthru.auth] Removed expired NTLM token org.alfresco.repo.security.authentication.ntlm.NTLMPassthruToken@624159: Username: null; Password: [PROTECTED]; Authenticated: false; Details: [DOMAIN]\[SERVER_IP],TCP/IP NetBIOS; Not granted any authoritiesAs you can see from the logs, the username is not correctly being passed in both IE8 and Firefox 3.6.10. I have added our server IP address to the about:config in Firefox as the Wiki explains and other posts have explained as well as added the server in IE8 as a trusted Intranet server.
Any help would be greatly appreciated! I am running on Windows Server 2008, MySQL Database, and Alfresco CE 3.4a. I would really like to get SSO working as this will be used company-wide for our Intranet portal and would prefer to not force users to login each session.
Regards,
Matthew Rose
