Fallover Authentication with Active Directory & Alfresco

[enune]

Hi all,

I've been searching around for the best way of approaching this, but every tutorial/wiki entry I find is either confusing or incomplete.
Basically what, the client needs is this:

Active-Directory Authentication (Single-sign-on), authenticating to a Windows Server 2008 environment (either Kerberos or NTLM-passthru, I'm not sure which is the best way to go..)
However, the client also has users that are NOT on the active directory environment, but will still need to authenticate, this could be using the Alfresco internal authentication database if needs be.

Could someone please point me in the right direction? Especially regarding this form of "chained" authentication.

I am currently running Enterprise 3.0.1.

Thanks in advance,

Calum

[shnur]

Please, anybody,  answer the question. It it very important for me

[enune]

Hi again,

I have managed to get SSO via NTLMv1 working seamlessly, but am having extreme difficulty getting "chained authentication" to work with NTLM..

Could someone please provide an example of a chaining-authentication-context.xml that would support NTLM passthru SSO and (if SSO fails) fallback to Alfresco "local" authentication?

Thanks in advance   :?