Kerberos and passthru authentication chan

[ivan_plestina]

Hello,

is it possible to have the kerberos SSO and passthru SSO chained (as fallback for non-Kerberos)? If SSO is not available for both is it possible to at least to have Kerberos SSO and fallback to passthru login so that we can support non-LAN users (or is LDAP better choice here for fallback?)?

Regards,
Ivan

[litie]

Hi there, any update about that? i've got the same issue…

[ashex]

I don't believe you can enable SSO on multiple subsystems for the same reason you can't enable CIFS on more then one subsystem, however you can point users to the login form if SSO is not working. Take a look at this section of the Authentication Subsystems page:

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuring_the_Authentication_Chai...

[litie]

Are you sure is it possible?  For example, in that case:

    authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

if kerberos failed ( pc out of domain) i'm not able to logon to the share because i cannot see any login form.

I don't understand…

please can you help me?

regards

[ashex]

At the end of Example 1 in the wiki page I linked it explains a bit about using the login page directly, this one:

http://localhost:8080/alfresco/faces/jsp/login.jsp

[litie]

Ok, but it's true for HTTP connection. What about CIFS?

[ashex]

Take a look at the wiki page I linked.