ntlm auth and chaining

[jos_snellings]

Having read
http://wiki.alfresco.com/wiki/Talk:Enterprise_Security_and_Authentication_Configuration

the document says:
Although NTLM pass-through method is not supported for ChainedAuthentication in 2.0 …

Neither it is in 2.1E. Will it be in 2.2E?

Furthermore, indication [by naming this bean as "authenticationComponent" in configuration file] sounds a little terse to me.
It could benefit from a word of explanation: which configuration file. chaining-authentication-context.xml ?

Thank you.

[andy]

Hi

NTLM chaining is supported in V2.1 onwards. There can only be one go at NTLM so it is not so much chaining as use the first one in the list of a given type. In 2.1 and after, there is a ChainingAuthenticationComponent class. See the chaining examples in later releases. It is this bean definition that needs to be named authenticationComponent so it is used in all the places that wire up an authentication component. CIFS is one of them.

Andy

[jos_snellings]

Thank you for the answer. If I get it right then:

As in chaining-authentication-context.xml.sample.

But do you mean that, if we add the authenticationComponent in this file,
<bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ChainingAuthenticationComponentImpl">
   <property name="authenticationComponents">
      <list>
             <ref bean="NTLMAuthenticationComponent"/>
      </list>
   </property>
   <property name="mutableAuthenticationComponent">
      <ref bean="authenticationComponentImplAlfresco"/>
   </property>
</bean>


And that this bean NTLMAuthenticationComponent must be the name of the bean declared/configured in ntlm-authentication-context:

    <bean id="NTLMAuthenticationComponent" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <property name="useLocalServer">
                <value>false</value>
        </property>

….
(this setup brings about configuration errors).
Please confirm that this is the way to go.

Jos

[andy]

Hi

It sounds correct. If you are getting initialisation problems check you have admSearchService wired up for the alfresco authentication bean and not searchService.

Andy

[maxmax]

is there someone with a chaining working who can provide samples ?