NTLMv2 and Passthru

[carltonw]

I'm getting this error in alfresco.log when I try to access my alfresco site using NTLM SSO passthru:

"client CW-VISTA using NTLMv2 logon, not valid with passthru authentication"

The documentation says that you can't use NTLMv2 with passthru so how can I use NTLM?

[jtp]

Edit your group policy, under computer configuration, security settings, local policies, security options.

You should see something about network security: Lan manager authentication level.
Try changing that to send lm & ntlm, and v2 if negotiated.

[carltonw]

JTP,
Thanks for the response. Strange thing is that this worked on a previous try at getting this working.

Did you ever get NTLM passthru working with 3 Stable and Share?
Carlton.

[jtp]

Single sign on, no.  NTLM manual authentication, yes.

[carltonw]

Can you tell me how you got manual NTLM working for both Alfresco and Share? (did it break CIFS?)
If I could see your config files that would be great. thanks.

[jtp]

using the instructions here: http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

Do everything under sections "Alfresco Explorer and WebDav SSO using NTLM " and "NTLM Passthru Authentication" but not "Alfresco Share SSO using NTLM " 
That will get SSO working for /alfresco and manual authentication working for Share.  This is in an AD environment with no LDAP sync.
And yes it broke CIFS.

[carltonw]

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

[jtp]

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

Currently, that's normal to only be able to sign in to share after signing in to alfresco.  I'm sure it's in the plan sometime to remove the requirement, but not yet. 

Best of luck to you on the CIFS front,  it seems to be one of the most posted about items on this forum.  I didn't find it important enough to go through the hassle.