NTLMv2/SSO/AD

[ivan_plestina]

I'm trying to configure SSO with Alfresco 3 Stable in an AD environment. Documentation for NTLM is quite confusing when regarding to NTLMv2 usage. After configuring client to only send NTLMv2 hashes I get the following error when trying to access Alfresco from IE:

[org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Client NC8000 using NTLMv2 logon, not valid with passthru authentication

Same config works perfectly when LM & NTLM are enabled.

Is it possible to have SSO using NTLMv2 and if yes can you post required config changes/example (for both web client and cifs)?

[phileas]

Hi,

looing at the wiki page at: http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

Note that the support of NTLMv2 is only for configurations storing psswords (or hashes) in Alfresco. As NTLMv2 has been designed to avoid "man-in-the-middle" attacks, any passthru authentication is impossible.

So I think NTLMv2 is not possible with passthru to ADS.

Regards,

P.