NTML + LDAP Synch

[naveenkumar]

Hi all,

Does anybody know how to enable NTML Auth + LDAP synch.

I had used LDAP auth + LDAP sysch, imported the users to alfresco from AD.

Now i wud like to disable LDAP auth and make NTML authentication. I tried to rename ldap-authentication-context.xml but theres a bean 'ldapInitialDirContextFactory' thats been used by ldap-synchronisation-context.xml that requires this bean.

I went thru wiki got to know how to enable NTML auth. My question is how to enable it with dap sych,

Does anybody have the time to give me just a pointer to the config files and it wud be great.

Reason i am asking this is i get  exception when i enable NTMLAuthentication (for webdav and authentication filter)in web.xml::

Exception au démarrage du filtre WebDAV Authentication Filter
javax.servlet.ServletException: Required authentication mode not available
    at org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter.init(NTLMAuthenticationFilter.java:173)



thank you

[naveenkumar]

Ok I configured ntml-authentication-context.xml, made webdav use NTMLAuthenticationFilter in web.xml,
I get when i try to log in to webdav


org.alfresco.repo.security.permissions.AccessDeniedException: Accès interdit.  Vous n'avez pas la permission de réaliser cette opération.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:53)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.alfresco.repo.audit.AuditComponentImpl.auditImpl(AuditComponentImpl.java:264)
   at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:194)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:210)
   at $Proxy40.resolveNamePath(Unknown Source)
   at org.alfresco.repo.webdav.WebDAVHelper.getNodeForPath(WebDAVHelper.java:278)
   at org.alfresco.repo.webdav.LockMethod.executeImpl(LockMethod.java:180)
   at org.alfresco.repo.webdav.WebDAVMethod$1.execute(WebDAVMethod.java:144)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:236)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:185)
   at org.alfresco.repo.webdav.WebDAVMethod.execute(WebDAVMethod.java:152)
   at org.alfresco.repo.webdav.WebDAVServlet.service(WebDAVServlet.java:129)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
   at org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:844)
   at org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:414)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:174)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)
   at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)
   at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
   at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
   at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
   at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access Denied
   at org.alfresco.repo.security.permissions.impl.acegi.ACLEntryAfterInvocationProvider.decide(ACLEntryAfterInvocationProvider.java:299)
   at org.alfresco.repo.security.permissions.impl.acegi.ACLEntryAfterInvocationProvider.decide(ACLEntryAfterInvocationProvider.java:316)
   at org.alfresco.repo.security.permissions.impl.acegi.ACLEntryAfterInvocationProvider.decide(ACLEntryAfterInvocationProvider.java:200)
   at net.sf.acegisecurity.afterinvocation.AfterInvocationProviderManager.decide(AfterInvocationProviderManager.java:107)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.afterInvocation(AbstractSecurityInterceptor.java:329)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:82)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:176)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)

somebody pls tell me what the problem is . Exception is thrown in

              chain.doFilter( req, resp); in NTMLAuthenticationFilter,java

pls if anybody know where i might have gone wrong….if needed i ll post the config files.

[lakshmi]

I too face the same exception, does anybody have a solution for this?

I configured NTLMAuthenticationFilter for the

<filter-name>Authentication Filter</filter-name>
<filter-class>org.alfresco.web.app.servlet.NTLMAuthenticationFilter</filter-class>

and also for WebDav Authentication

  <filter>
      <filter-name>WebDAV Authentication Filter</filter-name>
       <filter-class>org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter</filter-class>
</filter>

On trying to edit a word document uploaded by the logged in user, I get same org.alfresco.repo.security.permissions.AccessDeniedException exception.

I use CAS SSO for the Web UI….this exception comes when the weddavservlet is reached in chain.dofilter

ANY HELP ANYONE? :roll: