Please help ... authenticating against NT 4.0 Domain server

[alexgrimmy]

I've read pretty much all the postings and documents on LDAP, NTLM, CFIS, and on, but I just can't get it to work.  If you can spare your time and provide step-by-step instructions, I would be eternally grateful – I may even buy you lunch if you're nearby.

Background:
- I've downloaded and installed Alfresco 1.4 Community Edition (Tomcat) that runs on my Windows XP SP2 box.
- We have a NT 4.0 Domain Server at 10.5.5.5 and the domain is ACME
- Since it's NT 4.0, my administrator tells me we have *no* LDAP, *no* Kerberos and *no* Active Directory

What do I need to do, in terms configuration, such that I can authenticate users based on their Windows username and password combination, instead of using Alfresco's user database?

[andy]

Hi

It sounds like you have only have NTLM as an option.
Check this is supported.

You will need the passthru authenticator.

See
http://wiki.alfresco.com/wiki/CIFS_Server_Authentication
http://wiki.alfresco.com/wiki/Configuring_NTLM


You will not be able to pull user information without LDAP, so Alfresco will create blank personal information as folk login.

Have you used the sample configuration files?
What does not work? Do you get any errors?

If you require more detailed help then get in touch with support http://www.alfresco.com/services/support/

Regards

Andy

[alexgrimmy]

Hi Andy,

Thanks for replying.  Here are the requested details:

Per "CIFS Server Authentication",
I modified the file-servers-custom.xml by adding:

  <config evaluator="string-compare" condition="Filesystem Security">
      <authenticator type="passthru">
        <Server>10.1.1.11,wwacme00</Server>
        <Domain>ACME</Domain>
      </authenticator>
   </config>
‍‍‍‍‍‍‍‍

Per "Configuring NTLM" instructions,
I the modified the web.xml by modifying:

   <filter>
      <filter-name>Authentication Filter</filter-name>

     <!– 2007-10-26 - Using NTLM filter below
      <filter-class>org.alfresco.web.app.servlet.AuthenticationFilter</filter-class>
      –>
      
      <!– For Novell IChain support use the following filter –>
      <!– (Enterprise version only)                          –>
      <!–
        <filter-class>org.alfresco.web.app.servlet.NovellIChainsHTTPRequestAuthenticationFilter</filter-class>
      –>
      
      <!– For NTLM authentication support use the following filter –>
      <!– (Enterprise version only)                                –>
        <filter-class>org.alfresco.web.app.servlet.NTLMAuthenticationFilter</filter-class>
   </filter>

   <filter>
      <filter-name>WebDAV Authentication Filter</filter-name>
      <!–
      <filter-class>org.alfresco.repo.webdav.auth.AuthenticationFilter</filter-class>
      –>
      <!– For NTLM authentication support use the following filter –>
      <!– (Enterprise version only)                                –>
        <filter-class>org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter</filter-class>
   </filter>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

…also…

   <!– For NTLM authentication support enable the following mapping –>
   <!– (Enterprise version only)                                    –>
   <filter-mapping>
      <filter-name>Authentication Filter</filter-name>
      <url-pattern>/navigate/*</url-pattern>
   </filter-mapping>
‍‍‍‍‍‍‍‍

Then the following changes by renaming the ntlm-authentication-context.xml.sample into the ntlm-authentication-context.xml file:

    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" >
        <property name="nodeService">
          <ref bean="nodeService" />
      </property>
    </bean>

    <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <property name="domain">
            <value>ACME</value>
        </property>
        <property name="servers">
            <value>10.1.1.11,acme</value>
        </property>
<!–        
        <property name="useLocalServer">
            <value>true</value>
        </property>
–>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

When I start Alfresco, I get a *giant* error let me the list the first handful

INFO: Deploying web application archive alfresco.war
16:11:10,156 ERROR [web.context.ContextLoader] Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'schemaBootstrap' defined in clas
s path resource [alfresco/bootstrap-context.xml]: Can't resolve reference to bean 'patch.schemaUpdateScript-V1.4-1' whil
e setting property 'applyUpdateScriptPatches[0]'; nested exception is org.springframework.beans.factory.BeanCreationExce
ption: Error creating bean with name 'patch.schemaUpdateScript-V1.4-1' defined in file [C:\Program Files\Alfresco ECMS C
ommunity Network\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\patch\patch-services-context.xml]: Can't resolve refer
ence to bean 'patchComponent' while setting property 'patchService'; nested exception is org.springframework.beans.facto
ry.BeanCreationException: Error creating bean with name 'patchComponent' defined in file [C:\Program Files\Alfresco ECMS
 Community Network\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\patch\patch-services-context.xml]: Can't resolve ref
erence to bean 'descriptorComponent' while setting property 'descriptorService'; nested exception is org.springframework
.beans.factory.BeanCreationException: Error creating bean with name 'descriptorComponent' defined in class path resource
 [alfresco/bootstrap-context.xml]: Can't resolve reference to bean 'systemBootstrap' while setting property 'systemBoots
trap'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'syste
mBootstrap' defined in class path resource [alfresco/bootstrap-context.xml]: Can't resolve reference to bean 'importerCo
mponent' while setting property 'importerService'; nested exception is org.springframework.beans.factory.BeanCreationExc
eption: Error creating bean with name 'importerComponent' defined in class path resource [alfresco/import-export-context
.xml]: Can't resolve reference to bean 'NodeService' while setting property 'nodeService'; nested exception is org.sprin
gframework.beans.factory.BeanCreationException: Error creating bean with name 'NodeService_security' defined in class pa
th resource [alfresco/public-services-security-context.xml]: Can't resolve reference to bean 'accessDecisionManager' whi
le setting property 'accessDecisionManager'; nested exception is org.springframework.beans.factory.BeanCreationException
: Error creating bean with name 'accessDecisionManager' defined in class path resource [alfresco/public-services-securit
y-context.xml]: Can't resolve reference to bean 'aclEntryVoter' while setting property 'decisionVoters[2]'; nested excep
tion is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'aclEntryVoter' defined i
n class path resource [alfresco/public-services-security-context.xml]: Can't resolve reference to bean 'permissionServic
e' while setting property 'permissionService'; nested exception is org.springframework.beans.factory.BeanCreationExcepti
on: Error creating bean with name 'permissionService' defined in class path resource [alfresco/public-services-security-
context.xml]: Can't resolve reference to bean 'permissionServiceImpl' while setting property 'target'; nested exception
is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'permissionServiceImpl' define
d in class path resource [alfresco/public-services-security-context.xml]: Can't resolve reference to bean 'authenticatio
nComponentImpl' while setting property 'authenticationComponent'; nested exception is org.springframework.beans.factory.
BeanCreationException: Error creating bean with name 'authenticationComponentImpl' defined in file [C:\Program Files\Alf
resco ECMS Community Network\tomcat\shared\classes\alfresco\extension\ntlm-authentication-context.xml]: Error setting pr
operty values; nested exception is org.springframework.beans.PropertyAccessExceptionsException: PropertyAccessExceptions
Exception (1 errors); nested propertyAccessExceptions are: [org.springframework.beans.MethodInvocationException: Propert
y 'servers' threw exception; nested exception is org.alfresco.error.AlfrescoRuntimeException: Passthru server list alrea
dy configured]
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'patch.schemaUpdateScript-V1.4-1'
 defined in file [C:\Program Files\Alfresco ECMS Community Network\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\patc…
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'patchComponent' defined in file
[C:\Program Files\Alfresco ECMS Community Network\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\patch\patch-services-…
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'descriptorComponent' defined in
class path resource [alfresco/bootstrap-context.xml]: Can't resolve reference to bean 'systemBootstrap' while setting pr…
…and a handful more…
PropertyAccessExceptionsException (1 errors)
org.springframework.beans.MethodInvocationException: Property 'servers' threw exception; nested exception is org.alfresc
o.error.AlfrescoRuntimeException: Passthru server list already configured
org.alfresco.error.AlfrescoRuntimeException: Passthru server list already configured
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.setServers(NTLMAuthenticationC
omponentImpl.java:286)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)…
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Please let me know if these errors help, I can post more if you point me to the area that is of most importance.

Thanks.