Problems with Authentication step by step

[js-alfi]

Hello,

I tried to follow the community edition wiki regarding step by step config of authentication.

I want to have a passtrhu to a Windows Domain like in Example 1: Advanced AD Chain

But I'm to stupid  :roll: to know where and how JMX (only included in the enterprise version) puts

" alfrescoNtlm1
ntlm.authentication.sso.enabled=false
alfresco.authentication.authenticateCIFS=false
passthru1
ntlm.authentication.sso.enabled=false
passthru.authentication.authenticateCIFS=true
ldap1
ldap.authentication.active=false
ldap.synchronization.active=true "

So I would be really happy if somebody can tell me in what files (windows version) I have to fill in what lines to get the same result as the described JMX version?

Many thanks for any help

[dward]

Note the JMX functionality isn't yet released and will be in the Alfresco v3.2 Enterprise Edition.

Example 2 demonstrates how you can use the extension classpath mechanism to control multiple authentication subsystem instances.

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Example_2:_Advanced_LDAP_Chain

This is explained further here, but note that you will need a 3.3 nightly build for it to work

http://wiki.alfresco.com/wiki/Alfresco_Subsystems#Properties

However, in this case it is actually not necessary, because we do not need to set the same property to different values on any of the subsystems.

We could put the following properties in alfresco-global.properties

authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1assthru,ldap1:ldap-ad
ntlm.authentication.sso.enabled=false
alfresco.authentication.authenticateCIFS=false
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank as we are specifying servers
passthru.authentication.servers=DOMAIN\\server,server

[js-alfi]

Many thanks for your hint.

I'm just installing the nightly build. There are some other benefits of the nightly build: pdf viewer works with larger files than in the ce 3.2!

Will the authentication chain also work for the share or only for the alfresco/faces?

Because alfresco/faces is authenticating well this way. Here I tried it with the local admin and with and ldap account.

But for share I allways get http Status 500 with admin and with the ldap account

HTTP Status 500 - 

——————————————————————————–

type Exception report

message 

description The server encountered an internal error () that prevented it from fulfilling this request.

exception 

javax.servlet.ServletException: org.alfresco.web.site.exception.RequestContextException: Exception running UserFactory in HttpRequestContextFactory
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:146)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   org.alfresco.web.site.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:209)


root cause 

org.alfresco.web.site.exception.RequestContextException: Exception running UserFactory in HttpRequestContextFactory
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:117)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   org.alfresco.web.site.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:209)


root cause 

org.alfresco.web.site.exception.UserFactoryException: Unable to retrieve user from repository
   org.alfresco.web.site.AlfrescoUserFactory.loadUser(AlfrescoUserFactory.java:252)
   org.alfresco.web.site.UserFactory.faultUser(UserFactory.java:169)
   org.alfresco.web.site.UserFactory.faultUser(UserFactory.java:110)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:93)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   org.alfresco.web.site.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:209)


root cause 

org.alfresco.web.site.exception.UserFactoryException: Unable to create user - failed to retrieve user metadata: 
   org.alfresco.web.site.AlfrescoUserFactory.loadUser(AlfrescoUserFactory.java:160)
   org.alfresco.web.site.UserFactory.faultUser(UserFactory.java:169)
   org.alfresco.web.site.UserFactory.faultUser(UserFactory.java:110)
   org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:93)
   org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
   org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
   javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   org.alfresco.web.site.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:209)


note The full stack trace of the root cause is available in the Apache Tomcat/6.0.18 logs.

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The log is telling me:

Caused by: org.alfresco.scripts.ScriptException: 07300017 Failed to execute script '/org/alfresco/webframework/metadata.get.js (in classpath store file:G:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts)': 07300016 Access Denied.  You do not have the appropriate permissions to perform this operation.
   at org.alfresco.repo.jscript.RhinoScriptProcessor.execute(RhinoScriptProcessor.java:178)
   at org.alfresco.repo.processor.ScriptServiceImpl.executeScript(ScriptServiceImpl.java:274)
   at org.alfresco.repo.web.scripts.RepositoryScriptProcessor.executeScript(RepositoryScriptProcessor.java:108)
   at org.alfresco.web.scripts.AbstractWebScript.executeScript(AbstractWebScript.java:819)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:90)
   … 32 more
Caused by: org.alfresco.repo.security.permissions.AccessDeniedException: 07300016 Access Denied.  You do not have the appropriate permissions to perform this operation.‍‍‍‍‍‍‍‍

Thank you very much for your answer