06-19-2010 12:29 PM
06-21-2010 04:44 AM
10-22-2010 05:02 AM
10-22-2010 06:26 AM
11-14-2010 07:38 PM
12-06-2010 10:49 AM
02-25-2011 02:52 AM
03-02-2011 06:59 PM
Edit file \Alfresco\tomcat\shared\classes\alfresco-global.properties and modify:
# Active Directory Sync
authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm
ntlm.authentication.sso.enabled=true
Then, create the file \Alfresco\tomcat\shared\classes\alfresco\extension\subsystems\Authentication\passthru\passthru1\changes.properties and put the following inside:
passthru.authentication.useLocalServer=false
passthru.authentication.domain=
# (domain specific property): NetBIOS name of your domain and
# domain controller’s IP address, add more separated by commas
passthru.authentication.servers=Domain\\10.10.85.3,10.10.85.1
ntlm.authentication.sso.enabled=true
alfresco.authentication.allowGuestLogin=false
ntlm.authentication.mapUnknownUserToGuest=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
passthru.authentication.guestAccess=false
# (domain specific property): list of usernames from AD
# that are to be Alfresco administrators
passthru.authentication.defaultAdministratorUserNames=admin.user
Next, edit \Alfresco\tomcat\webapps\share.war\WEB-INF\web.xml:
I WAS TOLD THE BELOW WASN'T NEEDED IN 3.4
<filter>
<filter-name>Authentication Filter</filter-name>
<filter-class>org.alfresco.web.site.servlet.NTLMAuthenticationFilter</filter-class>
<init-param>
<param-name>endpoint</param-name>
<param-value>alfresco</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/page/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/p/*</url-pattern>
</filter-mapping>
THIS IS THE ONLY ONE to add IN 3.4b
<filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/s/*</url-pattern>
</filter-mapping>
Copy and rename the file \Alfresco\tomcat\shared\classes\alfresco\web-extension\share-config-custom.xml.sample to \tomcat\shared\classes\alfresco\web-extension\share-config-custom.xml then edit it and make sure the following section is uncommented:
I ADDED IT because it wasn't there.
<!–
NTLM authentication config for Share
NOTE: you will also need to enable the NTLM authentication filter in Share web.xml
change localhost:8080 below to appropriate alfresco server location if required
–>
<config evaluator="string-compare" condition="Remote">
<remote>
<keystore>
<path>alfresco/web-extension/alfresco-system.p12</path>
<type>pkcs12</type>
<password>alfresco-system</password>
</keystore>
<connector>
<id>alfrescoCookie</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using cookie-based authentication</description>
<class>org.springframework.extensions.webscripts.connector.AlfrescoConnector</class>
</connector>
<endpoint>
<id>alfresco</id>
<name>Alfresco – user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfrescoCookie</connector-id>
<endpoint-url>http://localhost:8080/alfresco/wcs</endpoint-url>
<identity>user</identity>
<external-auth>true</external-auth>
</endpoint>
</remote>
</config>
If Share is not on the same server as Alfresco then edit the endpoint-url to match your configuration.
Single Sign On via Active Directory should be fully functional now for Alfresco Explorer and Alfresco Share.
03-06-2011 12:27 PM
03-07-2011 10:39 AM
Tags
Find what you came for
We want to make your experience in Hyland Connect as valuable as possible, so we put together some helpful links.