Hyland Connect

arturmkhitaryan · ‎06-24-2015

When im online editing via alfresco SharePoint MS office product pops and asking credentials too many time for the same file, remember my credentials not helping, can SharePoint take credentials from running user session?
If someone cant help will appreciate it.
Here is mine alfresco global properties:


###############################
## Common Alfresco Properties #
###############################
dir.root=D:/Alfresco/alf_data
alfresco.context=alfresco
alfresco.host=alfresco.domain.com
alfresco.port=443
alfresco.protocol=https
share.context=share
share.host=alfresco.domain.com
share.port=443
share.protocol=https
### database connection properties ###
db.driver=org.postgresql.Driver
db.username=alfresco
db.password=####
db.name=alfresco
db.url=jdbc:postgresql://localhost:5432/${db.name}
# Note: your database must also be able to accept at least this many connections.  Please see your database documentation for instructions on how to configure this.
db.pool.max=275
db.pool.validate.query=SELECT 1
# The server mode. Set value here
# UNKNOWN | TEST | BACKUP | PRODUCTION
system.serverMode=UNKNOWN
### FTP Server Configuration ###
ftp.port=21
### RMI registry port for JMX ###
alfresco.rmi.services.port=50500
### External executable locations ###
ooo.exe=D:/Alfresco/libreoffice/App/libreoffice/program/soffice.exe
ooo.enabled=true
ooo.port=8100
img.root=D:\\Alfresco\\imagemagick
img.coders=${img.root}\\modules\\coders
img.config=${img.root}
img.gslib=${img.root}\\lib
img.exe=${img.root}\\convert.exe
swf.exe=D:/Alfresco/swftools/pdf2swf.exe
swf.languagedir=D:/Alfresco/swftools/japanese
jodconverter.enabled=false
jodconverter.officeHome=D:/Alfresco/libreoffice/App/libreoffice
jodconverter.portNumbers=8100
### Initial admin password ###
alfresco_user_store.adminpassword=e72526364c747e4154c590c57b0695d6
### E-mail site invitation setting ###
notification.email.siteinvite=false
### License location ###
dir.license.external=D:/Alfresco
### Solr indexing ###
index.subsystem.name=solr4
dir.keystore=${dir.root}/keystore
solr.port.ssl=443
### BPM Engine ###
system.workflow.engine.jbpm.enabled=false
### Allow extended ResultSet processing
security.anyDenyDenies=false
### SharePoint ###
vti.server.port=7070
vti.server.protocol=https
vti.server.ssl.keystore=D:\SSL\keystore
vti.server.ssl.password=####
vti.server.url.path.prefix=/alfresco
vti.server.external.host=alfresco.domain.com
vti.server.external.port=7070
vti.server.external.protocol=https
vti.server.external.contextPath=/alfresco
### Authentication
alfresco.authentication.allowGuestLogin=false
alfresco.authentication.authenticateCIFS=false
##Creating the authentication chain
authentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap-ad
ldap.authentication.active=true
ldap.authentication.allowGuestLogin=false
ldap.authentication.escapeCommasInBind=false
ldap.authentication.escapeCommasInUid=false
ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.authentication.java.naming.provider.url=ldap://dc.domain.com:389
ldap.authentication.java.naming.security.authentication=simple
ldap.authentication.userNameFormat=%s@domain.com
ldap.synchronization.active=true
#A Domain user that can login and read (edit not required) from AD, Service Account maybe
ldap.synchronization.java.naming.security.principal=Alfresco@domain.com
#Password of a Domain user that can login and read (edit not required) from AD
ldap.synchronization.java.naming.security.credentials=####
#Sizing and query info for getting users and groups
ldap.synchronization.queryBatchSize=1000
ldap.synchronization.groupQuery=(&(objectclass\=group))
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))
ldap.synchronization.personQuery=(&(objectclass\=user))
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<\={0})))
#Where to get groups from, if the enitre domain, then the dc levels are all that you need
ldap.synchronization.groupSearchBase=OU=Alfresco,DC=domain,DC=com
#Where to get users from, if the enitre domain, then the dc levels are all that you need
ldap.synchronization.userSearchBase=OU=Alfresco,DC=sdomain,DC=com
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp
ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'
#The data to map
ldap.synchronization.userIdAttributeName=sAMAccountName
ldap.synchronization.userFirstNameAttributeName=givenName
ldap.synchronization.userLastNameAttributeName=sn
ldap.synchronization.userEmailAttributeName=mail
ldap.synchronization.userOrganizationalIdAttributeName=company
#The types to map
ldap.synchronization.groupType=group
ldap.synchronization.personType=user
ldap.synchronization.groupMemberAttributeName=member
ldap.synchronization.enableProgressEstimation=true
ntlm.authentication.authenticateCIFS=false
ntlm.authentication.mapUnknownUserToGuest=false
ntlm.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
passthru.authentication.connectTimeout=5000
passthru.authentication.sso.enabled=true
passthru.authentication.useLocalServer=false
####################################
###### SYNCHRONISATION SETTINGS ####
####################################
synchronization.autoCreatePeopleOnLogin=false
#synchronization.import.group.clearAllChildren=true
# full sync or only changes?
synchronization.synchronizeChangesOnly=false
# to sync on each alfresco startup
synchronization.syncOnStartup=true
synchronization.syncWhenMissingPeopleLogIn=false
### DONT USE UNIX CRON EXPRESSION- USE QUARTZ CRON EXPRESSIONS!!!
### look here http://www.quartz-scheduler.org/docs/tutorials/crontrigger.html
### synchronisation starts every 60 minutes!
synchronization.import.cron=0 0/60 * * * ?
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

And if i want to save new file directly from MS Office product via SharePoint I'm successfully passing authentication and having upload error.
But i successfully saving changes with edit online from alfresco.

arturmkhitaryan · ‎06-24-2015

After I generate new ssl.keysoter for securing web with HTTPS and securing SharePoint with same HTTPS i noticed that search started to work not properly.
Here is my screenshots.
[img]http://funkyimg.com/i/Yy6Y.png[/img]
[img]http://funkyimg.com/i/Yy6X.png[/img]
[img]http://funkyimg.com/i/Yy6W.png[/img]

borisstankov · ‎06-26-2015

The exchange of the keys between the repository and the solr are not OK. That's why you have problems with the tag manager and therefor with the search feature.

arturmkhitaryan · ‎06-26-2015

Thanks for answering Boris,

Can you give me some tips to fix this problem?
I think i must give solr my new generated ssl.key

borisstankov · ‎06-26-2015

Hmm, I had the same problem, but I was not able to fix it. I had to start over, but I was in a test env.
Every time I try to start https with a proxy, I have this problem. I do not how and where it comes from, but its very annoing.

The only way I managed to start https access from outside to the Alfresco it setting up the Alfresco steps only for test env, but they are not recommended for prod env.
Here is the topic where I discuss my problem:
https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/tag-...

arturmkhitaryan · ‎06-26-2015

This is solr log
<code>
ERROR [org.alfresco.solr.tracker.AbstractTracker] Tracking failed
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.ssl.Alerts.getSSLException(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
   at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
   at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
   at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
   at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
   at sun.security.ssl.Handshaker.processLoop(Unknown Source)
   at sun.security.ssl.Handshaker.process_record(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
   at sun.security.ssl.AppOutputStream.write(Unknown Source)
   at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
   at java.io.BufferedOutputStream.write(Unknown Source)
   at java.io.FilterOutputStream.write(Unknown Source)
   at org.apache.commons.httpclient.methods.ByteArrayRequestEntity.writeRequest(ByteArrayRequestEntity.java:90)
   at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
   at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
   at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
   at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
   at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
   at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
   at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
   at org.alfresco.httpclient.AbstractHttpClient.executeMethod(AbstractHttpClient.java:135)
   at org.alfresco.httpclient.AbstractHttpClient.sendRemoteRequest(AbstractHttpClient.java:111)
   at org.alfresco.httpclient.HttpClientFactory$HttpsClient.sendRequest(HttpClientFactory.java:385)
   at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1088)
   at org.alfresco.solr.tracker.ModelTracker.trackModelsImpl(ModelTracker.java:249)
   at org.alfresco.solr.tracker.ModelTracker.trackModels(ModelTracker.java:207)
   at org.alfresco.solr.tracker.ModelTracker.doTrack(ModelTracker.java:167)
   at org.alfresco.solr.tracker.AbstractTracker.track(AbstractTracker.java:153)
   at org.alfresco.solr.tracker.TrackerJob.execute(TrackerJob.java:47)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
   at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
   at sun.security.validator.Validator.validate(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
   … 30 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
   at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
   at java.security.cert.CertPathBuilder.build(Unknown Source)
   … 36 more

arturmkhitaryan · ‎06-29-2015

Someone can help me with SharePoint Credentials?
Problem problem described in first post.