SharePoint

[arturmkhitaryan]

When im online editing via alfresco SharePoint MS office product pops and asking credentials too many time for the same file, remember my credentials not helping, can SharePoint take credentials from running user session?
If someone cant help will appreciate it.
Here is mine alfresco global properties:

################################# Common Alfresco Properties ################################dir.root=D:/Alfresco/alf_dataalfresco.context=alfrescoalfresco.host=alfresco.domain.comalfresco.port=443alfresco.protocol=httpsshare.context=shareshare.host=alfresco.domain.comshare.port=443share.protocol=https### database connection properties ###db.driver=org.postgresql.Driverdb.username=alfrescodb.password=####db.name=alfrescodb.url=jdbc:postgresql://localhost:5432/${db.name}# Note: your database must also be able to accept at least this many connections.  Please see your database documentation for instructions on how to configure this.db.pool.max=275db.pool.validate.query=SELECT 1# The server mode. Set value here# UNKNOWN | TEST | BACKUP | PRODUCTIONsystem.serverMode=UNKNOWN### FTP Server Configuration ###ftp.port=21### RMI registry port for JMX ###alfresco.rmi.services.port=50500### External executable locations ###ooo.exe=D:/Alfresco/libreoffice/App/libreoffice/program/soffice.exeooo.enabled=trueooo.port=8100img.root=D:\\Alfresco\\imagemagickimg.coders=${img.root}\\modules\\codersimg.config=${img.root}img.gslib=${img.root}\\libimg.exe=${img.root}\\convert.exeswf.exe=D:/Alfresco/swftools/pdf2swf.exeswf.languagedir=D:/Alfresco/swftools/japanesejodconverter.enabled=falsejodconverter.officeHome=D:/Alfresco/libreoffice/App/libreofficejodconverter.portNumbers=8100### Initial admin password ###alfresco_user_store.adminpassword=e72526364c747e4154c590c57b0695d6### E-mail site invitation setting ###notification.email.siteinvite=false### License location ###dir.license.external=D:/Alfresco### Solr indexing ###index.subsystem.name=solr4dir.keystore=${dir.root}/keystoresolr.port.ssl=443### BPM Engine ###system.workflow.engine.jbpm.enabled=false### Allow extended ResultSet processingsecurity.anyDenyDenies=false### SharePoint ###vti.server.port=7070vti.server.protocol=httpsvti.server.ssl.keystore=D:\SSL\keystorevti.server.ssl.password=####vti.server.url.path.prefix=/alfrescovti.server.external.host=alfresco.domain.comvti.server.external.port=7070vti.server.external.protocol=httpsvti.server.external.contextPath=/alfresco### Authenticationalfresco.authentication.allowGuestLogin=falsealfresco.authentication.authenticateCIFS=false##Creating the authentication chainauthentication.chain=alfrescoNtlm1:alfrescoNtlm,passthru1:passthru,ldap1:ldap-adldap.authentication.active=trueldap.authentication.allowGuestLogin=falseldap.authentication.escapeCommasInBind=falseldap.authentication.escapeCommasInUid=falseldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactoryldap.authentication.java.naming.provider.url=ldap://dc.domain.com:389ldap.authentication.java.naming.security.authentication=simpleldap.authentication.userNameFormat=%s@domain.comldap.synchronization.active=true#A Domain user that can login and read (edit not required) from AD, Service Account maybeldap.synchronization.java.naming.security.principal=Alfresco@domain.com#Password of a Domain user that can login and read (edit not required) from ADldap.synchronization.java.naming.security.credentials=#####Sizing and query info for getting users and groupsldap.synchronization.queryBatchSize=1000ldap.synchronization.groupQuery=(&(objectclass\=group))ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0})))ldap.synchronization.personQuery=(&(objectclass\=user))ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(!(modifyTimestamp<\={0})))#Where to get groups from, if the enitre domain, then the dc levels are all that you needldap.synchronization.groupSearchBase=OU=Alfresco,DC=domain,DC=com#Where to get users from, if the enitre domain, then the dc levels are all that you needldap.synchronization.userSearchBase=OU=Alfresco,DC=sdomain,DC=comldap.synchronization.modifyTimestampAttributeName=modifyTimestampldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'#The data to mapldap.synchronization.userIdAttributeName=sAMAccountNameldap.synchronization.userFirstNameAttributeName=givenNameldap.synchronization.userLastNameAttributeName=snldap.synchronization.userEmailAttributeName=mailldap.synchronization.userOrganizationalIdAttributeName=company#The types to mapldap.synchronization.groupType=groupldap.synchronization.personType=userldap.synchronization.groupMemberAttributeName=memberldap.synchronization.enableProgressEstimation=truentlm.authentication.authenticateCIFS=falsentlm.authentication.mapUnknownUserToGuest=falsentlm.authentication.sso.enabled=falsepassthru.authentication.allowGuestLogin=falsepassthru.authentication.authenticateCIFS=truepassthru.authentication.authenticateFTP=falsepassthru.authentication.connectTimeout=5000passthru.authentication.sso.enabled=truepassthru.authentication.useLocalServer=false########################################## SYNCHRONISATION SETTINGS ########################################synchronization.autoCreatePeopleOnLogin=false#synchronization.import.group.clearAllChildren=true# full sync or only changes?synchronization.synchronizeChangesOnly=false# to sync on each alfresco startupsynchronization.syncOnStartup=truesynchronization.syncWhenMissingPeopleLogIn=false### DONT USE UNIX CRON EXPRESSION- USE QUARTZ CRON EXPRESSIONS!!!### look here http://www.quartz-scheduler.org/docs/tutorials/crontrigger.html### synchronisation starts every 60 minutes!synchronization.import.cron=0 0/60 * * * ?‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

And if i want to save new file directly from MS Office product via SharePoint I'm successfully passing authentication and having upload error.
But i successfully saving changes with edit online from alfresco.

[arturmkhitaryan]

After I generate new ssl.keysoter for securing web with HTTPS and securing SharePoint with same HTTPS i noticed that search started to work not properly.
Here is my screenshots.
[img]http://funkyimg.com/i/Yy6Y.png[/img]
[img]http://funkyimg.com/i/Yy6X.png[/img]
[img]http://funkyimg.com/i/Yy6W.png[/img]

[borisstankov]

The exchange of the keys between the repository and the solr are not OK. That's why you have problems with the tag manager and therefor with the search feature.

[arturmkhitaryan]

Thanks for answering Boris,

Can you give me some tips to fix this problem?
I think i must give solr my new generated ssl.key

[borisstankov]

Hmm, I had the same problem, but I was not able to fix it. I had to start over, but I was in a test env.
Every time I try to start https with a proxy, I have this problem. I do not how and where it comes from, but its very annoing.

The only way I managed to start https access from outside to the Alfresco it setting up the Alfresco steps only for test env, but they are not recommended for prod env.
Here is the topic where I discuss my problem:
https://forums.alfresco.com/forum/installation-upgrades-configuration-integration/configuration/tag-...

[arturmkhitaryan]

This is solr log
<code>
ERROR [org.alfresco.solr.tracker.AbstractTracker] Tracking failed
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.ssl.Alerts.getSSLException(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
   at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
   at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
   at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
   at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
   at sun.security.ssl.Handshaker.processLoop(Unknown Source)
   at sun.security.ssl.Handshaker.process_record(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
   at sun.security.ssl.SSLSocketImpl.writeRecord(Unknown Source)
   at sun.security.ssl.AppOutputStream.write(Unknown Source)
   at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
   at java.io.BufferedOutputStream.write(Unknown Source)
   at java.io.FilterOutputStream.write(Unknown Source)
   at org.apache.commons.httpclient.methods.ByteArrayRequestEntity.writeRequest(ByteArrayRequestEntity.java:90)
   at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
   at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
   at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
   at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
   at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
   at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
   at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
   at org.alfresco.httpclient.AbstractHttpClient.executeMethod(AbstractHttpClient.java:135)
   at org.alfresco.httpclient.AbstractHttpClient.sendRemoteRequest(AbstractHttpClient.java:111)
   at org.alfresco.httpclient.HttpClientFactory$HttpsClient.sendRequest(HttpClientFactory.java:385)
   at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1088)
   at org.alfresco.solr.tracker.ModelTracker.trackModelsImpl(ModelTracker.java:249)
   at org.alfresco.solr.tracker.ModelTracker.trackModels(ModelTracker.java:207)
   at org.alfresco.solr.tracker.ModelTracker.doTrack(ModelTracker.java:167)
   at org.alfresco.solr.tracker.AbstractTracker.track(AbstractTracker.java:153)
   at org.alfresco.solr.tracker.TrackerJob.execute(TrackerJob.java:47)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
   at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
   at sun.security.validator.Validator.validate(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
   at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
   … 30 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
   at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
   at java.security.cert.CertPathBuilder.build(Unknown Source)
   … 36 more

[arturmkhitaryan]

Someone can help me with SharePoint Credentials?
Problem problem described in first post.