cancel
Showing results for 
Search instead for 
Did you mean: 

Somehow got NTLM SSO working...

mayfied
Champ in-the-making
Champ in-the-making
I must admit, not being the sharpest tool in the shed, that I was very confused with just what was required to get NTLM SSO working under Tomcat/community ver. 2.1.

All of the posts, and the Wiki instructions called for editing two files:

ntlm-authentication-context.xml
custom-authority-service-context.xml

I edited ntlm-authentication-context.xml and just added my DC netbios name.

I never found the custom-authority-service-context.xml file…

Anyway, after that one change, I can logon to Alfresco with any valid Domain account….

Anyone have any thoughts on this? Did I screw something up? Thanks!
6 REPLIES 6

mindthegab
Champ in-the-making
Champ in-the-making
Hi mayfied,
in my experience only the ntlm-authentication-context.xml file must be modified to have NTLM/SSO working.
You need to modify the authority-services-context.xml only in case you need deeper customization of the way alfresco manages user/groups (e.g. having more than one admin user). See [1] for more details. Anyways as a general rule: if the file you're referring to (custom-authority-services-context.xml) is not existing you can just copy it  for the original one (under WEB-INF/classes/alfresco), rename it and put it under shared/classes/alfresco/extension and it will be loaded and ovveride default configurations.
BTW, for a complete configuration of NTLM/SSO/CIFS/LDAP you may take a look at my post here [2] where i got it working…

Hope this helps.
Gab



[1]http://wiki.alfresco.com/wiki/Security_and_Authentication#The_Authority_Service
[2]http://forums.alfresco.com/viewtopic.php?t=7750&postdays=0&postorder=asc&start=15

mindthegab
Champ in-the-making
Champ in-the-making
Ah..and:
feedback is more than appreciated, i would like to have a community validation on what i wrote, so that we may add it to the alfresco wiki, in order to be easily accessible.

Thx,
Gab

alarocca
Champ in-the-making
Champ in-the-making
In order to have NTLM Authentication, web.xml within WEB-INF must be changed too. Open that file and you will find usefull comments.

Best regards

mindthegab
Champ in-the-making
Champ in-the-making
yep…
thx for spotting it out…
i forgot to mention that i had changed also that file….
the bad problem of non-live howto's…


🙂

jet
Champ in-the-making
Champ in-the-making
My installation of Alfresco doesn't have the ntlm-authentication-context.xml file.

I've configured everything else according to the guide at: http://wiki.alfresco.com/wiki/Configuring_NTLM.

When I access Alfresco now it tries to authenticate before I get the following System Error:

net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext

Where can I get this ntlm-authentication-context.xml file from??

Thanks

roman
Champ in-the-making
Champ in-the-making
Hello,

i've got the same error…
what to do?
(but i've just edited the web.xml not the ntlm-authentication-context.xml)

please help,
best regards