sts=Disallow via passthru

[bhowo]

Hi,

I have a problem using CIFS with Alfresco-Labs-3a.1032-Full-Setup.

I have two Windows Server 2003: one is a Primary Directory Controller(PDC) and the other is my Alfresco-Testserver (ALF). NTLM-Configuration is done and working: No problem to upload or list the files of a domain user with the Webfrontend.
But if I'm using CIFS (\\alfa\) I need to type in a username and a password, but with no success.

The folowing lines are found in the Alfresco-Log:
13:34:20,797  DEBUG [smb.protocol.auth] Null CIFS logon allowed
13:34:20,812  DEBUG [smb.protocol.auth] Authenticated user t1 sts=Disallow via Passthru

Is there a way to use CIFS?

[alexist]

I ve the same problem on linux server with version 3.0 1032

[houlnx]

getting same error here. Using Labs 3b.

[infodon]

Same issue with 3.0B.

Cannot authenticate via CIFS, but NTLM Auth works for website, but I must enter the full path to the login form. Typing http://localhost:8080/alfresco doesn't work. I have to enter http://localhost:8080/alfresco/faces/jsp/login.jsp then I can login to the website via NTLM.

CIFS results in error Null CIFS logon allowed, No Passthru details for WSNB1.

This configuration used to work in the earlier revisions 2.8

[aususer]

Confirm same problem on 3.0C. (tried also on 3.0b with same results)..
Iv'e never had CIFS work properly under passthru.. (works fine using non-passthru)

I read that there was a (possible) "known bug(?)" in one of the code rev. for 3.0b..
ref: http://nene.snix.com/wiki/index.php/Alfresco

I wonder if this change has not been pushed down? Can't confirm where/if this is on the 3.0c..

[aususer]

Just to clarify the problem - as it seems a few people are suffering this (has anyone actually got CIFS passthrough working??!!)
I am running on Centos 5.2 with jdk1.6.0_10

Symptom:
NTLM passthru configured and working for webfront end (client: XP/IE7- works fine.)
NTLM CIFS - XP SP3/windows users getting prompted for their username/password but not getting accepted.

Observation (well - what I am seeing - at least under Linux config - brandnew clean install of 3.0b and 3.0c)
1. Increase the smb logging to debug in /opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
2. tail -f /opt/Alfresco/tomcat/logs/catalina.out
.. note: <username> changed for security reasons.
10:16:04,189  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru
10:16:04,227  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru
10:16:04,390  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru
10:16:04,634  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru
10:16:04,663  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru
10:17:51,140  DEBUG [smb.protocol.auth] Authenticated user <username> sts=Disallow via Passthru..

Configs (from clean) are:
1. modify /opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authority-services-context.xml
and add an administrator user to the list.. (search for "adminUser" and add a domain user)
2. modify /opt/Alfrescotomcat/webapps/alfresco/WEB-INF/web.xml
configure/remove all unnecessary comments regarding  and remove unnecessary filter entries as dictated by wiki(s)
3. /opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml
uncomment wins and change; change "authentication" from enterprise to "alfresco"; and "domain mappings"
4. /opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.properties
chnage links to enforce CIFS setup (note: broadcast changed from 255.255.255.255 to 192.168.100.255 to reflect network)5
5. rename /opt/Alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml(.sample)
set "localServers" portion to false
add   <property name="servers">
        <value><mydomain>\<myDCname></value>
        </property>
6.  /opt/Alfresco/tomcat/shared/classes/alfresco/extension/file-servers-custom.xml
add (after line : <alfresco-config area="file-servers"> at the top of page)
  <config evaluator="string-compare" condition="CIFS Server">
    <serverEnable enabled="true" />
    <host name="192.168.100.35" domain="<mydomainname>" />
    <comment>Alfresco CIFS Server</comment>
    <!– Set to the broadcast mask for the subnet –>
    <broadcast>192.168.100.255</broadcast>
    <sessionDebug flags="Negotiate,Socket" />
  </config>
add to the very bottom of the page (ie. just betfore </alfresco-config>)
  <config evaluator="string-compare" condition="Filesystem Security" replace="true">
    <authenticator type="alfresco" />
  </config>
7. modify /opt/Alfresco/alfresco.sh
fix paths to both Alfresco home and Java home..

This is all as per the wikis I can find…

[rxm307]

so this is a working config?

[aususer]

Nope… as stated, its my config of a "non-working" (ie NO CIFS functionality) setup for clarification of the problem.
same config on both 3c and 3b - with same fault.

I am yet to find/hear from anyone who actually has 3a, 3b or 3c working CIFS (happy to be proven wrong if someone can send me their config so I can get mine working before I dump this - I am about to try it under XP and see if that changes the problem)

There are plenty who can get the SSO on the webpage working (mine above does) - its just the CIFS that doesn't work.
Maybe I am just missing a step?
Anyone got a working config?

I am guessing that this probably all works fine if I paid for the "enterprise" version, but I was hoping to show the bosses it running before I asked for a cash cough-up.

[aususer]

I can confirm, this is a problem specific to Labs 3b/c.
As I (incorrectly) listed in this post: http://forums.alfresco.com/en/viewtopic.php?f=9&t=15552

I installed a trial of enterprise 3.0 - and set it up exactly the same as labs 3b/c and it worked first time perfectly!

Developers?

[m4rco-]

i've the same problem, but with kerberos authentication….
http://forums.alfresco.com/en/viewtopic.php?f=9&t=15679