cancel
Showing results for 
Search instead for 
Did you mean: 

[Wontfix] Kerberos authentication: Login page reappears

nobby
Champ on-the-rise
Champ on-the-rise
Hi all,

I have configured Alfresco (Community Edition) and Share for Kerberos authentication. It works fine in the Alfresco webapp.
In the Share webapp, whenever I enter my username/password, the "please login" page appears briefly and then I'm redirected to the login page.

This appears in the logs whenever I try to login:


2011-10-10 15:23:05,452  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-18080-10] New Kerberos auth request from 127.0.0.1 (127.0.0.1:35021)
2011-10-10 15:23:05,616  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-18080-9] New Kerberos auth request from 127.0.0.1 (127.0.0.1:36996)
2011-10-10 15:23:05,618  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-18080-3] New Kerberos auth request from 127.0.0.1 (127.0.0.1:53056)
2011-10-10 15:23:05,618  INFO  [web.site.EditionInterceptor] [TP-Processor2] Unable to retrieve License information from Alfresco: 401

How can I find out what's wrong?

Thanks in advance for any hints!

Best regards,
Andreas
2 REPLIES 2

nobby
Champ on-the-rise
Champ on-the-rise
This might be related:

Share Kerberos SSO fail to login with failover form based login

https://issues.alfresco.com/jira/browse/ALF-5159

nobby
Champ on-the-rise
Champ on-the-rise
I couldn't solve it, but I switched to Shibboleth SSO (which I configured to use Kerberos in turn). Here's a good how-to:

https://wiki.surfnetlabs.nl/display/domestication/Alfresco

A little catch is the configuration of the proxy user in the perl script. For me it had to be share-system instead of alfresco-system:

use constant PROXY_USER => 'alfresco-system';

Best regards,
Andreas