Hyland Connect

deisenlord · ‎04-05-2013

I have configured Kerberos SSO and its working perfectly for Alfresco and CIFS but not for share. In looking at the java/gss debug logs the Kerberos authentication under Share is actually successful although Share still prompts for a password using IE9's password dialog. In Fiddle/WireShark the only difference in the headers/negotiations between the two is the Cookie. In the alfresco case it just the java session ID, and in Share there is no java session but a CSRFToken and loginid and username.

The forum bombs when trying to attach files so forgive me for including my logs etc include.

I've attached the WiresSharks from the successful alfresco login and non-successful share attempt. Also the the relevant part of catalina.out showing the successful kerberos negotiations but resulting failure. Also attached are my redacted share-config-custom.xml, realavant section of alresco-global.properties and java-login.conf.

Am I seeing a new bug?

Successful alfresco negotiation


GET /alfresco/ HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive

HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=AFC9A6F3DC85E667FCFF219731201A2B; Path=/alfresco/; HttpOnly
Location: http://testshare/alfresco/faces/jsp/dashboards/container.jsp
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 0
Date: Fri, 05 Apr 2013 14:42:17 GMT

GET /alfresco/faces/jsp/dashboards/container.jsp HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive
Cookie: JSESSIONID=AFC9A6F3DC85E667FCFF219731201A2B

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: Negotiate
Content-Type: text/html;charset=UTF-8
Content-Length: 182
Date: Fri, 05 Apr 2013 14:42:17 GMT

<html><head>
<meta http-equiv="Refresh" content="0; url=/alfresco/faces/jsp/login.jsp">
</head><body><p>Please <a href="/alfresco/faces/jsp/login.jsp">log in</a>.</p>
</body></html>
GET /alfresco/faces/jsp/dashboards/container.jsp HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive
Authorization: Negotiate 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
Cookie: JSESSIONID=AFC9A6F3DC85E667FCFF219731201A2B

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: text/html;charset=UTF-8
Content-Language: en
Transfer-Encoding: chunked
Date: Fri, 05 Apr 2013 14:42:19 GMT

2000
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Unsuccessful Share negotiation


GET /share/ HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive
Cookie: alfLogin=1365106466; alfUsername3=dje; Alfresco-CSRFToken=WNmA00lOueJr9pbZkQyYM4HvR0R2h3uRVQUfiTNuuvs%3d

HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: http://testshare/share/page/
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 0
Date: Fri, 05 Apr 2013 14:39:59 GMT

GET /share/page/ HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive
Cookie: alfLogin=1365106466; alfUsername3=dje; Alfresco-CSRFToken=WNmA00lOueJr9pbZkQyYM4HvR0R2h3uRVQUfiTNuuvs%3d

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=EEDFE320C83F1FD7D27EA87A1B75B68C; Path=/share/; HttpOnly
WWW-Authenticate: Negotiate
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 164
Date: Fri, 05 Apr 2013 14:39:59 GMT

<html><head>
<meta http-equiv="Refresh" content="0; url=/share/page?pt=login">
</head><body><p>Please <a href="/share/page?pt=login">log in</a>.</p>
</body></html>
GET /share/page/ HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8; .NET4.0C; .NET4.0E; chromeframe/26.0.1410.43)
Accept-Encoding: gzip, deflate
Host: testshare
Connection: Keep-Alive
Authorization: Negotiate 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
Cookie: JSESSIONID=EEDFE320C83F1FD7D27EA87A1B75B68C; alfLogin=1365106466; alfUsername3=dje; Alfresco-CSRFToken=WNmA00lOueJr9pbZkQyYM4HvR0R2h3uRVQUfiTNuuvs%3d

HTTP/1.1 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: Negotiate
Transfer-Encoding: chunked
Date: Fri, 05 Apr 2013 14:39:59 GMT

2000
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Successsful Kerberos Share logon but ultimate failure (java logs)


INFO: Server startup in 88280 ms
2013-04-05 10:12:01,360  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-3] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,392  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-4] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,411  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-5] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,420  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-6] New Kerberos auth request from 127.0.0.1 (127.0.0.1:55819)
 2013-04-05 10:12:01,421  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-6] Issuing login challenge to browser.
 Search Subject for Kerberos V5 ACCEPT cred (HTTP/testshare.ebf.local@EBF.LOCAL, sun.security.jgss.krb5.Krb5AcceptCredential)
Found KeyTab
Found KerberosKey for HTTP/testshare.ebf.local@EBF.LOCAL
Entered Krb5Context.acceptSecContext with state=STATE_NEW
Added key: 23version: 0
Ordering keys wrt default_tkt_enctypes list
default etypes for default_tkt_enctypes: 23.
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
Using builtin default etypes for permitted_enctypes
default etypes for permitted_enctypes: 17 16 23 1 3.
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
replay cache for dje@EBF.LOCAL is null.
object 0: 1365174721012/12061
>>> KrbApReq: authenticate succeed.
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>>Delegated Creds have pname=dje@EBF.LOCAL sname=krbtgt/EBF.LOCAL@EBF.LOCAL authtime=null starttime=20130405151037Z endtime=20130405232620ZrenewTill=20130412132620Z
Krb5Context setting peerSeqNumber to: 1960888904
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
Krb5Context setting mySeqNumber to: 655006195
Entered Krb5Context.initSecContext with state=STATE_NEW
Found ticket for HTTP/testshare.ebf.local@EBF.LOCAL to go to krbtgt/EBF.LOCAL@EBF.LOCAL expiring on Fri Apr 05 20:09:09 CDT 2013
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
default etypes for default_tgs_enctypes: 23.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbKdcReq send: kdc=ebfpdc.ebf.local UDP:88, timeout=30000, number of retries =3, #bytes=1990
>>> KDCCommunication: kdc=ebfpdc.ebf.local UDP:88, timeout=30000,Attempt =1, #bytes=1990
>>> KrbKdcReq send: #bytes read=98
>>> KrbKdcReq send: kdc=ebfpdc.ebf.local TCP:88, timeout=30000, number of retries =3, #bytes=1990
>>> KDCCommunication: kdc=ebfpdc.ebf.local TCP:88, timeout=30000,Attempt =1, #bytes=1990
>>>DEBUG: TCPClient reading 1956 bytes
>>> KrbKdcReq send: #bytes read=1956
>>> KdcAccessibility: remove ebfpdc.ebf.local
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
default etypes for default_tgs_enctypes: 23.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbKdcReq send: kdc=ebfpdc.ebf.local UDP:88, timeout=30000, number of retries =3, #bytes=1982
>>> KDCCommunication: kdc=ebfpdc.ebf.local UDP:88, timeout=30000,Attempt =1, #bytes=1982
>>> KrbKdcReq send: #bytes read=90
>>> KrbKdcReq send: kdc=ebfpdc.ebf.local TCP:88, timeout=30000, number of retries =3, #bytes=1982
>>> KDCCommunication: kdc=ebfpdc.ebf.local TCP:88, timeout=30000,Attempt =1, #bytes=1982
>>>DEBUG: TCPClient reading 1941 bytes
>>> KrbKdcReq send: #bytes read=1941
>>> KdcAccessibility: remove ebfpdc.ebf.local
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
>>> KrbApReq: APOptions are 00100000 00000000 00000000 00000000
>>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
Krb5Context setting mySeqNumber to: 591377405
Created InitSecContextToken:
0000: 01 00 6E 82 0E FB 30 82   0E F7 A0 03 02 01 05 A1  ..n…0………
0010: 03 02 01 0E A2 07 03 05   00 20 00 00 00 A3 82 06  ……… ……
0020: 86 61 82 06 82 30 82 06   7E A0 03 02 01 05 A1 0B  .a…0……….
0030: 1B 09 45 42 46 2E 4C 4F   43 41 4C A2 26 30 24 A0  ..EBF.LOCAL.&0$.
0040: 03 02 01 00 A1 1D 30 1B   1B 04 48 54 54 50 1B 13  ……0…HTTP..
0050: 74 65 73 74 73 68 61 72   65 2E 65 62 66 2E 6C 6F  testshare.ebf.lo
0060: 63 61 6C A3 82 06 40 30   82 06 3C A0 03 02 01 17  cal…@0..<…..
0070: A1 03 02 01 03 A2 82 06   2E 04 82 06 2A C9 7A BF  …………*.z.
0080: 93 E8 B3 7A 8F 5B D4 B1   5D B6 BB FA 08 59 26 99  …z.[..]….Y&.
0090: 57 32 E7 0B 47 93 8A D2   1A 32 56 BC 0F A1 7D 1D  W2..G….2V…..
00A0: F3 BF C3 52 23 20 24 62   18 D4 BC 06 08 CF 9C 94  …R# $b……..
00B0: 5F 5F BD 55 D1 CD BC 76   BC 1C F9 B1 09 42 1D C8  __.U…v…..B..
00C0: 16 14 9C BD C5 94 4D 17   13 45 52 95 1C 79 5B 83  ……M..ER..y[.
00D0: 99 D7 02 EE D1 E0 CF D5   B2 44 C0 A9 A8 DB 00 65  ………D…..e
00E0: A9 44 0F FD B6 20 DB 90   A6 FA EF 03 B0 C1 38 0E  .D… ……..8.
00F0: F8 31 49 11 8C 11 38 26   33 C7 1C 97 CE 61 00 08  .1I…8&3….a..
0100: 0A 2C E6 75 45 B1 5F 8C   90 B8 FD BF 5A 96 2A 33  .,.uE._…..Z.*3
0110: 09 98 29 B7 CE EB BF 93   41 CE 45 F8 9D 83 8D FC  ..)…..A.E…..
0120: A0 EC 77 E6 1C D7 78 EB   DD D7 19 2F 5A 18 9B BE  ..w…x…./Z…
0130: A7 0E CE E0 14 DD 47 28   16 00 8F 34 F9 57 D9 E4  ……G(…4.W..
0140: 45 E2 A8 95 AC 83 32 90   34 2A D1 EE D9 90 0F A8  E…..2.4*……
0150: 7B 81 4C 7B 60 29 AA 5A   2B 4E 58 EB 84 90 13 6B  ..L.`).Z+NX….k
0160: FF F6 C3 4B 85 0B A5 63   25 13 67 B6 15 7D B0 6C  …K…c%.g….l
0170: A6 06 E3 D0 9E F0 55 10   FD 2C EA B2 D2 C5 33 6D  ……U..,….3m
0180: 43 1A 44 8B 3E 74 B3 D8   34 08 C7 B1 7C FA 47 D2  C.D.>t..4…..G.
0190: FB E8 B7 0C D6 00 47 A5   7A C4 81 31 22 C7 53 C6  ……G.z..1".S.
01A0: 13 82 F6 06 64 5E 79 67   61 7F 5D B1 33 60 EB 1D  ….d^yga.].3`..
01B0: E2 A3 08 61 81 24 5B 6F   1C 96 01 B6 99 64 05 59  …a.$[o…..d.Y
01C0: 76 A6 28 63 3D 96 55 DF   08 8A 86 F2 43 A3 DE 0D  v.(c=.U…..C…
01D0: 93 98 82 EC CC 72 21 A0   99 91 49 42 9A 9A 3B 0B  …..r!…IB..;.
01E0: 08 14 DC 1A 44 14 14 FF   1F 6B 39 FD FF B3 8D 2D  ….D….k9….-
01F0: 41 5C B8 94 2E 4D 68 DF   8E 8C 6A 88 FB C0 6A C0  A\…Mh…j…j.
0200: 20 10 8D 33 A3 78 3C EA   78 4B F4 16 FA 9E 7A C6   ..3.x<.xK….z.
0210: 7C F6 35 2A B1 CD 6D 0E   53 F9 ED F9 EF F1 3E 01  ..5*..m.S…..>.
0220: 69 D1 69 44 05 C5 07 6A   9C 15 D4 3D 1E 49 FA 53  i.iD…j…=.I.S
0230: 98 23 FE 14 49 C7 33 ED   2F DB 1D 10 1F F0 A3 8B  .#..I.3./…….
0240: E0 49 71 64 C6 1F D9 37   A3 64 EB 83 DF 97 FA C6  .Iqd…7.d……
0250: 6C 29 02 25 26 A4 56 A2   E2 C3 78 E5 8B 5B E9 94  l).%&.V…x..[..
0260: 08 1D B3 5C D2 B7 3D 5E   B6 76 A8 2C 00 18 BE 3E  …\..=^.v.,…>
0270: D5 7A 2C F8 2D EA 90 4C   B1 14 2A 02 A4 46 A9 FC  .z,.-..L..*..F..
0280: 55 FF 37 06 BA 4D 2B F4   69 1A 2E 2F 29 7B FC EA  U.7..M+.i../)…
0290: 16 83 09 9C DA 19 E1 7A   9E 3C 8A 93 DC C4 34 50  …….z.<….4P
02A0: 24 68 7C AC 7B 57 1E B8   B7 53 16 BF 33 DC BC 83  $h…W…S..3…
02B0: 29 C7 EE AC 82 50 BE 58   08 8F 0B 4B 62 2C FF 8D  )….P.X…Kb,..
02C0: F3 5D 89 AE E2 85 62 5E   64 B1 8F FA A2 FE 6A 7F  .]….b^d…..j.
02D0: 4E 9D 48 0B BF EC 29 A0   8F 40 41 91 2E 0B 85 8F  N.H…)..@A…..
02E0: C8 B2 16 C5 11 F3 FB 09   4E DE 7F BC 28 9B 5F 89  ……..N…(._.
02F0: D9 D4 2F E0 BE 1C 33 FC   E9 1A 10 6B 19 B5 F6 9A  ../…3….k….
0300: 2B 4C 2F 44 2B 95 A8 2B   0F 50 A8 CD 3B 71 40 61  +L/D+..+.P..;q@a
0310: 91 9E 4E 36 51 EB 8C 26   AF EC FC 11 52 DE 85 BE  ..N6Q..&….R…
0320: B0 E7 C7 4B B6 FD CC 98   41 AB 56 8C 5A DD DD 0C  …K….A.V.Z…
0330: E6 7F D0 B5 57 36 A6 EA   30 39 51 B9 1C D0 2C FA  ….W6..09Q…,.
0340: 80 5A C8 85 22 5A 6F 57   78 FA F7 2C BC 34 88 60  .Z.."ZoWx..,.4.`
0350: 9B 8F 5E D6 29 05 AF F7   05 FF 8B 8C AE 5D A6 53  ..^.)……..].S
0360: BB E6 C3 71 D1 56 E3 ED   F8 9E D7 16 0B DB 97 85  …q.V……….
0370: D5 46 27 A9 4D 04 F5 7F   14 F7 D3 51 D8 D6 9B 96  .F'.M……Q….
0380: 5E 40 6B EC 21 4C B7 6A   59 BE 3A 11 9D EE 51 9C  ^@k.!L.jY.:…Q.
0390: 9D D0 96 05 64 F5 62 55   A3 59 32 D4 53 A2 D1 F7  ….d.bU.Y2.S…
03A0: 28 8E F2 AE F5 80 22 6C   81 90 B3 78 37 0E 93 DC  (….."l…x7…
03B0: 85 A4 01 EF FC E9 64 A8   D0 A9 80 5A 7A 87 00 6B  ……d….Zz..k
03C0: AA 21 1B EA F5 6D CB 4F   ED 56 C7 A3 A7 75 50 7E  .!…m.O.V…uP.
03D0: 5E BF DC D6 0E 87 A0 96   DD AB 84 26 49 51 DB 8A  ^……….&IQ..
03E0: 06 67 0A 3E 1B 29 B1 C5   D8 E7 C5 14 5D 5C 1C A8  .g.>.)……]\..
03F0: FF E6 6C 3C 82 7A 74 43   45 02 8C 82 3F D2 98 FC  ..l<.ztCE…?…
0400: EA 59 A2 7E AD 58 81 4A   A4 55 1C 1B 12 B3 9D 94  .Y…X.J.U……
0410: 1B 7E A4 94 08 18 DD 39   A7 87 EE B8 45 5E 6E 00  …….9….E^n.
0420: F6 D9 D5 1E 8F 62 26 A4   AE AF 70 BA 38 FE 5D 4C  …..b&…p.8.]L
0430: E9 D6 C3 5C B3 85 1E 97   8C BD E9 8D 8E E5 3C 65  …\……….<e
0440: 60 4C B6 5B 19 A3 CD 22   92 F2 1F A7 80 B3 F0 EB  `L.[…"……..
0450: 02 AB 7E 77 52 9D DA 1A   1D 1D 9B 70 34 B4 BD 24  …wR……p4..$
0460: 13 29 3D 84 42 76 05 BB   C7 37 8D F0 87 0F F7 17  .)=.Bv…7……
0470: BF 12 52 BF 3C 0D 98 0B   F3 8E AC 7B 2C A3 C7 E4  ..R.<…….,…
0480: 9A E8 BF 50 33 0B 66 DA   D2 67 07 DA E4 8D 35 E8  …P3.f..g….5.
0490: DF 78 0D 33 E1 70 19 1D   8D B8 FA DB 51 9A 6C C1  .x.3.p……Q.l.
04A0: 83 37 C6 9E 4A 31 0E B0   D0 86 F6 87 D8 CA 51 11  .7..J1……..Q.
04B0: ED 61 29 C5 F2 CA F5 05   89 60 32 43 8A 20 97 44  .a)……`2C. .D
04C0: 31 1B D6 76 9F D9 96 22   37 57 1D 4D 3F 5C 6F 10  1..v…"7W.M?\o.
04D0: 41 C3 C2 D8 89 AC C8 A5   5D 8B F5 AD CA BD 07 7A  A…….]……z
04E0: 83 7E A5 7A 3D E8 56 35   8C 66 6B 62 C9 25 B6 C2  …z=.V5.fkb.%..
04F0: FE 27 96 95 F3 BC E0 B1   9C B4 5B F1 92 D1 41 50  .'……..[…AP
0500: A4 54 AE 53 48 C1 11 09   58 8F 04 5E E3 5B ED F4  .T.SH…X..^.[..
0510: 4C 04 17 6E 5B 51 F3 D9   80 2B 05 EE EB D2 AF 30  L..n[Q…+…..0
0520: 70 39 31 33 B8 52 0B E4   4F BC 15 EF 5F 27 22 50  p913.R..O…_'"P
0530: 3A 75 34 BA F4 37 73 F9   43 E2 D7 8C D0 79 27 9D  :u4..7s.C….y'.
0540: 4F A2 FA 6F F9 23 1D 12   3E 56 A0 A7 E8 6D 46 82  O..o.#..>V…mF.
0550: CC 2E D9 C7 13 E1 9A 5D   C6 C3 90 DE E4 6E ED 71  …….]…..n.q
0560: EF 35 BE 03 DA 3D E9 A2   E2 86 12 B2 74 D3 C4 FB  .5…=……t…
0570: EC D4 A5 CA C8 59 5D AA   75 94 E0 EA 34 61 A9 E2  …..Y].u…4a..
0580: A9 C0 F6 74 3D 9B 6B 71   2F 8B BC B2 41 19 DF 2A  …t=.kq/…A..*
0590: E0 48 9F 61 AB 76 B2 11   4A 5D F6 50 CE 80 F4 96  .H.a.v..J].P….
05A0: 36 C6 B7 FD 5C C0 56 C3   85 88 B3 35 7B 29 78 78  6…\.V….5.)xx
05B0: 51 F1 45 BE A1 33 67 1E   DD 3C E7 5B 92 19 C4 E6  Q.E..3g..<.[….
05C0: 52 1C 05 A2 BD C5 E6 9F   71 73 68 F9 73 91 62 2A  R…….qsh.s.b*
05D0: 50 08 C2 59 F5 37 FA CE   A4 79 FA 44 72 64 16 23  P..Y.7…y.Drd.#
05E0: 8A E5 E9 4E 1B 5A D7 D1   89 33 FF D4 65 75 00 CD  …N.Z…3..eu..
05F0: A9 E8 44 CE E3 36 8A EA   DE 1E 1E 7F 0C 10 16 B4  ..D..6……….
0600: F0 EE B8 02 80 98 BD 48   26 1B A8 23 E8 73 E7 CF  …….H&..#.s..
0610: 32 18 F6 D0 AD E5 A7 DB   EB 88 FD 86 F4 63 FA B8  2…………c..
0620: 2E 35 64 88 DA 7D 4F 42   E9 E2 E8 29 D9 6F C4 05  .5d…OB…).o..
0630: 77 0F 9D E0 B6 6C F5 B6   90 01 04 C4 EE F8 0F FD  w….l……….
0640: 95 AF FB 55 0D 94 E4 A9   54 64 8F 2F E4 60 7A 37  …U….Td./.`z7
0650: 4D C0 BD 19 CA 8A 7C C6   2A 99 D3 A8 62 1E 28 3A  M…….*…b.(:
0660: 41 B3 12 0E 3C 0C F9 A4   28 4E 3F 4F 2F EE 08 90  A…<…(N?O/…
0670: A0 02 2D DB F8 43 BE B4   A6 53 20 C5 1E 12 26 25  ..-..C…S …&%
0680: E9 4F B9 21 AE 42 37 0C   3B E8 2D EF 8B 55 22 14  .O.!.B7.;.-..U".
0690: 78 6E ED E5 59 0B 20 19   96 D6 A5 41 5C B0 B4 6D  xn..Y. ….A\..m
06A0: B4 27 22 62 E1 EE C3 A4   82 08 56 30 82 08 52 A0  .'"b……V0..R.
06B0: 03 02 01 17 A2 82 08 49   04 82 08 45 FA 1B DF 94  …….I…E….
06C0: 7E EF 28 13 32 78 0A 2C   1A 17 77 BE 74 CF D6 25  ..(.2x.,..w.t..%
06D0: D5 60 04 D8 C2 20 03 8A   FF 11 D5 82 E8 92 1C BF  .`… ……….
06E0: 2F DE D0 76 5E 6C 81 A1   C4 3F 8B C9 05 EA FD 4E  /..v^l…?…..N
06F0: 3B D5 22 7F 86 75 11 E5   7F DE 49 47 49 6D 88 F8  ;."..u….IGIm..
0700: 60 F2 E8 F7 4B 98 CC 9F   9E C3 0A 42 FB 78 3D B9  `…K……B.x=.
0710: A0 8A C1 8F DD 13 02 E2   BE 85 BE EF 80 D9 86 CB  …………….
0720: 7A E8 08 99 AE 0D 1B 68   E9 93 81 11 18 2C CE 26  z……h…..,.&
0730: 81 8F 63 35 56 AE B1 4A   F9 4F 2E 4B 6A 1E 09 4D  ..c5V..J.O.Kj..M
0740: 6B 7D 6D 28 DF 68 2C 2A   3C B0 EE 7F EA 6E B9 9D  k.m(.h,*<….n..
0750: E5 81 3A 86 EB B7 3A 63   81 20 0C ED F9 B0 0D 4F  ..:…:c. …..O
0760: BC 0A B3 24 BD 86 15 E0   07 B5 75 A6 46 B9 00 87  …$……u.F…
0770: BD 74 67 4E 88 51 BB 41   92 0A CD 37 16 CE 67 16  .tgN.Q.A…7..g.
0780: 4B 18 1E 50 9C 33 85 A4   7A 89 4D F5 A9 0F F0 55  K..P.3..z.M….U
0790: 0D 16 2B 32 CF B4 35 CB   A5 0A 3C 63 27 5A 50 E8  ..+2..5…<c'ZP.
07A0: B4 F3 4E CD D9 FC CE 97   20 18 21 A6 A0 C7 88 60  ..N….. .!….`
07B0: 1D 71 30 97 44 40 F4 86   B3 60 A6 C0 38 DB 21 0C  .q0.D@…`..8.!.
07C0: BB AF 30 04 4D EF 59 BA   C3 86 E2 98 6C 04 8E DB  ..0.M.Y…..l…
07D0: 2F EC 73 BF 22 6A B6 56   A4 98 AA 96 F2 06 EE 51  /.s."j.V…….Q
07E0: CE 64 10 F8 E4 15 68 D4   DC A3 DC DA 61 34 1F 25  .d….h…..a4.%
07F0: 42 A1 93 AA 30 C1 EC E8   1F CC 6F FC C4 20 64 DD  B…0…..o.. d.
0800: 0A 5E 79 88 46 2D 24 6B   D8 BF DD 0A 58 76 C5 C9  .^y.F-$k….Xv..
0810: 99 03 03 4F 40 A9 9D BC   13 3C DA 26 75 B1 D3 03  …O@….<.&u…
0820: DF C7 F5 5B 07 9F 31 58   9E 87 F9 26 04 12 46 3B  …[..1X…&..F;
0830: BD 45 B4 17 4B BA 01 7A   7A FC 1F 5F 54 CF EA A3  .E..K..zz.._T…
0840: F9 9F D5 E6 D1 04 29 8C   DE A3 79 D0 B2 79 4A 1F  ……)…y..yJ.
0850: 27 A2 6E AD 35 E2 C8 6B   74 EE 84 CB 78 D6 CB BE  '.n.5..kt…x…
0860: 67 36 B7 25 21 3E F1 95   A7 21 0C 4E 0E 3E E3 78  g6.%!>…!.N.>.x
0870: E5 60 9F 84 E2 34 CB 24   4A 99 45 8C D4 B2 04 BD  .`…4.$J.E…..
0880: 81 9C 56 35 FD 1B A8 C1   A7 E8 36 35 83 1E D9 B4  ..V5……65….
0890: 7E 64 AC 42 3E E4 56 0E   CE 11 1E BD 5B DD EB 46  .d.B>.V…..[..F
08A0: E0 90 0F 8C 98 17 B6 E3   FE 46 20 63 E7 54 7E 99  ………F c.T..
08B0: F4 51 C6 62 A4 13 60 96   FB 68 75 97 C5 53 F3 CC  .Q.b..`..hu..S..
08C0: 2A A9 0A 24 51 4B 83 47   FA 80 DC 44 39 94 65 F2  *..$QK.G…D9.e.
08D0: E0 1E A0 8A 83 4D 8A F2   24 E4 F6 E9 ED DE F7 32  …..M..$……2
08E0: C2 65 E6 B0 9D 0F 20 9A   AC B0 E5 4B FA 24 0A 71  .e…. ….K.$.q
08F0: 29 F1 5F D9 7E 46 0B 8D   37 0D 37 99 69 BA 82 9A  )._..F..7.7.i…
0900: 0E F7 66 51 89 8D E4 85   2C 10 06 0B 06 18 04 14  ..fQ….,…….
0910: 7F 8D 76 76 A8 31 FD F8   3C FD 38 38 C4 AF E8 A9  ..vv.1..<.88….
0920: F1 CA 00 5D 23 84 1B 33   32 40 9C C9 D0 5F 1A DE  …]#..32@…_..
0930: 65 6A 57 56 7C 34 D8 54   E5 DC 83 09 D5 0E 8C 19  ejWV.4.T……..
0940: E1 85 D1 F8 EA EE C5 17   CF 6C 01 DA DE BD B4 37  ………l…..7
0950: 7A 6F AE 99 0F 20 4E 29   97 11 E1 3C F6 A8 E0 2F  zo… N)…<…/
0960: E1 16 37 06 17 31 9F 61   90 68 27 68 44 13 49 B8  ..7..1.a.h'hD.I.
0970: 67 A4 89 DB 6B 4F 41 F6   74 EB 90 40 AC 16 1C 64  g…kOA.t..@…d
0980: 54 8E 8A B5 BA DB 0C 33   F3 9C 9A 2E 1D 77 69 46  T……3…..wiF
0990: 3E F1 81 26 02 43 AE 86   0C 96 F5 E2 CA 6F AE DD  >..&.C…….o..
09A0: 7C 32 AE EF E2 4C 9B 8B   49 B6 DD D3 7F 42 60 AC  .2…L..I….B`.
09B0: 85 E7 21 23 2A 65 26 F0   C1 8F E2 EF BE 47 1D 73  ..!#*e&……G.s
09C0: 39 F2 7D 59 A2 C5 B9 14   AB 16 4E 1B 9F E1 38 02  9..Y……N…8.
09D0: AC 54 94 22 B1 B5 B7 B4   A0 6B EB DF 96 B3 D3 84  .T."…..k……
09E0: CC EE CF A0 33 C1 F4 8E   4A EB A9 AC 57 18 03 26  ….3…J…W..&
09F0: 65 8D C4 A7 C4 DC 41 52   E5 1C 19 31 E6 24 39 2B  e…..AR…1.$9+
0A00: 2B 1E B6 36 8E 18 94 3D   26 D2 9D 4A 94 97 07 3F  +..6…=&..J…?
0A10: F1 2B E9 6C 30 9B F4 78   1F 2C F9 D9 B0 AE 1C 30  .+.l0..x.,…..0
0A20: 60 F0 FA CE F8 0E 09 7D   16 28 0A 8E 02 BB E5 AD  `……..(……
0A30: 6A 9C F2 B2 23 66 EC E9   9D 2E 36 6B C4 DD 7A F3  j…#f….6k..z.
0A40: F8 3F 22 97 D1 4E F3 E6   A2 6B D3 45 D0 AB 82 23  .?"..N…k.E…#
0A50: BC 5C 88 C2 CD D2 C4 39   D2 6E 56 71 7F 72 EC E1  .\…..9.nVq.r..
0A60: 77 B4 27 A7 57 71 F8 18   D2 D2 69 EC 44 9F 59 29  w.'.Wq….i.D.Y)
0A70: 1C 73 74 08 62 26 74 60   4F 0C 55 6E 4A FD E5 58  .st.b&t`O.UnJ..X
0A80: BF BF 29 DD 8D 56 A7 6F   0C E8 F4 E0 46 8B A5 D0  ..)..V.o….F…
0A90: 2E 0A 7A E7 1A 67 25 1D   06 BD 1C AC 4D A6 45 47  ..z..g%…..M.EG
0AA0: 0E 83 FB 90 ED E2 99 9E   43 B0 88 F4 1E 9A 41 A7  ……..C…..A.
0AB0: C3 37 CE 52 47 24 45 05   FD 0E 4A A0 6E 1E C2 BA  .7.RG$E…J.n…
0AC0: FE 1D 11 5F 7A 45 BC B7   9C 7E 1D 9E 26 06 60 D0  …_zE……&.`.
0AD0: 98 7C 71 30 70 BE 2C 9F   FF 93 C8 1E 9D B4 9B CC  ..q0p.,………
0AE0: 6D C0 F0 89 3D DA 4D B0   D1 60 1D CA C6 48 E6 2C  m…=.M..`…H.,
0AF0: 8F FE 2C F2 8C E4 3F AF   73 CA 67 02 72 BC 59 ED  ..,…?.s.g.r.Y.
0B00: 4C 8C 80 92 2B 3E 06 CF   DD 6E 0B 48 42 A8 FC 2A  L…+>…n.HB..*
0B10: EA 2E 8B 83 40 2E FF 39   89 70 F6 B5 1A 8B 0A A3  ….@..9.p……
0B20: B1 92 17 D0 0A 85 A5 4F   C1 28 B6 8B 31 FA E2 EF  …….O.(..1…
0B30: 71 19 DE 17 52 E5 3F 93   8A 57 2B 2C DD 34 BA 9D  q…R.?..W+,.4..
0B40: 30 54 70 EF 0F 1B 3B 31   76 56 B2 2B 65 C9 C1 DE  0Tp…;1vV.+e…
0B50: C4 4E 12 0F 93 AC 48 85   A6 73 8A 0C D9 71 5A D6  .N….H..s…qZ.
0B60: AA DA EE 65 F1 26 35 A7   5A EF C1 65 44 4F 33 B5  …e.&5.Z..eDO3.
0B70: 73 13 A9 5F A3 1A 76 33   4B 49 95 8F C3 F6 12 E3  s.._..v3KI……
0B80: 52 73 77 43 F9 88 CA 28   2B AF 04 1D EF 51 2C A7  RswC…(+….Q,.
0B90: 59 FC 07 E6 53 BB 69 DF   65 63 C2 AF A7 D4 AE DC  Y…S.i.ec……
0BA0: A5 CA 84 D5 3F 4B B3 1F   40 42 18 13 42 A4 01 CE  ….?K..@B..B…
0BB0: D5 9A 90 24 4A F0 3C 55   AB 5C 20 41 92 37 CC 26  …$J.<U.\ A.7.&
0BC0: F9 F4 4B 82 C9 87 DD F2   49 F9 A9 78 23 17 DF 6E  ..K…..I..x#..n
0BD0: FB CB 86 82 47 89 A8 5B   8C 3F 85 2C 88 57 D1 A8  ….G..[.?.,.W..
0BE0: 5C 16 6A 2C DA 92 C0 36   93 0C 0F 18 F9 07 66 A6  \.j,…6……f.
0BF0: B3 CE AC 4E 05 B9 EE 11   50 03 20 76 64 AF 7E DF  …N….P. vd…
0C00: 7C 2B 13 7E 59 81 C1 4E   D5 19 01 BD F8 BC FF EE  .+..Y..N……..
0C10: A6 59 C9 BA C5 CB F6 99   F9 11 C2 4C 0B 54 C6 6F  .Y………L.T.o
0C20: 6C A6 1D 2F 73 C5 C7 E2   60 A6 CE 8E 45 40 95 4E  l../s…`…E@.N
0C30: 67 B2 29 DC 8D 47 15 FE   FC 87 43 9B 2B F4 34 98  g.)..G….C.+.4.
0C40: 83 40 01 1A 47 19 EB 1A   2A 2A 02 1E 45 D7 7A B4  .@..G…**..E.z.
0C50: F9 55 05 D7 2B 09 4C 28   5B BD 2F 88 4E 4F E9 BD  .U..+.L([./.NO..
0C60: 27 1D F0 35 29 AD FA 5E   EE 2D 18 95 4A E3 FC 8B  '..5)..^.-..J…
0C70: 8D C9 75 54 1D F0 C7 5B   44 87 A7 69 A7 46 DC 76  ..uT…[D..i.F.v
0C80: 66 7F 97 0B 05 0B 08 76   C3 7D 7D 42 28 77 65 CC  f……v…B(we.
0C90: 1B 52 E2 C2 37 D2 21 4E   A0 B2 85 C5 34 5B BE C7  .R..7.!N….4[..
0CA0: D7 11 13 29 16 F6 0C A1   D4 9F 09 B3 5E A8 F3 4B  …)……..^..K
0CB0: CE 9C AE 62 83 E7 12 1B   89 D0 79 9B 69 0D 6D 3E  …b……y.i.m>
0CC0: 43 E5 67 DC FC DF E6 2B   79 87 AD 79 4B 22 D6 11  C.g….+y..yK"..
0CD0: 0D E8 2E B8 C7 B3 DD 51   4E 60 A9 D3 CE 90 E7 DB  …….QN`……
0CE0: A0 47 1C E8 08 CD 3D 08   F5 3D 99 A8 79 B6 F7 D1  .G….=..=..y…
0CF0: 63 B0 B7 6C 30 65 D3 6C   A4 D8 C9 C7 C3 9E 79 85  c..l0e.l……y.
0D00: 2D 49 6B 34 A0 3A CE CC   CA 9D 2B 1E 98 7D 59 4B  -Ik4.:….+…YK
0D10: 67 C3 5A DD E1 91 DB B4   6A 08 2E C8 0C F0 65 A4  g.Z…..j…..e.
0D20: 6B A6 19 79 1B 52 AE 11   ED 89 12 3D 5D 0C 19 BF  k..y.R…..=]…
0D30: 7E 33 EE DE 37 4F E1 93   0E 7C E4 6E E6 A6 78 D6  .3..7O…..n..x.
0D40: 9F 49 2B 8E A5 A0 CD A1   ED 71 F1 90 8F C8 60 65  .I+……q….`e
0D50: 5B 6A D5 C7 2F 72 0C 4B   E9 05 1A D3 6F 2A E8 7C  [j../r.K….o*..
0D60: E5 9E A0 52 B3 49 F9 54   5B C8 40 C1 A0 ED FD EF  …R.I.T[.@…..
0D70: 89 40 FB 4C AD 91 7C F4   4F 1A 57 26 4D 3C 6D 76  .@.L….O.W&M<mv
0D80: FE 60 AC 2A 8D 1F 86 A8   89 58 9B 62 17 66 AF 4B  .`.*…..X.b.f.K
0D90: 7B A7 35 83 6B 9D 5A A1   41 4B DA FB 94 ED C8 EF  ..5.k.Z.AK……
0DA0: 9C F0 54 2C 05 6A 7E C7   C9 39 C6 57 D0 E6 60 3C  ..T,.j…9.W..`<
0DB0: 70 63 F7 43 85 9C AD 05   FB E6 7E 5A 49 A8 6F 99  pc.C…….ZI.o.
0DC0: 94 B0 03 F4 77 5F 5F B1   D7 CD 35 6D B5 A5 8B A8  ….w__…5m….
0DD0: A2 B2 D9 C1 6A 05 43 9F   55 8C 3F E3 52 DC 75 D4  ….j.C.U.?.R.u.
0DE0: D7 68 E4 24 3D C7 85 98   C7 B3 B4 8A 4C A8 43 DF  .h.$=…….L.C.
0DF0: 7E A6 62 46 94 05 FA 96   A9 EB 29 7F F1 61 C4 39  ..bF……)..a.9
0E00: 5B C0 4B CF 41 B2 08 03   18 E5 A0 0F AE D4 25 C3  [.K.A………%.
0E10: 70 6D 4D AD 7C 14 A8 C8   5B AE B9 25 26 DF 60 61  pmM…..[..%&.`a
0E20: 30 39 AE 50 60 BF 35 1E   2F 92 D8 F0 00 4F AD D5  09.P`.5./….O..
0E30: A1 55 87 FB 73 7A B8 FD   5A 79 AD 76 92 A9 AF 72  .U..sz..Zy.v…r
0E40: B0 3B 09 1D 91 99 6E 68   A5 6D 0A 37 69 B2 B3 9A  .;….nh.m.7i…
0E50: 7E 78 35 97 4A 26 01 63   B2 46 8B DB B7 DF 6D D6  .x5.J&.c.F….m.
0E60: 23 06 5A 3E 4F 4E 53 C2   9E F1 B5 8E F8 3F AE 78  #.Z>ONS……?.x
0E70: 40 B4 75 01 CF 1E F6 4B   76 41 C8 C4 D5 DB 52 13  @.u….KvA….R.
0E80: B7 38 17 63 89 39 A6 81   DD 7A C6 4B F2 6D BC 70  .8.c.9…z.K.m.p
0E90: 40 32 E2 7D FF 73 18 C0   6A 86 98 3C 26 44 9C 8E  @2…s..j..<&D..
0EA0: E9 31 C3 92 F8 A1 13 E7   07 17 BB 16 DB 38 A5 A7  .1………..8..
0EB0: 34 BE EE F1 14 C9 26 8A   91 EF A8 FA C5 DC 6C 15  4…..&…….l.
0EC0: 6D 93 0A 1F 48 31 40 8B   A8 0C BC 54 33 56 3E 85  m…H1@….T3V>.
0ED0: BD E2 54 0B 65 A8 05 3A   C0 CC 96 F0 E1 85 EA 79  ..T.e..:…….y
0EE0: AD D3 F1 9F CB 74 6A D7   10 19 F8 7C 93 70 89 06  …..tj……p..
0EF0: BE 23 35 C5 5C ED 02 48   1B C7 2D FF 8D EC 98 75  .#5.\..H..-….u
0F00: 8B                                                 .

2013-04-05 10:12:01,578  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-8] New Kerberos auth request from 127.0.0.1 (127.0.0.1:52405)
 2013-04-05 10:12:01,578  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-8] Issuing login challenge to browser.
 2013-04-05 10:12:01,603  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-9] New Kerberos auth request from 127.0.0.1 (127.0.0.1:52405)
 2013-04-05 10:12:01,604  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-9] Issuing login challenge to browser.
 2013-04-05 10:12:01,607  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-10] New Kerberos auth request from 127.0.0.1 (127.0.0.1:52405)
 2013-04-05 10:12:01,608  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-10] Issuing login challenge to browser.
 2013-04-05 10:12:01,608  INFO  [web.site.EditionInterceptor] [http-apr-80-exec-7] Unable to retrieve License information from Alfresco: 401
 2013-04-05 10:12:01,615  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-1] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,634  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-3] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,642  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-4] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,650  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-5] Authentication not required (filter), chaining …
 2013-04-05 10:12:01,656  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-2] Authentication not required (filter), chaining …
 2013-04-05 10:12:03,776  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-6] Authentication not required (filter), chaining …
 2013-04-05 10:12:03,791  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-8] Authentication not required (filter), chaining …
 2013-04-05 10:12:03,804  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-9] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,009  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-10] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,045  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-1] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,054  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-3] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,062  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-4] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,068  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-5] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,082  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-2] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,498  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-6] Authentication not required (filter), chaining …
 2013-04-05 10:12:04,505  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-8] Authentication not required (filter), chaining …
 2013-04-05 10:12:06,496  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-10] New Kerberos auth request from 127.0.0.1 (127.0.0.1:33580)
 2013-04-05 10:12:06,496  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-10] Issuing login challenge to browser.
 2013-04-05 10:12:06,513  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-3] New Kerberos auth request from 127.0.0.1 (127.0.0.1:59391)
 2013-04-05 10:12:06,513  DEBUG [app.servlet.KerberosAuthenticationFilter] [http-apr-80-exec-3] Issuing login challenge to browser.
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

share-config-custom.xml


<alfresco-config>

   <config evaluator="string-compare" condition="Kerberos" replace="true">
      <kerberos>
         <password>secret</password>
         <realm>XXX.LOCAL</realm>
         <endpoint-spn>HTTP/testshare.xxx.local@XXX.LOCAL</endpoint-spn>
         <config-entry>ShareHTTP</config-entry>
      </kerberos>
   </config>

<!–
   <config evaluator="string-compare" condition="Remote">
      <remote>
         <endpoint>
            <id>alfresco-noauth</id>
            <name>Alfresco - unauthenticated access</name>
            <description>Access to Alfresco Repository WebScripts that do not require authentication</description>
            <connector-id>alfresco</connector-id>
            <endpoint-url>http://localhost:80/alfresco/s</endpoint-url>
            <identity>none</identity>
         </endpoint>

         <endpoint>
            <id>alfresco</id>
            <name>Alfresco - user access</name>
            <description>Access to Alfresco Repository WebScripts that require user authentication</description>
            <connector-id>alfresco</connector-id>
            <endpoint-url>http://localhost:80/alfresco/s</endpoint-url>
            <identity>user</identity>
         </endpoint>

         <endpoint>
            <id>alfresco-feed</id>
            <name>Alfresco Feed</name>
            <description>Alfresco Feed - supports basic HTTP authentication via the EndPointProxyServlet</description>
            <connector-id>http</connector-id>
            <endpoint-url>http://localhost:80/alfresco/s</endpoint-url>
            <basic-auth>true</basic-auth>
            <identity>user</identity>
         </endpoint>
         
         <endpoint>
            <id>activiti-admin</id>
            <name>Activiti Admin UI - user access</name>
            <description>Access to Activiti Admin UI, that requires user authentication</description>
            <connector-id>activiti-admin-connector</connector-id>
            <endpoint-url>http://localhost:80/alfresco/activiti-admin</endpoint-url>
            <identity>user</identity>
         </endpoint>
      </remote>
   </config>

–>

   <!– 
        Overriding endpoints to reference an Alfresco server with external SSO enabled
        NOTE: If utilising a load balancer between web-tier and repository cluster, the "sticky
              sessions" feature of your load balancer must be used.
        NOTE: If alfresco server location is not localhost:8080 then also combine changes from the
              "example port config" section below.
        *Optional* keystore contains SSL client certificate + trusted CAs.
        Used to authenticate share to an external SSO system such as CAS
        Remove the keystore section if not required i.e. for NTLM.
        
        NOTE: For Kerberos SSO rename the "KerberosDisabled" condition above to "Kerberos"
        
        NOTE: For external SSO, switch the endpoint connector to "AlfrescoHeader" and set
              the userHeader to the name of the HTTP header that the external SSO
              uses to provide the authenticated user name.
   –>
   <config evaluator="string-compare" condition="Remote">
      <remote>
         
         <connector>
            <id>alfrescoCookie</id>
            <name>Alfresco Connector</name>
            <description>Connects to an Alfresco instance using cookie-based authentication</description>
            <class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
         </connector>
         
         <connector>
            <id>alfrescoHeader</id>
            <name>Alfresco Connector</name>
            <description>Connects to an Alfresco instance using header and cookie-based authentication</description>
            <class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
            <userHeader>SsoUserHeader</userHeader>
         </connector>

         <endpoint>
            <id>alfresco</id>
            <name>Alfresco - user access</name>
            <description>Access to Alfresco Repository WebScripts that require user authentication</description>
            <connector-id>alfrescoHeader</connector-id>
            <endpoint-url>http://localhost:80/alfresco/wcs</endpoint-url>
            <identity>user</identity>
            <external-auth>true</external-auth>
         </endpoint>
      </remote>
   </config>
   
</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

java.login.config addition


ShareHTTP {
   com.sun.security.auth.module.Krb5LoginModule required
   storeKey=true
   useKeyTab=true
   keyTab="/etc/alfrescohttp.keytab"
   principal="HTTP/testshare.xxx.local";
};
‍‍‍‍‍‍‍‍‍

alfresco global properties


authentication.chain=kerberos1:kerberos,ldap1:ldap-ad
#external.authentication.proxHeader=SsoUserHeader
#
# Kerberos
kerberos.authentication.realm=XXX.LOCAL
kerberos.authentication.sso.enabled=true
kerberos.authentication.authenticateCIFS=true
kerberos.authentication.user.configEntryName=alfresco
kerberos.authentication.cifs.configEntryName=AlfrescoCIFS
kerberos.authentication.http.configEntryName=AlfrescoHTTP
kerberos.authentication.cifs.password=secret
kerberos.authentication.http.password=secret
‍‍‍‍‍‍‍‍‍‍‍‍‍‍

deisenlord · ‎04-05-2013

I just realize there is a special topic for these issues. If someone with the rights to move it can do so I'd be much obliged.

deisenlord · ‎04-08-2013

Did a fresh bone-stock install with the April 6 nightly build, left the port number at 8080 as I thought maybe this was involved. Same problem, alfresco/cifs fine, share not.

deisenlord · ‎04-09-2013

I rolled back my installation to 4.2a and applied my exact same config files and kerbose auth works for share.

EDIT
Just tried 4.2c and it works as well.

deisenlord · ‎12-20-2013

I can confirm this is fixed in 4.2e. Thanks!

Hyland Connect

Share Kerberos SSO Problem 4.2d