nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

NTLMv2 and Passthru

carltonw

I'm getting this error in alfresco.log when I try to access my alfresco site using NTLM SSO passthru:

"client CW-VISTA using NTLMv2 logon, not valid with passthru authentication"

The documentation says that you can't use NTLMv2 with passthru so how can I use NTLM?

Find more posts tagged with

Comments

jtp

Edit your group policy, under computer configuration, security settings, local policies, security options.

You should see something about network security: Lan manager authentication level.
Try changing that to send lm & ntlm, and v2 if negotiated.

carltonw

JTP,
Thanks for the response. Strange thing is that this worked on a previous try at getting this working.

Did you ever get NTLM passthru working with 3 Stable and Share?
Carlton.

jtp

Single sign on, no. NTLM manual authentication, yes.

carltonw

Can you tell me how you got manual NTLM working for both Alfresco and Share? (did it break CIFS?)
If I could see your config files that would be great. thanks.

jtp

using the instructions here: http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

Do everything under sections "Alfresco Explorer and WebDav SSO using NTLM " and "NTLM Passthru Authentication" but not "Alfresco Share SSO using NTLM "
That will get SSO working for /alfresco and manual authentication working for Share. This is in an AD environment with no LDAP sync.
And yes it broke CIFS.

carltonw

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

jtp

JTP,
Thanks for your info. I'm now able to get Share and Alfresco sites working with NTLM. Strange thing is that I can't use an AD login on Share if I haven't logged in to the Alfresco site first.
Did you have this experience?

Now I'm working on the CIFS problem. It's definitely a config error since the log shows that CIFS and FTP won't even start.

Currently, that's normal to only be able to sign in to share after signing in to alfresco. I'm sure it's in the plan sometime to remove the requirement, but not yet.

Best of luck to you on the CIFS front, it seems to be one of the most posted about items on this forum. I didn't find it important enough to go through the hassle.