nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Problem with accessing CFIS share from windows

aaroe

Hi there,

We're currently in the process of trying out Alfresco at my workplace to replace the small SharePoint we have going now which no one uses anyways.
I'm in the process of getting some basic configuration done to make it possible to let a few users lose on the thing and let them have their way with it and test it out. I'm managed to get an instance of AlfrescoLabs3 running on one of our Debian test servers and made check user credentials up against our ActiveDirectory. I'm currently trying to get the network share to work properly but it's not going as I'd like it to.

I had a look at the wiki and didn't really get much from that, so I tried to take what I could get and make the best use of it.

I copied the config block regarding CIFS from file-servers.xml and copied it into file-servers-custom.xml and changed the authentication block to:

<authenticator type="passthru">
    <Server>[b]DNS NAME OF OUR DOMAINCONTROLLER[/b]</Server>
</authenticator>
‍‍‍‍‍

I've assumed that the server told to link to on the wiki is our domain controller holding our ActiveDirectory with users. I then assumed that users should be able to log on to the share with the same AD credentials they use to log on to Alfresco with.

When trying to map the drive from one of our windows clients with \\10.0.1.20\alfresco (where 10.0.1.20 ofcourse is the ip of the server running Alfresco) I get prompted for username and logon but fail to login with my username and password. And yes, I've also tried with DOMAIN\username and so on. Nothing seems to work. I'd hoped that there would be some kind of debug information to follow in the /tomcat/logs/ dir but no errors seems to be triggered which leaves me a bit hopeless 😕

…and this is where you guys come into the picture. I'm hoping that someone out there might be able to help me out of this pinch. Any help is very much appreciated.

Thanks in advance
Christian Rasmussen

Find more posts tagged with

Comments

rxm307

I'm having the same issue, NTLM passthru authentication works fine with the web interface, just not with CIFS.

aususer

I think you might be suffering the same problem that a few people are also having when configuring NTLM CIFS.. ie.. that we cannot get it to work.

symptom is:
You can use Passthru to authenticate your webfrontent without a problem.. however when you try to start|run|\\yoursever you will fail.
also trying a "net view \\<yourserver>" will come up with a "access is denied".

if you increase your error logging (/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties and change the .smb and NTLM options to "debug), and restart alfresco - then look at the \opt\alfresco\tomcat\logs\catalina.out you will see
<time>227 DEBUG [smb.protocol.auth] Authenticated user <yourusername> sts=Disallow via Passthru

This is the reason why you are being prompted for the username and password..
you are not alone here..

here is a link to a thread that we have all been using describing the same problem and what we are finding…
http://forums.alfresco.com/en/viewtopic.php?f=14&t=13858

rxm307

I've enabled those and all I'm getting is

16:45:51,790 DEBUG [org.alfresco.smb.protocol.auth] No PassthruDetails for T3
16:46:26,378 DEBUG [org.alfresco.smb.protocol.auth] No PassthruDetails for T9

rxm307

and

16:55:22,962 DEBUG [smb.protocol.auth] Null CIFS logon allowed

aususer

Have a look at the link I put - I put a copy of my config that I used that got a little closer than you seem to be..
note: is linux-based, so paths will be different to windows (if that is what you are using).

aususer

OOPS :shock: don't know if this is a good or a bad thing..

I just downloaded a trial version of enterprise 3.0 - just to see -, set it up EXACTLY the same as the Labs 3b and 3c…

and it worked PERFECTLY first time!

ie..

Startup:
07:37:18,652 Userystem INFO [service.descriptor.DescriptorService] Alfresco license: Enterprise - v3.0 granted to Trial User limited to 30 days expiring Sat Jan 03 00:00:00 EST 2009 (30 days remaining)
07:37:18,654 Userystem INFO [service.descriptor.DescriptorService] Alfresco started (Enterprise): Current version 3.0.0 (r11498) schema 501 - Installed version 3.0.0 (r11498) schema 501
Dec 4, 2008 7:38:46 AM org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-8080
Dec 4, 2008 7:38:46 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 368844 ms

Logfile when accessing webpage (modified to protect me)

07:38:59,391 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from <mysubnet> (<mysubnet>:5432)
07:38:59,404 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0xa208b207,Domain:<mydomain>,Wks:<mypc>]
07:38:59,405 DEBUG [app.servlet.NTLMAuthenticationFilter] Client domain <mydomain>
07:38:59,564 DEBUG [app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x80000203,Target:ALFRESCOA,Ch:b67a1a5b5e8eec1e]
07:38:59,582 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:690f25986c591cf504dd0655caeb906cefea87bfcbd94c4d,NTLM:410cbc2c95a79569b080b7fbc50c52c9b7953a9c99644684,Dom:<mydomain>,User:<me>,Wks:<mypc>]
07:39:02,891 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] Updated cached NTLM details
07:39:02,893 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] User logged on via NTLM, [<me>,Wks:<mypc>,Dom:<mydomain>,AuthSrv:ALFRESCOA,Thu Dec 04 07:39:02 EST 2008]
07:39:11,145 DEBUG [app.servlet.NTLMAuthenticationFilter] User <me> validate ticket
07:39:11,295 User:<me> DEBUG [app.servlet.NTLMAuthenticationFilter] Authentication not required, chaining …

and when I access via XPSP3 Start|Run|\\alfresco

07:39:25,668 User:<me> DEBUG [smb.protocol.auth] Auth token net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@6f1597: Username: net.sf.acegisecurity.providers.dao.User@f27e2a: Username: <me>; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ROLE_AUTHENTICATED; Password: [PROTECTED]; Authenticated: true; Details: net.sf.acegisecurity.providers.dao.User@f27e2a: Username: <me>; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ROLE_AUTHENTICATED; Granted Authorities: ROLE_AUTHENTICATED
07:39:25,678 User:<me> DEBUG [smb.protocol.auth] Authenticated user <me> sts=Allow via Passthru
07:39:32,848 User:<me> DEBUG [smb.protocol.auth] Null CIFS logon allowed

Could this be a mismatch-difference between code in the labs3b/3c and enterprise?

Goes to show - paying certainly does help…
not sure where to go to from here.. we are not in a position to roll out the enterprise version just yet (if at all - not sure if will fit into our requirements just yet - thats why using the community version - it doesn't bind me to an "enddate" for business testing)..

reboot

we have the same problemes with NTLM - CFIS configuration.

on Version 2.9 it was all fine, but with upgrade to 3.0b the CFIS authentication will fail.

reboot

is there an idea when the problem is solved, or shall I step back to 2.9?

rxm307

I Raised this bug report yesterday, no one has replied too it as yet…..

aususer

Oh yea… and don't bother trying Labd 3d… (on nightly builds today)…
it doesn't do any better.. will update the fault ticket.

meansartin14

I too am suffering from the issue described in this thread.

I have configured Alfresco Community Labs 3C to authenticate against a remote Active Directory server. This allows configured Active Directory users to use the Alfresco Web Interface via single sign-on on their client Windows XP PCs (which use the same Active Directory server for Windows login) without issue. They can not, however, use the Map Network Drive… feature to add the Alfresco CIFS server as a network drive.

The errors I see in alfresco.log are different than what has been described here though. Here's an example of what I see in alfresco.log when I attempt to Map Network Drive… to \\myserver\alfresco:

    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=8, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=985,Authenticator=EncType=23,Kvno=-1,Len=180]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=16, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=1020,Authenticator=EncType=23,Kvno=-1,Len=175]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=8, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=MutualAuth ,Ticket=Len=985,Authenticator=EncType=23,Kvno=-1,Len=180]
    DEBUG [org.alfresco.smb.protocol.auth] Kerberos mutual auth required, parsing AP-REQ
    ERROR [org.alfresco.smb.protocol.auth] Kerberos logon error
    ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=16, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] User  logged on  (type Normal)
    DEBUG [org.alfresco.smb.protocol.auth] NT Session setup NTLMSSP, MID=24, UID=0, PID=65279
    DEBUG [org.alfresco.smb.protocol.auth] Logged on using NTLMSSP/NTLMv2
    DEBUG [org.alfresco.smb.protocol.auth] User <username> logged on  (type Normal)
    DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=0 for VC=[0:0,[<username>:null,Windows XP 3790 Service Pack 2,,<ip address>],Tree=0,Searches=0]
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I started my own thread about the issue (here: http://forums.alfresco.com/en/viewtopic.php?f=9&t=15888) not knowing that this thread existed.

Has anyone successfully configured Alfresco Labs 3c to allow CIFS server network drive mappings on Windows XP PCs while authenticating against an external Active Directory server?

meansartin14

I have started a thread that I hope to eventually turn into a AlfrescoWiki page for how to configure Active Directory authentication for both CIFS and the Web Interface in Alfresco Labs 3c.

Please see my thread:
[ERROR]Alfresco Engineers: CIFS auth does not work. Sugg?

Please come join in the discussion, or at least subscribe to the thread. I want to try to get everyone having these types of issues into the thread so that we can get a large collection of experiences and configurations.

We WILL find the answer for how to enable Active Directory authentication with CIFS in Alfresco!!

luxoliver

Hi,

I want to access Alfresco with CFIS but i already have an error 1326 (user or password incorect).
I have 1 alfresco on my computer and an other one on a VM.
On my computer i use the port 8585 and on my VM i use 8080.
I can't access with CFIS the alfresco who is on my computer. But when i try to access on my VM that's work's.
Maybe it's because of the port ? But i can't change the port on my computer because i have an other tomvat which use the port 8080.
If somebody have any idea to help me, you are really welcome.
Thank's