NTLMv2/SSO/AD

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

ivan_plestina

I'm trying to configure SSO with Alfresco 3 Stable in an AD environment. Documentation for NTLM is quite confusing when regarding to NTLMv2 usage. After configuring client to only send NTLMv2 hashes I get the following error when trying to access Alfresco from IE:

[org.alfresco.web.app.servlet.NTLMAuthenticationFilter] Client NC8000 using NTLMv2 logon, not valid with passthru authentication

Same config works perfectly when LM & NTLM are enabled.

Is it possible to have SSO using NTLMv2 and if yes can you post required config changes/example (for both web client and cifs)?

phileas

Hi,

looing at the wiki page at: http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

Note that the support of NTLMv2 is only for configurations storing psswords (or hashes) in Alfresco. As NTLMv2 has been designed to avoid "man-in-the-middle" attacks, any passthru authentication is impossible.

So I think NTLMv2 is not possible with passthru to ADS.

Regards,

P.