nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Active Direcory & Alfresco

adnan_douglas

Dears,

Can anyone help me to configure Alfresco authentication to use Active Directory? I need the steps for the configuration.
Please Advice.

Regards,
Adnan Douglas

Find more posts tagged with

Comments

dward

I would suggest an authentication chain containing the passthru subsystem for authentication and the ldap-ad subsystem for synchronization. You will get NTLM SSO and CIFS authentication against the domain server by default.

Just set the following in alfresco-global.properties

authentication.chain=passthru1

assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank
passthru.authentication.servers=DOMAIN\\domaincontroller.com,domaincontroller.com
passthru.authentication.defaultAdministratorUserNames=Administrator
ldap.authentication.java.naming.provider.url=ldap://domaincontroller.com:389
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain

I would recommend taking a v3.3 nightly build or building from HEAD, as a number of improvements have been made since the v3.2 Community release.

See http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems for a guide to all these parameters and their meanings.

luisg

Hi dward and thanks for your post.

I configured my alfresco with your tips and worked fine.
One more question, if I want to use CIFS I need to add alfrescoNTLM1:alfrescoNTLM to authentication.chain in alfresco-global.properties? I need to change anything in file-servers.properties? I'm asking this because I'm getting:

ERROR [org.alfresco.fileserver] Failed to get local domain/workgroup name, using default of WORKGROUP
ERROR [org.alfresco.fileserver] (This may be due to firewall settings or incorrect <broadcast> setting)
‍‍‍‍

One more time, thanks. Waiting for an answer…

Luis

dward

No. Like I said

You will get NTLM SSO and CIFS authentication against the domain server by default.

When running on Linux, or with the Windows native code disabled, you will need to tell the CIFS server your domain name. Try this in alfresco-global.properties

cifs.domain=YOURDOMAIN

adnan_douglas

I did the below config but once i try to authenticate I received the following error:
"The remote server may be unavailable or your authentication details have not been recognized."

Please advice and help,
I need to see the authentication log to determine the problem.

dward

What do you see in alfresco.log?

luisg

ok

Now I dont have the erros. But I tried to test with:

smbclient \\\\localname\\alfresco -U user_from_ad
‍‍‍

and get a 'session setup failed: NT_STATUS_LOGON_FAILURE'

I also tried smbclient \\\\localnameA\\alfresco -U user_from_ad and get Connection to localnameA failed (Error NT_STATUS_BAD_NETWORK_NAME)

What is missing?

dward

The Alfresco share has a capital A.

Try with and without domain prefixes on the user name, e.g. -U 'DOMAIN\user'

luisg

It's not workin :shock:

my machine name is alfresco
my machine user is alfresco
the user in Active directory is alfresco
my domain is test.pt

So, to try the CIFS I did:
smbclient \\\\alfrescoA\\alfresco -U alfresco
and I get Connection to alfrescoA failed (Error NT_STATUS_BAD_NETWORK_NAME)

with:
smbclient \\\\alfrescoA\\alfresco -U test.pt\alfresco
I get: Connection to alfrescoA failed (Error NT_STATUS_BAD_NETWORK_NAME)

I think he cant find the server. If I do:
smbclient \\\\alfresco\\alfresco -U alfresco
he ask me for a password, but not the local machine pass or the AD pass works and I get allways:
session setup failed: NT_STATUS_LOGON_FAILURE

wtf?!

dward

Please do not swear. I told you the share name has a capital A. And you need to escape or quote backslashes.

Try

smbclient \\\\alfrescoA\\Alfresco -U alfresco
smbclient \\\\alfrescoA\\Alfresco -U test.pt\\alfresco
smbclient \\\\alfresco\\Alfresco -U alfresco

luisg

hi and thanks.
This is probably something in my configuration:

smbclient \\\\alfrescoA\\Alfresco -U alfresco –> Connection to alfrescoA failed (Error NT_STATUS_BAD_NETWORK_NAME);
smbclient \\\\alfrescoA\\Alfresco -U test.pt\\alfresco –> Connection to alfrescoA failed (Error NT_STATUS_BAD_NETWORK_NAME)
smbclient \\\\alfresco\\Alfresco -U alfresco –> session setup failed: NT_STATUS_LOGON_FAILURE (after enter password)

This means that the share is not working. He don't even find alfrescoA.

Man, thanks a lot for spending time with me. I'm going try to find some tips, to get this work.

Luis

luisg

Hi all…
Finally I can get it work, and was something I was doing wrong…
I had samba server running, After I stop that server, all worked fine with:

smbclient \\\\alfrescoA\\Alfresco -U alfresco

One more time thanks, and sorry for your time spent.

Luis

endyii

I find it useful to always use netstat, lsof, or similar command to check to see what ports are in use on the system in question. With the default config of CIFS ports 445,137,138,139 are used, or with altrenate ports in many of the wiki examples of 1445, 1137, 1138, 1139. These alternate ports then are NATed with ipchains or ipfw.

If none of these ports are in use you most likely have an issue with alfresco configuration (file-servers-custom.xml, alfresco-global.properties). If they are in use make sure the process is correct, and not nmb or other service that would conflict with your configuration.

Once you are sure your ports are up and running correctly, then use smbclient etc to test.

adnan_douglas

I test the above configuration but there is no change.
I checked Alfresco log and I found Authentication failed.
.
I edited alfresco-global.properties file and passthru-authentication-context.properties file.

Please advice
Adnan

dward

Please do not edit any files under WEB-INF. They are part of the product and this is not the correct way to configure alfresco.

Just set the following in alfresco-global.properties, obviously customizing for your setup

authentication.chain=passthru1

assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank
passthru.authentication.servers=DOMAIN\\domaincontroller.com,domaincontroller.com
passthru.authentication.defaultAdministratorUserNames=Administrator
ldap.authentication.java.naming.provider.url=ldap://domaincontroller.com:389
ldap.authentication.userNameFormat=%s@domain
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain
cifs.domain=DOMAIN

What errors are you seeing in the logs?

adnan_douglas

What do u mean in the follwoing:

passthru.authentication.domain=# Intentionally left blank I have to leave it blabk
passthru.authentication.servers=DOMAIN i have to insert my domain name\\domaincontroller.com,domaincontroller.com
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain

Please advice

dward

Copy and paste these properties without changing them

authentication.chain=passthru1

assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank
passthru.authentication.defaultAdministratorUserNames=Administrator

Set your own values for these properties and read the wiki to find out what they mean.

passthru.authentication.servers=DOMAIN\\domaincontroller.com,domaincontroller.com
ldap.authentication.java.naming.provider.url=ldap://domaincontroller.com:389
ldap.authentication.userNameFormat=%s@domain
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain
cifs.domain=DOMAIN

adnan_douglas

Can you peovide me with ur e-mail to attach alfresco.log,
This is Error sample:
15:35:29,076 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 08100015 Wrapped Exception (with status template): Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
org.alfresco.web.scripts.WebScriptException: 08100015 Wrapped Exception (with status template): Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
   at org.alfresco.web.scripts.AbstractWebScript.createStatusException(AbstractWebScript.java:613)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:165)
   at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
   at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
   at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
   at java.lang.Thread.run(Thread.java:619)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:110)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1100)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:862)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:423)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:757)
   at org.alfresco.repo.security.authentication.subsystems.SubsystemChainingAuthenticationService.getUsableAuthenticationServices(SubsystemChainingAuthenticationService.java:119)
   at org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService.authenticate(AbstractChainingAuthenticationService.java:162)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:304)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:275)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
   at $Proxy26.authenticate(Unknown Source)
   at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:72)
   at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
   at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
   … 21 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:110)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1100)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:862)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:423)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:267)
   … 54 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1175)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:427)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:267)
   … 63 more
Caused by: org.alfresco.error.AlfrescoRuntimeException: 08100014 No valid authentication servers found for passthru
   at org.alfresco.filesys.auth.PassthruServerFactory.afterPropertiesSet(PassthruServerFactory.java:355)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1203)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1172)
   … 69 more
15:35:52,405 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript - redirecting to status template error: 08100017 Wrapped Exception (with status template): Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
org.alfresco.web.scripts.WebScriptException: 08100017 Wrapped Exception (with status template): Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
   at org.alfresco.web.scripts.AbstractWebScript.createStatusException(AbstractWebScript.java:613)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:165)
   at org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:357)
   at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:407)
   at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:424)
   at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:253)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:262)
   at org.alfresco.web.scripts.AbstractRuntime.executeScript(AbstractRuntime.java:139)
   at org.alfresco.web.scripts.servlet.WebScriptServlet.service(WebScriptServlet.java:122)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:845)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
   at java.lang.Thread.run(Thread.java:619)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'localAuthenticationService' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:110)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1100)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:862)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:423)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.context.support.AbstractApplicationContext.getBean(AbstractApplicationContext.java:757)
   at org.alfresco.repo.security.authentication.subsystems.SubsystemChainingAuthenticationService.getUsableAuthenticationServices(SubsystemChainingAuthenticationService.java:119)
   at org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService.authenticate(AbstractChainingAuthenticationService.java:162)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
   at java.lang.reflect.Method.invoke(Method.java:597)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:304)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:80)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:49)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.alfresco.repo.audit.AuditComponentImpl.audit(AuditComponentImpl.java:275)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:69)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
   at $Proxy26.authenticate(Unknown Source)
   at org.alfresco.repo.web.scripts.bean.AbstractLoginBean.login(AbstractLoginBean.java:72)
   at org.alfresco.repo.web.scripts.bean.LoginPost.executeImpl(LoginPost.java:79)
   at org.alfresco.web.scripts.DeclarativeWebScript.executeImpl(DeclarativeWebScript.java:223)
   at org.alfresco.web.scripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:70)
   … 21 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:275)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:110)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1100)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:862)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:423)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:267)
   … 54 more
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1175)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:427)
   at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:249)
   at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:155)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:246)
   at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:160)
   at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:267)
   … 63 more
Caused by: org.alfresco.error.AlfrescoRuntimeException: 08100016 No valid authentication servers found for passthru
   at org.alfresco.filesys.auth.PassthruServerFactory.afterPropertiesSet(PassthruServerFactory.java:355)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.invokeInitMethods(AbstractAutowireCapableBeanFactory.java:1203)
   at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1172)
   … 69 more

adnan_douglas

I received this error while I am browsing Explorer page:
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'globalAuthenticationFilter' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\ntlm-filter-context.xml]: Cannot resolve reference to bean 'AuthenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100006 No valid authentication servers found for passthru
caused by:
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100006 No valid authentication servers found for passthru
caused by:
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100006 No valid authentication servers found for passthru
caused by:
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\passthru\passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 08100006 No valid authentication servers found for passthru
caused by:
org.alfresco.error.AlfrescoRuntimeException: 08100006 No valid authentication servers found for passthru

dward

That suggests that you've set passthru.authentication.servers incorrectly

Open a DOS command prompt and type

echo %USERDOMAIN% %LOGONSERVER%

That should give you the values to use in place of DOMAIN and domaincontroller.com

luminary_mb

I'm trying to use this method to enable single sign-on to my Alfresco server. I am using Alfresco 3.1 Enterprise edition, but I can't find the alfresco-global.properties file anywhere on my system. Does anyone know which file I would have to configure with these settings to make this work?

dward

There isn't such a file in v3.1. Go read http://wiki.alfresco.com/wiki/3.0_Configuring_NTLM

luminary_mb

Yeah I didn't think there was. I am following that article to configure my Alfresco 3.1, just havent got it fully working yet, so thought I might give this method a try. I'm reverting back to the method in the article now and trying to get info on it in the other post…

mrojas73

I would suggest an authentication chain containing the passthru subsystem for authentication and the ldap-ad subsystem for synchronization. You will get NTLM SSO and CIFS authentication against the domain server by default.

Just set the following in alfresco-global.properties

authentication.chain=passthru1assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=# Intentionally left blank
passthru.authentication.servers=DOMAIN\\domaincontroller.com,domaincontroller.com
passthru.authentication.defaultAdministratorUserNames=Administrator
ldap.authentication.java.naming.provider.url=ldap://domaincontroller.com:389
ldap.synchronization.java.naming.security.principal=alfresco@domain
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=Security Groups,ou=Alfresco,dc=domain
ldap.synchronization.userSearchBase=ou=User Accounts,ou=Alfresco,dc=domain

I would recommend taking a v3.3 nightly build or building from HEAD, as a number of improvements have been made since the v3.2 Community release.

See http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems for a guide to all these parameters and their meanings.

hi dward,

Thanks for all your posts on the LDAP issues.

I was able to get this working…for new users out there, make sure the accounts you use a ldap account for the following so that you can login as an admin.

ldap.synchronization.java.naming.security.principal=alfresco@domain
passthru.authentication.defaultAdministratorUserNames=Administrator‍‍

Thank you.

adnan_douglas

hi dward,

I am Still facing the same problem, I dont know what i have to do, Sorry I cant found and clear way for the configuration.
Please Advice.

Adnan

dward

Adnan

Your error is

No valid authentication servers found for passthru

So you have to check the value of your

passthru.authentication.servers

property. What is it set to?

adnan_douglas

I did,

I setup all the values , But i still face the problem.
Sometimes http://servername/alfresco not working .

I need ur help, If you need any more info I will provide u.
Adnan

ops:

dward

Please answer my question.

adnan_douglas

passthru.authentication.servers=testDC.test.local
I did it with diff format as below:
*Test\TestDC
*Test\\TestDC

dward

So your domain name is TEST and the domain controller is testdc.test.local ?

First, from the alfresco server, make sure you can ping the domain controller.

ping testdc.test.local

If you don't get a response back, then you probably have a dns or firewall issue to resolve.

Also check that the domain controller's firewall is open

Assuming that the ping works, the correct setting is

passthru.authentication.domain=#Leave blank
passthru.authentication.servers=TEST\\testdc.test.local,testdc.test.local

There are plent of examples of this on the Wiki and the forums.

adnan_douglas

authentication.chain=passthru1

assthru,ldap1:ldap-ad
ldap.authentication.active=false
passthru.authentication.domain=
passthru.authentication.servers=test\\TestDdc.test.local,TestDdc.test.local
passthru.authentication.defaultAdministratorUserNames=administrator,admin
ldap.authentication.java.naming.provider.url=ldap://testdc.test.local:389
ldap.authentication.userNameFormat=%s@test.local
ldap.synchronization.java.naming.security.principal=alfresco@test.local
ldap.synchronization.java.naming.security.credentials=secret
ldap.synchronization.groupSearchBase=ou=users,ou=sandbox org,dc=test,dc=local
ldap.synchronization.userSearchBase=ou=users,ou=sandbox org,dc=test,dc=local
cifs.domain=test.local

This is my configuration.