Alfresco Explorer SSO is not working

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

carbotex

I'm not sure what I'm missing, but I can't get SSO to work. I'm using Alfresco Community Edition 3.2r2 bundled with Tomcat.

The following works:

1. AD users are imported without an issue

2. I can login to Alfresco Explorer and Alfresco Share with AD credential without a problem

3. Typing //192.168.1.100 in windows explorer will take me into Alfresco Repository, I can see Alfresco folders, without prompting me to login

Here are the issues I'm dealing with:

1. Using Internet Explorer with URL http://192.168.1.100:8080/alfresco will prompt me for basic authentication login dialog. How do I get SSO to work in this case? What did I miss?

2. I followed the instructions to enable SSO in Share http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Alfresco_Share_SSO_using_NTLM but I'm getting NPE when trying to access http://192.168.1.100:8080/share Then I found a patch from here https://issues.alfresco.com/jira/browse/ALFCOM-3801 and followed the instruction to unzip the patch with the folder structure into $TOMCAT_HOME$/shared/classes, restarted Alfresco, but I'm still getting the same NPE error. Share does not come up anymore.

I spent a lot of time in the forum to see if anyone else has the same problem with me, but with no success. I really appreciate any help or pointer that I can get.



Here is my configuration

alfresco-global.properties

  authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad
‍‍‍

passthru/passthru1/ntlm-filter.properties

  ntlm.authentication.sso.enabled = true
  ntlm.authentication.mapUnknownUserToGuest = false
‍‍‍‍

passthru/passthru1/passthru-authentication-context.properties

  passthru.authentication.useLocalServer=false
  passthru.authentication.domain= 
  passthru.authentication.servers=vm008

  passthru.authentication.guestAccess=false
  passthru.authentication.authenticateCIFS=true
  passthru.authentication.authenticateFTP=true
‍‍‍‍‍‍‍‍‍

ldap-ad/ldap-ad1/ldap-ad-authentication.properties

  ldap.authentication.active = false
  ldap.synchronization.active = true
‍‍‍‍

carbotex

I made progress, I added the following to get SSO working on Alfresco Explorer:

Firefox:
type about:config in address bar
add [Alfresco Server IP Address] to network.automatic-ntlm-auth.trusted-uris;http://192.168.1.100:8080/alfresco

IE7:
- Click on Internet Options
- Security Tab
- Highlight "Local Intranet" icon.
- Click "Sites" button
- Uncheck Automatically detect intranet network, and make sure the last 3 checkboxes are checked.
- Click on "Advance" button
- Add [Alfresco Server IP Address] to the list. (http://192.168.1.100)

Unfortunately this is not documented in the Wiki which raised some questions:
Is this normal that you have to do extra configuration on both IE7 and Firefox to get NTLM pass-thru authentication to work? I can understand Firefox but IE?

If you have successfully configured SSO with NTLM pass-thru without these extra configuration, please let me know.


passthru/passthru1/passthru-authentication-context.properties

  passthru.authentication.useLocalServer=false
  passthru.authentication.domain= 
  passthru.authentication.servers=DOMAIN\\vm008,vm008                <======== Added Domain for IE7

  passthru.authentication.guestAccess=false
  passthru.authentication.authenticateCIFS=true
  passthru.authentication.authenticateFTP=true

‍‍‍‍‍‍‍‍‍‍