nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

SSO with Kerberos/ Jaas doesn´t work

alfone

Hi,

my problem seems so easy, but i go crazy without a solution.

My Situation:
i set up alfresco 3.2 community edition on a linux-machine
and i want to authenticate against Kerberos…

Without Kerberos everything works fine. i see the cifsdrive can login over my webbrowser…everything is ok :!:

when i start with kerberos most things seem to be right.
the cifs server get the ticket from KDC, the same for the httpserver.
Now, when i try sso with my browser FF3.5/ IE i only can see a white space and the server redirect to
- http://192.168.20.190:8080/alfresco/faces/jsp/dashboards/container.jsp -

My problem:

where i have to enable, that the users are able to authenticate against Kerberos/ Jaas.
or where are the user informationen stored?
or what is to do??

thanks for you help!

Find more posts tagged with

Comments

dward

I should add that a fix was made after the v3.2 community release to make it work, so you will need a more recent nightly build.

alfone

This suggests that authentication has worked and you are being redirected to the main Alfresco Explorer page.
So is the screen completely blank? Do you see anything in alfresco.log?
All you have to do is set
authentication.chain=kb:kerberos
then do the remaining server side configuration as described here
——————–

Yes. Authentication works…

Yes. The screen is completly blank!

Alfresco.log for HTTP service…
DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.20.163 (192.168.20.163:2564)
DEBUG [app.servlet.KerberosAuthenticationFilter] Client sent an NTLMSSP security blob

Alfresco.log for cifs:
12:32:42,985 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup SPNEGO, MID=8, UID=0, PID=65279
12:32:43,000 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
12:32:43,091 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup SPNEGO, MID=16, UID=0, PID=65279
12:32:43,101 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
12:32:43,130 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup SPNEGO, MID=24, UID=0, PID=65279
12:32:43,130 DEBUG [org.alfresco.smb.protocol.auth] Using Write transaction
…etc…

and something else…when i try to connect from another linuxmachine with :arrow: smbclient -d 2 -k //192.168.20.190/alfresco
the alfresco log say:
14:18:35,031 DEBUG [smb.protocol.auth] No SPNEGO response, Kerberos logon failed
14:18:35,031 ERROR [smb.protocol.auth] Kerberos logon error
14:18:35,031 ERROR [smb.protocol.auth] org.alfresco.jlan.smb.server.SMBSrvException: Access denied
14:18:38,271 DEBUG [smb.protocol.auth] NT Session setup SPNEGO, MID=2, UID=0, PID=11754
14:18:38,271 DEBUG [smb.protocol.auth] Using Write transaction
14:18:38,271 DEBUG [smb.protocol.auth] Kerberos AP-REQ - [AP-REQ:APOptions=,Ticket=Len=253,Authenticator=EncType=1,Kvno=-1,Len=144]
GSSException: Failure unspecified at GSS-API level

any ideas why its not work?

jserrano

Hi,
I have the same problem with passthru authentication.
In another post there is reference to:

https://issues.alfresco.com/jira/browse/ETHREEOH-2498

It may be a bug in the version of Alfresco.
I hope you will be helpful

prajithlal

Hi,

Is there any update on this issue?
We are facing the same problem with 3.2r kerberos AD

when I try sso with my browser FF3.5/ IE it gives the blank screen
Here is the log.

09:20:57,707  DEBUG [app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 10.120.1.12 (10.120.1.12:46634)‍

and nothing is happening.

will appreciate any help.

thanks

shineg

Hi,
We are facing the same issue with alfresco community edition 3.3g. Is it fixed in alfresco EE? We are evaluating alfresco for production deployment.
Regards
Shine