Bug Kerberos or Bug congiguration?

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

paulweb

os:centos52
alfresco last version
authentication with kerberos(automatic)
we have lead the following test
i have  account in MY-DOMAIN.RU and have account in NKH.MY-DOMAIN.RU (p.web@MY-DOMAIN.RU and p.web@NKH.MY-DOMAIN.RU).
when i try to enter in alfresco in MY-DOMAIN.RU: alfresco create user p.web and folder p.web. when i   enter in my folder(CIFS) over windows explorer, alfresco create user p.web@ MY-DOMAIN.RU and folder  p.web@ MY-DOMAIN.RU, but open folder p.web.
then we for testing change password in my account in   NKH.MY-DOMAIN.RU and try to enter in alfresco in NKH.MY-DOMAIN.RU, alfresco open folder p.web.
  when i   enter in my folder(CIFS) over windows explorer in NKH.MY-DOMAIN.RU, alfresco create user p.web@ NKH.MY-DOMAIN.RU and folder  p.web@ NKH.MY-DOMAIN.RU, but open folder p.web.

conclusion:

if i create user in NKH.MY-DOMAIN.RU with account name as well as in MY-DOMAIN.RU, then i have got access by  folder user (who have account in MY-DOMAIN.RU)

paulweb

I have rewritten BaseKerberosAuthenticationFilter.java and all earn normall, but
i have understated because you cut userNames in browser following anchor file://…/p.web@my-domain.ru not open, but in windows explorer open normall
look this code in BaseKerberosAuthenticationFilter.java line 547

SessionUser user = createUserEnvironment( httpSess, krbDetails.getUserName());
‍‍‍

KrbDetails.java

 public final String getUserName() {

    String userName = m_krbSource;

    if (m_krbSource != null) {
      int pos = m_krbSource.indexOf('@');
      if (pos != -1) {
        userName = m_krbSource.substring(0, pos);
      }
    }

    return userName;
  } 
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

 
and alfresco create user p.web
if change in BaseKerberosAuthenticationFilter.java

SessionUser user = createUserEnvironment( httpSess, krbDetails.getSourceName());
‍‍‍

alfresco create user and folder p.web@my-domain.ru
Also there are no collisions with the affiliated domain because when i enter in alfresco in NKH.MY-DOMAIN.RU alfresco create user and folder p.web@NKH.MY-DOMAIN.RU

😎