nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Kerberos and passthru authentication chan

ivan_plestina

Hello,

is it possible to have the kerberos SSO and passthru SSO chained (as fallback for non-Kerberos)? If SSO is not available for both is it possible to at least to have Kerberos SSO and fallback to passthru login so that we can support non-LAN users (or is LDAP better choice here for fallback?)?

Regards,
Ivan

Find more posts tagged with

Comments

litie

Hi there, any update about that? i've got the same issue…

ashex

I don't believe you can enable SSO on multiple subsystems for the same reason you can't enable CIFS on more then one subsystem, however you can point users to the login form if SSO is not working. Take a look at this section of the Authentication Subsystems page:

http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Configuring_the_Authentication_Chain

litie

Are you sure is it possible? For example, in that case:

authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap

if kerberos failed ( pc out of domain) i'm not able to logon to the share because i cannot see any login form.

I don't understand…

please can you help me?

regards

ashex

At the end of Example 1 in the wiki page I linked it explains a bit about using the login page directly, this one:

http://localhost:8080/alfresco/faces/jsp/login.jsp

litie

Ok, but it's true for HTTP connection. What about CIFS?

ashex

Take a look at the wiki page I linked.