nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

How to login CIFS from a different domain

wahu

I have no problem to make CIFS work with passthru authentication for one domain. But we got problem in two trusted domains.

Since we can set two AD servers in ntlm-authentication-context.xml, it works well in web clients for two domains.

However, we can only set one server in file-servers-custom.xml for passthru authentication. if i want to access CIFS in another trusted domain, I will always have the Access denied error.

Then I try "net view \\servername_a" command in DOS and get the following error.

System error 5 - Access is denied

Any suggestion for it?

Find more posts tagged with

Comments

gary_spencer

Hi,

I'm not sure why it's not working for CIFS when the web client is working.

Could you send me a debug log with the follownig enabled in the log4j.properties file :-

log4j.logger.org.alfresco.smb.protocol.auth=debug

Is there anything logged on the AD server for the logon failures ?.

Cheers

Gary

wahu

Well, I fix this problem by modifing the code in "authenticateUser" method of org.alfresco.filesys.server.auth.passthru.PassthruAuthenticator.class.

We need to pass in the client domain since that domain is different from the server. Even if both of them are trusted each other.

Here is what I modified.

From :

authSess.doSessionSetup(client.getUserName(), client.getANSIPassword(), client.getPassword());
‍‍‍

To :

authSess.doSessionSetup(client.getDomain(), client.getUserName(), null, client.getANSIPassword(), client.getPassword());
‍‍‍