NTLM configuration problem with WCM2.0preview

Hi
I have problems with NTLM and CIFS authentication on Alfresco 2.0 preview too. They are detailed at http://forums.alfresco.com/viewtopic.php?t=5040, but haven't news from Alfresco engineers for several days.
What are your ntlm-authentication-context.xml, ldap-authentication-context.xml, authentication-services-context.xml and file-servers.xml configuration files?

Thanks

hazzanz

I also get the Null Pointer exception EXCEPT when debug is enabled. In which case it works just fine!

That should make it fun to debug……

lgr

Yes, i've browsed all posts related to ntlm and cifs, including yours.
My configuration files are the default one, with a few modifications :

In /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/web.xml, comment of:

<filter-class>org.alfresco.web.app.servlet.AuthenticationFilter</filter-class>‍

In the same file, uncomment of:

<filter-class>org.alfresco.web.app.servlet.NTLMAuthenticationFilter</filter-class>
‍‍

   <filter-mapping>
        <filter-name>Authentication Filter</filter-name>
        <url-pattern>/navigate/*</url-pattern>
     </filter-mapping>‍‍‍‍

Rename of /opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml.sample
in
/opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml

And replace in /opt/alfresco/tomcat/shared/classes/alfresco/extension/ntlm-authentication-context.xml
of:

        <property name="useLocalServer">
            <value>true</value>
        </property>‍‍‍

        <property name="servers">
            <value>192.168.2.2</value>
        </property>‍‍‍

I've done some other changes in other files, that shouldn't have any impact on ntlm authentication (like defining a windows domain in CIFS or adding administrative rights to a specific user).

But none of these modifications does make Alfresco bug.

An error is generated only by adding the passthru authenticator (as specified in my previous post).

If i remove this passthru definition, Alfresco behaves well.

Laurent.

Hello again

First of all, I'm not sure if you use LDAP sync for users. Please tell me.

The difference between your web.xml and mine is that I uncommented all the references to NTLM and commented the previous deffinitions. Your way of modifying the web.xml now only gives me the second error:

org.alfresco.error.AlfrescoRuntimeException: Not implemented
 at org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao.getMD4HashedPassword(NullMutableAuthenticationDao.java:293)
 at org.alfresco.repo.security.authentication.AuthenticationComponentImpl.getMD4HashedPassword(AuthenticationComponentImpl.java:99)
 at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:658)
 at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:392)
 at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
 at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
 at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
 at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
 at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
 at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
 at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
 at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
 at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
 at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
 at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
 at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
 at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
 at java.lang.Thread.run(Thread.java:595)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Anyway, could you send me your configuration files on the extension configuration? (I supposed you didn't modifyed the original in the alfresco deplay) and I'll send you mine If you want to see the differences. I only configured in the extension directory:

custom-file-servers.xml
custom-ntlm-authentication-context.xml
custom-authentication-services-context.xml
custom-ldap-authentication-context.xml‍‍‍‍

Thanks

lgr

No, i only use ntlm authentication.

About config files, here is my file-servers-custom.xml :

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>
   
   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
       <authenticator type="passthru">
          <Server>192.168.2.2</Server>
       </authenticator>
   </config>

   <config evaluator="string-compare" condition="Filesystems" replace="true">
      <filesystems>

         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

            <!– Add a URL file to each folder that links back to the web client –>
            <urlFile>
               <filename>__Alfresco.url</filename>
               <webpath>http://${localname}/alfresco/</webpath>
            </urlFile>

            <!– Mark locked files as offline –>
            <offlineFiles/>

            <!– Desktop actions –>

            <desktopActions>
               <global>
                  <path>alfresco/desktop/Alfresco.exe</path>
                  <webpath>http://${localname}/alfresco/</webpath>
               </global>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.CheckInOutDesktopAction</class>
                  <name>CheckInOut</name>
                  <filename>__CheckInOut.exe</filename>
               </action>
               <action>
                  <class>org.alfresco.filesys.smb.server.repo.desk.JavaScriptDesktopAction</class>
                  <name>JavaScriptURL</name>
                  <filename>__ShowDetails.exe</filename>
                  <script>alfresco/desktop/showDetails.js</script>
                  <attributes>anyFiles</attributes>
                  <preprocess>copyToTarget</preprocess>
               </action>

            </desktopActions>

<!–
            <accessControl default="Write">
               <user name="admin" access="Write"/>
               <address subnet="90.1.0.0" mask="255.255.0.0" access="Write"/>
            </accessControl>
–>
         </filesystem>
      </filesystems>
   </config>

</alfresco-config>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

My ntlm-authentication-context.xml :

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>
    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        <property name="servers">
            <value>192.168.2.2</value>
        </property>
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="guestAccess">
            <value>false</value>
        </property>
    </bean>
    
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The two other don't exist in the shared folder, but are located in the web-inf/classes folder where they are unchanged since the first installation.

In fact, this is a rather simple installation, and i've used the same procedure since v1.0 at least. It did always work, except for this version. And my knowledge about java and beans is too tiny to diagnose anything. So, i'm embarrassed, and don't know what to think about that situation.

Anyway, i greatly thank you for your help,

Laurent.

Hi Laurent

Thanks for your quick reply.

I have almost the same configuration the only difference is that I use ldap sync of users (but if I disable got the same error) and the custom-file-server.xml:

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>

   <config evaluator="string-compare" condition="CIFS Server" replace="true">
      <host name="${localname}_A"/>
      <comment>Alfresco CIFS Server</comment>

      <!– Set to the broadcast mask for the subnet –>
      <broadcast>255.255.255.255</broadcast>

      <!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –>
      <tcpipSMB platforms="linux,solaris,macosx"/>
      <netBIOSSMB platforms="linux,solaris,macosx"/>
      <hostAnnounce interval="5"/>

      <!– Use Win32 NetBIOS interface on Windows –>
      <Win32NetBIOS/>
      <Win32Announce interval="5"/>

      <WINS>
         <primary>10.226.128.46</primary>
      </WINS>

      <sessionDebug flags="Negotiate,Socket"/>
   </config>
   <config evaluator="string-compare" condition="Filesystems" replace="true">
      <filesystems>

         <filesystem name="Alfresco">
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>

            <!– Add a URL file to each folder that links back to the web client –>
            <urlFile>
               <filename>__Alfresco.url</filename>
               <webpath>http://${localname}:8080/alfresco/</webpath>
            </urlFile>

            <!– Mark locked files as offline –>
            <offlineFiles/>
         </filesystem>
      </filesystems>
   </config>

   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>MYDOMAIN</Domain>
        </authenticator>
   </config>
</alfresco-config>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As you can see the only difference is that I include the configuration for CIFS Server at the begining.

It's quite embarrasing that the configuration that works on 1.4 doesn't on 2.0preview. Maybe this will be solved on 2.0 final. Maybe Alfresco engineers could tell us something about it, even just "We are working on it".

Anyway Laurent, it's a weird thing that we got different erros with almost the same configuration.

Hugo

Thanks, again

Hi

We removed some transactional wrappers that were not required.
I think this is a Spring config issue from this.

The authenticationComponentImpl bean is now deprecated; you should now be replacing the definition for the bean authenticationComponent. It looks like the alias for this is not doing what we expected in this case and finding the default bean from the alias.

I will be checking through this stuff again.

Regards

Andy

Hi Andy

Good news have news from you.

If I understand what you say I have to change authenticationComponent where is authenticationComponentImpl. I made those changes and I got another error:

17:13:51,406 DEBUG [web.app.ContextListener] HTTP session created: 21192A55E2C1EFD9B5D7830B2A2F508A
17:13:51,453 DEBUG [app.servlet.NTLMAuthenticationFilter] New NTLM auth request from 10.226.138.237 (10.226.138.237:55652)
17:13:58,565 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type1 [Type1:0x205,Domain:<NotSet>,Wks:<NotSet>]
17:13:58,566 DEBUG [smb.protocol.auth] Open authenticate session to [sfha00n2.ceh.junta-andalucia.es:10.226.128.113:Online:0,0]
17:13:58,567 DEBUG [smb.protocol.auth] New auth session from hsantander.ceh.junta-andalucia.es_2 to \\10.226.128.113\IPC$\
17:13:58,571 DEBUG [smb.protocol.auth] Trying address 10.226.128.113
17:13:58,608 DEBUG [smb.protocol.auth] Connected to address 10.226.128.113
17:13:58,608 DEBUG [smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
17:13:58,612 DEBUG [smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
17:13:58,689 DEBUG [app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x201,Target:HSANTANDER_A,Ch:00312106fb66aef3]
17:13:58,752 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:<Null>,NTLM:c3b3be67683a053ca50559e5d839e43915acc6b94e42ae50,Dom:HSANTANDER_A,User:hugo,Wks:]
17:13:58,776 ERROR [[localhost].[/alfresco].[Faces Servlet]] Servlet.service() para servlet Faces Servlet lanzÃ³ excepciÃ³n
org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.registerSynchronizations(AlfrescoTransactionSupport.java:363)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.getSynchronization(AlfrescoTransactionSupport.java:348)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.bindDaoService(AlfrescoTransactionSupport.java:202)
        at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:58)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy3.getNode(Unknown Source)
        at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:152)
        at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:213)
        at $Proxy4.exists(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
        at org.alfresco.repo.node.MLPropertyInterceptor.invoke(MLPropertyInterceptor.java:111)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy5.exists(Unknown Source)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPersonOrNull(PersonServiceImpl.java:194)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:147)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:832)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:513)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:719)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:392)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:595)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

The configuration files I have changed with references to authenticationComponentImpl are:

custom-authority-services-context.xml
custom-ldap-authentication-context.xml
custom-ntlm-authentication-context.xml
‍‍‍‍

I read the forum and discover a topic with the same error http://forums.alfresco.com/viewtopic.php?t=4970. You said it's a bug http://issues.alfresco.com/browse/AR-1183, maybe this bug not only affect FTP and affects CIFS and NTLM authentication. Could be the same bug masked with the alias problem?

Thanks for your reply andy

Hugo

hazzanz

As already mentioned I have a working config with LDAP for the web client and NTLM for CIFS on 2.0preview provided debug is enabled for cifs auth otherwise I see similar errors to you guys. ie

log4j.logger.org.alfresco.smb.protocol.auth=debug

in log4j.properties. It would be interesting if you could give it a try…

Cheers

Hello again:
There is a wiki reference to this problem: http://wiki.alfresco.com/wiki/Upgrading_to_2.0
I tried to download the sample configuration files but I don't know where can I find it? The prevew available has the same date (19 January 2007) so it's supposed to have the same sample configuration files.
Maybe the new sample files could help me to solve my problem, but where can I find it?

Thanks

Hi

1) re-name any bean called authenticationComponentImpl to authenticationComponent.

2) Auto creation of people when you log in via CIFS/FTP and WebDav is not working at the moment - this is the issue in the stack trace.

See http://issues.alfresco.com/browse/AR-1245

When the user does exist - via LDAP import or from log in via the client - all should be well.

Regards

Andy

Hi Andy
I already make this changes and my users are created via ldap sync, but I got the error I posted a few post before.

org.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required‍

It's not working even if I make the changes you comment in the files at the extension directory and in the webapp/alfresco/WEB-INF/classes/alfresco/*

What else can I do or configure?

Thanks

Hi

Wait for the user to be imported.

Set auto creation of people false (personServiceImpl bean in authentication-services-context.xml). Then you will have to wait!

Regards

Andy

Hi Andy:
Thanks for your post.
Sorry, but I already have the automatic user creation set to false from the beginning and wait until the user import before trying the log in.
Here is my definition of personService bean in the custom-authentication-services-context.xml:

    <bean id="personService" class="org.alfresco.repo.security.person.PersonServiceImpl">
                <property name="nodeService">
                    <ref bean="nodeService" />
                </property>
                <property name="searchService">
                    <ref bean="searchService" />
                </property>
                <property name="permissionServiceSPI">
                        <ref bean="permissionServiceImpl" />
                </property>
        <property name="authorityService">
           <ref bean="authorityService" />
        </property>
                <property name="namespacePrefixResolver">
                        <ref bean="namespaceService" />
                </property>
        <!– Configurable properties.                                 –>
        <!–                                                          –>
        <!– TODO:                                                    –>
        <!– Add support for creating real home spaces adn setting    –>
        <!– permissions on the hame space and people created.        –>
        <!–                                                          –>
        <!– The store in which people are persisted.                 –>
        <property name="storeUrl">
           <value>${spaces.store}</value>
        </property>
        <!– Some authentication mechanisms may need to create people –>
        <!– in the repository on demand. This enables that feature.  –>
        <!– If dsiabled an error will be generated for missing       –>
        <!– people. If enabled then a person will be created and     –>
        <!– persisted.                                               –>
        <!– Valid values are                                         –>
        <!–     ${server.transaction.allow-writes}                   –>
        <!–     false                                                –>
        <property name="createMissingPeople">
                <value>false</value>
        </property>
                <property name="userNamesAreCaseSensitive">
          <value>${user.name.caseSensitive}</value>
        </property>
        <!– New properties after 1.4.0 to deal with duplicate user ids when found –>
        <property name="processDuplicates">
            <value>true</value>
        </property>
        <!– one of:  LEAVE, SPLIT, DELETE –>
        <property name="duplicateMode">
            <value>SPLIT</value>
        </property>
        <property name="lastIsBest">
            <value>true</value>
        </property>
        <property name="includeAutoCreated">
            <value>false</value>
        </property>
    </bean>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I think the definition of this bean is correct, even when I have the problem with the users imported, I never configured the automatic user creation because I want all the Alfresco users been imported.
Anyway, I delete the entire repository and database and start Alfresco again. Same results and NTLM authentication not working. Well, thats not a surprise to me.

Thanks

Hi

Apologies, that is indeed a bug, which is fixed in the 2.0 release.
A bit of tunnel vision there. See http://issues.alfresco.com/browse/AR-1263

Regards

Andy

Hi Andy.

Thanks for your quick reply. I suppossed this could be a bug. I'm waiting impatiently for the 2.0 release (when?) and see the NTLM authentication problem solved (I really hope this!).

Thanks

Hi

The community 2.0 final release has been available for a day or so.

Andy

Hi Andy

I download and installled the new Alfresco 2.0 release, wondering my problems dissapear with this release.
But things goes wrong from the begining. The first errors are abot CIFS. Where the previous versions haven't problems, new version prints:

14:11:14,308 ERROR [smb.protocol.auth] No valid CIFS authentication combination available
14:11:14,308 ERROR [smb.protocol.auth] Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords
14:11:14,314 ERROR [alfresco.smb.protocol] CIFS server configuration error, Invalid CIFS authenticator configuration
org.alfresco.error.AlfrescoRuntimeException: Invalid CIFS authenticator configuration
        at org.alfresco.filesys.server.auth.EnterpriseCifsAuthenticator.initialize(EnterpriseCifsAuthenticator.java:348)
        at org.alfresco.filesys.server.config.ServerConfiguration.setAuthenticator(ServerConfiguration.java:3310)
        at org.alfresco.filesys.server.config.ServerConfiguration.processSecurityConfig(ServerConfiguration.java:2310)
        at org.alfresco.filesys.server.config.ServerConfiguration.init(ServerConfiguration.java:634)
        at org.alfresco.filesys.server.config.ServerConfiguration.onBootstrap(ServerConfiguration.java:4007)
        at org.alfresco.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:62)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:45)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:225)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:323)
        at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:134)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:184)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3763)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4211)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I used the same custom-file-servers.xml than previous version.

But this is only the beginning. When uncommented the NTLM configuration lines at web.xml, this is the error I got:

14:22:58,772 ERROR [[Catalina].[localhost].[/alfresco]] ExcepciÃ³n arrancando filtro WebDAV Authentication Filter
javax.servlet.ServletException: Required authentication mode not available
        at org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter.init(NTLMAuthenticationFilter.java:173)
        at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:223)
        at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:304)
        at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:77)
        at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3634)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4217)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
14:22:58,785 ERROR [[Catalina].[localhost].[/alfresco]] ExcepciÃ³n arrancando filtro Authentication Filter
javax.servlet.ServletException: Required authentication mode not available
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.init(NTLMAuthenticationFilter.java:188)
        at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:223)
        at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:304)
        at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:77)
        at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3634)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4217)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
26-feb-2007 14:22:58 org.apache.catalina.core.StandardContext start
GRAVE: Error filterStart
26-feb-2007 14:22:58 org.apache.catalina.core.StandardContext start
GRAVE: FallÃ³ en arranque del Contexto [/alfresco] debido a errores previos
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This is a fatal error, so the application didn't start.

Where is the problem now?

Thanks

Hi

The clue is:

Either enable Kerberos support or use an authentication component that supports MD4 hashed passwords‍

You have got enterprise configuration configured for CIFS. As the error says, this only supports Kerberos and MD4 based authentication. I assume you want to use the NTLM authentication component. In custom-file-servers.xml, or similar, you will ned to specify "alfresco" instead of "enterprise". This version works with NTLM. Alternatively, you can set up Kerberos as described on the wiki.

Regards

Andy

I've got exactly the same error, I've enabled successfully LDAP in Alfresco 1.4 and it doesn't work anymore in 2.0 preview and final.
I've followed the instructions in the wiki to enable NTLM authentication :
- rename and edit ldap-authentication-context.xml.sample to ldap-authentication-context.xml
- rename ntlm-authentication-context.xml.sample to tlm-authentication-context.xml
- comment and uncomment lines relevant to NTLM according to the wiki page
after adding these lines I still got the same error :

<config evaluator="string-compare" condition="Filesystem Security">
  <authenticator type="alfresco">
  </authenticator>
</config>‍‍‍‍

Hi Andy

Well, I have this configuration in custom-file-servers.xml:

   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>TTTTHACIENDA_DO</Domain>
        </authenticator>
   </config>
‍‍‍‍‍‍‍

which it's supposed to replace the original configuration and hasn't any reference to Enterprise Authenticator, so if you are right, why still use the entrerprise? Why CIFS configuration that works on the preview and before on 1.4 doesn't work on 2.0?

When I change the file file-servers.xml at WEB-INF/classes/alfresco/ with alfresco instead of enterprise I got this errors:

16:50:35,212 ERROR [alfresco.smb.protocol] Failed to get local domain/workgroup name, using default of WORKGROUP
16:50:35,212 ERROR [alfresco.smb.protocol] (This may be due to firewall settings or incorrect <broadcast> setting)
16:50:35,223 ERROR [alfresco.smb.protocol] CIFS server configuration error, Wrong authentication setup for alfresco authenticator
org.alfresco.error.AlfrescoRuntimeException: Wrong authentication setup for alfresco authenticator
        at org.alfresco.filesys.server.config.ServerConfiguration.processSecurityConfig(ServerConfiguration.java:2282)
        at org.alfresco.filesys.server.config.ServerConfiguration.init(ServerConfiguration.java:634)
        at org.alfresco.filesys.server.config.ServerConfiguration.onBootstrap(ServerConfiguration.java:4007)
        at org.alfresco.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:62)
        at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:45)
        at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:225)
        at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:323)
        at org.springframework.web.context.support.AbstractRefreshableWebApplicationContext.refresh(AbstractRefreshableWebApplicationContext.java:134)
        at org.springframework.web.context.ContextLoader.createWebApplicationContext(ContextLoader.java:246)
        at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:184)
        at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:49)
        at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:3763)
        at org.apache.catalina.core.StandardContext.start(StandardContext.java:4211)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:809)
        at org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:698)
        at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:472)
        at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
        at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
        at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
        at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
        at org.apache.catalina.core.StandardService.start(StandardService.java:450)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

And, what about the other errors? They apeared when I uncommented the NTLM configuration on web.xml, which references to Enterprise version. What is the configuration for the community? I didn't see any changes in the wiki about NTLM configuration and this configuration in the wiki it's for the 1.4 version.

I'm getting nuts with alll those undocumented changes.

All the problems with the bug with NTLM it's supposed to be solved with version 1.4.1E. I'm thinking about passing to the Enterprise license but I'm afraid I will get other errors like it's happening with the Community version.

So, Andy, could you give me more detailed help, please?

Thanks

I also get the same errors with a passthru configuration, which used to work in 1.4 but doesn't work either in 2.0.
Would the fact that I set password to simple change anything in ldap-authentication-context.xml, supposing that we have to use MD4 :

<entry key="java.naming.security.authentication">
                    <!–value>DIGEST-MD5</value–>
               <value>simple</value>
                </entry>‍‍‍‍

simple worked for me in 1.4 but not DIGEST-MD5.

Hi again

Well I'm not alone with this problem.

Now I have the CIFS correctly working modifying WEB-INF/classes/alfresco/file-servers.xml. I change :

   <config evaluator="string-compare" condition="Filesystem Security">
        <authenticator type="enterprise">
        </authenticator>
‍‍‍‍

and use this definition:

   <config evaluator="string-compare" condition="Filesystem Security">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>TTTTHACIENDA_DO</Domain>
        </authenticator>
‍‍‍‍‍‍

I don't know why doesn't work when I use the following on the custom-file-servers.xml in the extension directory:

   <config evaluator="string-compare" condition="Filesystem Security" replace="true">
        <authenticator type="passthru">
                <Server>10.226.128.113</Server>
                <Domain>TTTTHACIENDA_DO</Domain>
        </authenticator>
   </config>‍‍‍‍‍‍

Now CIFS seems to work. I use a win2000 logged in the domain and access to the Alfresco CIFS.

The problem now is getting the web client login to work for a NTLM passthru.

Modify the web.xml doesn't work as it's comment in this file. What are the modifications to web.xml for getting NTLM working on the web client?

Thanks

With the same configuration as you that is to say :
- ntlm-authentication-context.xml not modified
- web.xml not modified (as uncommenting lines related to NTLM makes tomcat crash)
- ldap-authentication-context.xml : same configuration that I used in Alfresco 1.4 and that worked
- file-servers.xml : added these lines

<authenticator type="passthru">
   <Server>192.168.0.102,192.168.0.1,adsrv.alfresco.org</Server>
  </authenticator>‍‍‍

Tomcat doesn't crash anymore but I can't authenticate anymore in the web interface, neither as admin/admin nor any windows login (imported from ldap, which worked in 1.4), and CIFS doesn't work either, every time I try to access it via the LAN, path is not found.
Here is my log :

11:50:32,731 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_10 to \\192.168.0.1\IPC$\
11:50:35,700 DEBUG [org.alfresco.smb.protocol.auth] Passthru offline check failed for 192.168.0.1
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:43,686 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:43,717 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:43,717 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:43,717 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:43,717 DEBUG [org.alfresco.smb.protocol] Negotiated SMB dialect - NT LM 0.12
11:50:43,717 DEBUG [org.alfresco.smb.protocol] Assigned protocol handler - org.alfresco.filesys.smb.server.NTProtocolHandler
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] Open authenticate session to [dev01.gva.ch.net:192.168.0.102:Online:7,Tue Feb 27 11:45:46 CET 2007]
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_11 to \\192.168.0.102\IPC$\
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] Trying address 192.168.0.102
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] Connected to address 192.168.0.102
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
11:50:43,717 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=9, auth ctx=[NTLM,Challenge=56af0a7ffdec9dac]
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup from user=, password=none, ANSIpwd=00, domain=, os=Windows 2002 Service Pack 2 2600, VC=0, maxBuf=61440, maxMpx=4, authCtx=[NTLM,Challenge=56af0a7ffdec9dac]
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth]   MID=8, UID=0, PID=65279
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Null CIFS logon allowed
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] User  logged on  (type Null)
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=0 for VC=[0:0,[:null,,Windows 2002 Service Pack 2 2600],Tree=0,Searches=0]
11:50:44,670 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:44,670 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:44,670 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:44,670 DEBUG [org.alfresco.smb.protocol] Negotiated SMB dialect - NT LM 0.12
11:50:44,670 DEBUG [org.alfresco.smb.protocol] Assigned protocol handler - org.alfresco.filesys.smb.server.NTProtocolHandler
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Open authenticate session to [dev01.gva.ch.net:192.168.0.102:Online:8,Tue Feb 27 11:50:43 CET 2007]
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_12 to \\192.168.0.102\IPC$\
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Trying address 192.168.0.102
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Connected to address 192.168.0.102
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
11:50:44,670 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=10, auth ctx=[NTLM,Challenge=850935b3df15f44b]
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Negotiated SMB dialect - NT LM 0.12
11:50:47,077 DEBUG [org.alfresco.smb.protocol] Assigned protocol handler - org.alfresco.filesys.smb.server.NTProtocolHandler
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] Open authenticate session to [dev01.gva.ch.net:192.168.0.102:Online:9,Tue Feb 27 11:50:44 CET 2007]
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_13 to \\192.168.0.102\IPC$\
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] Trying address 192.168.0.102
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] Connected to address 192.168.0.102
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
11:50:47,077 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=11, auth ctx=[NTLM,Challenge=4e8a2991865734c7]
11:50:47,093 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:47,093 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:47,093 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Negotiated SMB dialect - NT LM 0.12
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Assigned protocol handler - org.alfresco.filesys.smb.server.NTProtocolHandler
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] Open authenticate session to [dev01.gva.ch.net:192.168.0.102:Online:10,Tue Feb 27 11:50:47 CET 2007]
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_14 to \\192.168.0.102\IPC$\
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] Trying address 192.168.0.102
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] Connected to address 192.168.0.102
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
11:50:48,171 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=12, auth ctx=[NTLM,Challenge=b03f35239772935a]
11:50:48,171 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Negotiated SMB dialect - NT LM 0.12
11:50:48,186 DEBUG [org.alfresco.smb.protocol] Assigned protocol handler - org.alfresco.filesys.smb.server.NTProtocolHandler
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] Open authenticate session to [dev01.gva.ch.net:192.168.0.102:Online:11,Tue Feb 27 11:50:48 CET 2007]
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] New auth session from DEV04_15 to \\192.168.0.102\IPC$\
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] Trying address 192.168.0.102
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] Connected to address 192.168.0.102
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] Connected session, protocol : TCP/IP NetBIOS
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] SessionFactory: Negotiated SMB dialect NT LM 0.12
11:50:48,186 DEBUG [org.alfresco.smb.protocol.auth] Passthru sessId=13, auth ctx=[NTLM,Challenge=599eb51b3b3c4c07]
11:50:49,374 DEBUG [org.alfresco.smb.protocol.auth] NT Session setup from user=, password=none, ANSIpwd=00, domain=, os=Windows 2002 Service Pack 2 2600, VC=0, maxBuf=61440, maxMpx=4, authCtx=[NTLM,Challenge=599eb51b3b3c4c07]
11:50:49,374 DEBUG [org.alfresco.smb.protocol.auth]   MID=8, UID=0, PID=65279
11:50:49,374 DEBUG [org.alfresco.smb.protocol.auth] Null CIFS logon allowed
11:50:49,374 DEBUG [org.alfresco.smb.protocol.auth] User  logged on  (type Null)
11:50:49,374 DEBUG [org.alfresco.smb.protocol.auth] Allocated UID=0 for VC=[0:0,[:null,,Windows 2002 Service Pack 2 2600],Tree=0,Searches=0]
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Winsock NetBIOS session request received, caller=[DEV04:WorkStation,Unique,]
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Waiting for Win32 NetBIOS session request (Winsock) …
11:50:49,390 DEBUG [org.alfresco.smb.protocol] Server session started
11:50:50,781 DEBUG [org.alfresco.smb.protocol.mailslot] HostAnnouncer: Announced host DEV04_A
11:50:56,766 DEBUG [org.alfresco.smb.protocol.mailslot] HostAnnouncer: Announced host DEV04_A
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Any ideas why it was working in 1.4 and no more in 2.0 ?

luker0

According to the wiki

"The correct bean to over-ride for NTLM LDAP etc is now "authenticationComponent". See the sample files which have been updated to reflect this."

Where are these sample files that have been updated. In a clean install downloaded yesterday the sample files still contain the wrong bean reference.

in the <TOMCAT_HOME>/shared/classes/alfresco/extension directory.
here you can see that bean id="authenticationComponent" replaced the bean id="authenticationComponentImpl" (previous versions in alfresco)

luker0

in the <TOMCAT_HOME>/shared/classes/alfresco/extension directory.
here you can see that bean id="authenticationComponent" replaced the bean id="authenticationComponentImpl" (previous versions in alfresco)

Ok well the 2.0 version I downloaded on Feb 23 does not have updated sample files. I download a new one and see.

BTW I am using the AlfrescoCommunity-2.0-Linux-x86-Install files.

Hi

Apologies, the config examples were updated after 2.0 community final.

When I last tested this I used the following config with variations:

alfresco\extension\ntlm-authentication-context.xml

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>

    <bean id="authenticationDao" class="org.alfresco.repo.security.authentication.ntlm.NullMutableAuthenticationDao" />

    <!– The authentication component.                                      –>

    <!– Use the passthru authentication component to authenticate using    –>
    <!– user accounts on one or more Windows servers.                      –>
    
    <!– Properties that specify the server(s) to use for passthru          –>
    <!– authentication :-                                                  –>
    <!–   useLocalServer   use the local server for authentication         –>
    <!–   domain           use domain controllers from the specified domain–>
    <!–   servers          comma delimted list of server addresses or      –>
    <!–                    names                                           –>
       
    <bean id="authenticationComponent" class="org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl">
        ……. various options
        <property name="personService">
            <ref bean="personService" />
        </property>
        <property name="nodeService">
            <ref bean="nodeService" />
        </property>
        <property name="guestAccess">
            <value>…..</value>
        </property>
    </bean>
    
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

alfresco\extension\file-servers-custom.xml

<alfresco-config area="file-servers">

   <!– To override the default Alfresco filesystem use replace="true", to –>
   <!– add additional filesystems remove the replace="true" attribute     –>
   
   <config evaluator="string-compare" condition="Filesystems" replace="true">

      <filesystems>
      
          <!– Default share –>
         <filesystem name="Alfresco">
   
            <store>workspace://SpacesStore</store>
            <rootPath>/app:company_home</rootPath>
   
            <!– Enable Web client launch shortcut in all folders –>
            <urlFile>
   
               <!– Change the filename as required, keeping the .url extension –>
               <filename>_Alfresco.url</filename>
   
               <!– Change 'localhost' to the name or IP of the Alfresco server –>
               <webpath>http://localhost:8080/alfresco/</webpath>
   
            </urlFile>
   
         </filesystem>
      </filesystems>
      
   </config>

   <!– Allow guest access to file systems –>
   <config evaluator="string-compare" condition="Filesystem Security" replace="true">

      <authenticator type="alfresco">
         …..
      </authenticator>

   </config>

</alfresco-config>


‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Make sure you can not find this file (file-servers-custom.xml) any where else on the class path - it should be in extensions and not in the expanded web inf directory for example.

If you have trouble you can specify an alternate file location by replacing the fileServersConfigSource bean - normally in alfresco\network-protocol-context.xml.

The CIFS configuration needs to match the aurthentication config

Auth                                     CIFS
——                                     —–

Alfresco                                alfrecso
   "                                    enterprise
NTLM                                    alfresco   
LDAP                                    passthru
JAAS/Kerberos                           passthru
*                                       enterprise+kerberos
‍‍‍‍‍‍‍‍‍‍‍

You can use LDAP to load users for any of these except alfresco auth.

Make sure you have a guest user if you have guest access.

Do not clear out users when importing people via LDAP.

Issues can arise from the AD configuration, firewalls etc. We can not really support setting up and fixing all these combinations via the forums.

If this does not sort out your problem then you may beed more specific support.

Cheers

Andy

Andy, thanks for the configuration files, but they are almost the same than mine.

The problem with NTLM authentication has nothing to do with a particular AD configuration in the system I'm using. Remenber that it works on 1.4.0 with the problem documented in the bug about lower cases users, but even with the bug the NTLM authentication works OK. This discard any problem with AD configuration, or Firewall, etc. In my opinion that points to the Alfresco 2.0 NTLM beans related with NTLM authentication.

The error I get is about a problem with this configuration (NTLM authentication) on Alfresco 2.0. The CIFS works perfectly and authenticates whithout problems. The error messages are:

09:34:02,102 DEBUG [app.servlet.NTLMAuthenticationFilter] Sending NTLM type2 to client - [Type2:0x201,Target:HSANTANDER_A,Ch:2c5745ba67743d95]
09:34:02,122 DEBUG [app.servlet.NTLMAuthenticationFilter] Received type3 [Type3:,LM:<Null>,NTLM:601c60d1cf13443514bc6ae8e104c191abad29b083d3ad25,Dom:HSANTANDER_A,User:sbh000,Wks:]
09:34:02,181 ERROR [[localhost].[/alfresco].[Faces Servlet]] Servlet.service() para servlet Faces Servlet lanzÃ³ excepciÃ³norg.alfresco.error.AlfrescoRuntimeException: Transaction must be active and synchronization is required
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.registerSynchronizations(AlfrescoTransactionSupport.java:371)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.getSynchronization(AlfrescoTransactionSupport.java:356)
        at org.alfresco.repo.transaction.AlfrescoTransactionSupport.bindDaoService(AlfrescoTransactionSupport.java:210)
        at org.alfresco.repo.transaction.TransactionalDaoInterceptor.invoke(TransactionalDaoInterceptor.java:66)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy1.getNode(Unknown Source)
        at org.alfresco.repo.node.db.DbNodeServiceImpl.exists(DbNodeServiceImpl.java:160)
        at sun.reflect.GeneratedMethodAccessor138.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.alfresco.repo.service.StoreRedirectorProxyFactory$RedirectorInvocationHandler.invoke(StoreRedirectorProxyFactory.java:221)
        at $Proxy2.exists(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor138.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:335)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:181)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:148)
        at org.alfresco.repo.node.MLPropertyInterceptor.invoke(MLPropertyInterceptor.java:227)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:170)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:176)
        at $Proxy3.exists(Unknown Source)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPersonOrNull(PersonServiceImpl.java:202)
        at org.alfresco.repo.security.person.PersonServiceImpl.getPerson(PersonServiceImpl.java:155)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:840)
        at org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:521)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.processType3(NTLMAuthenticationFilter.java:727)
        at org.alfresco.web.app.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:400)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:664)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:595)
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

As you said the Alfresco 2.0 release for downloading has configuration files that are not correct and you just post the good ones. Maybe some of the java classes are not working properly. Do you know if NTLMAuthenticationComponentImpl has changed in the same way the authenticationComponentImpl? It seems the problem is with this bean.

Thanks