hello,
i read all the messages talking about cifs ldap authentication i have tried using the passthru authenticator this my passthru properties
# Configure NTLM passthru to SAMBA Server
passthru.authentication.sso.enabled=false
passthru.authentication.allowGuestLogin=true
passthru.authentication.useLocalServer=true
passthru.authentication.servers=127.0.0.1
passthru.authentication.domain=DMS,KOPILEFT
passthru.authentication.connectTimeout=5000
passthru.authentication.offlineCheckInterval=30
passthru.authentication.protocolOrder=TCPIP
passthru.authentication.defaultAdministratorUserNames=admin
#server.transaction.mode.default=
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
filesystem.domainMappings=KOPILEFT
filesystem.domainMappings.value.KOPILEFT.rangeFrom=192.168.1.10
filesystem.domainMappings.value.KOPILEFT.rangeTo=192.168.1.254
and this is my file-server config
cifs.ipv6.enabled=false cifs.hostannounce=true # Enable the use of asynchronous sockets/NIO code cifs.disableNIO=false # Disable the use of JNI code. Only currently affects Windows cifs.disableNativeCode=true # Session timeout, in seconds. Defaults to 15 minutes, to match the default Windows client setting. # If no I/O is received within that time the session is closed by the server cifs.sessionTimeout=900 # Can be mapped to non-privileged ports, then use firewall rules to forward requests from the standard ports cifs.tcpipSMB.port=1445 cifs.netBIOSSMB.sessionPort=1139 cifs.netBIOSSMB.namePort=1137 cifs.netBIOSSMB.datagramPort=1138 # Optional WINS server primary and secondary IP addresses. Ignored if autoDetectEnabled=true cifs.WINS.autoDetectEnabled=true cifs.WINS.primary=1.2.3.4 cifs.WINS.secondary=5.6.7.8 # CIFS session debug flags (also enable org.alfresco.fileserver=debug logging level) # Comma delimeted list of levels :- <co/WEB-INF/classes/alfresco/subsystems/fileServers/default/file-servers.properties" [dos] 74L, 2856C bind to all available network adapters cifs.bindto=172.20.251.207 cifs.ipv6.enabled=false cifs.hostannounce=true # Enable the use of asynchronous sockets/NIO code cifs.disableNIO=false # Disable the use of JNI code. Only currently affects Windows cifs.disableNativeCode=true # Session timeout, in seconds. Defaults to 15 minutes, to match the default Windows client setting. # If no I/O is received within that time the session is closed by the server cifs.sessionTimeout=900 # Can be mapped to non-privileged ports, then use firewall rules to forward requests from the standard ports cifs.tcpipSMB.port=1445 cifs.netBIOSSMB.sessionPort=1139 cifs.netBIOSSMB.namePort=1137 cifs.netBIOSSMB.datagramPort=1138 # Optional WINS server primary and secondary IP addresses. Ignored if autoDetectEnabled=true cifs.WINS.autoDetectEnabled=true cifs.WINS.primary=1.2.3.4 cifs.WINS.secondary=5.6.7.8 # CIFS session debug flags (also enable org.alfresco.fileserver=debug logging level) # Comma delimeted list of levels :- # NETBIOS, STATE, RXDATA, TXDATA, DUMPDATA, NEGOTIATE, TREE, SEARCH, INFO, FILE, FILEIO, TRANSACT # ECHO, ERROR, IPC, LOCK, PKTTYPE, DCERPC, STATECACHE, TIMING, NOTIFY, STREAMS, SOCKET, PKTPOOL # PKTSTATS, THREADPOOL, BENCHMARK cifs.sessionDebug=ERROR,NETBIOS,STATE,INFO,NOTIFY ### FTP Server Configuration ### ftp.enabled=false ftp.port=21 ftp.ipv6.enabled=false # FTP data port range, a value of 0:0 disables the data port range and will use the next available port # Valid range is 1024-65535 ftp.dataPortFrom=0 ftp.dataPortTo=0 nfs.nfsServerPort=2049 # RPC registration port, 0 will allocate next available port # Some portmapper/rpcbind services require a privileged port to be used nfs.rpcRegisterPort=0 # To disable NFS and mount server registering with a portmapper set nfs.portMapperPort to -1 nfs.portMapperPort=111 # Enable the builtin portmapper service nfs.portMapperEnabled=false # NFS session debug flags (also enable org.alfresco.fileserver=debug logging level) # Comma delimeted list of levels :- # RXDATA, TXDATA, DUMPDATA, SEARCH, INFO, FILE, FILEIO, ERROR, TIMING, DIRECTORY, SESSION nfs.sessionDebug= nfs.mountServerDebug=false
the log file is :
14:06:59,319 INFO [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/repository.properties]
14:06:59,323 INFO [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/domain/transaction.properties]
14:06:59,324 INFO [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/module/tests/alfresco-global.properties]
14:06:59,324 INFO [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/module/test/alfresco-global.properties]
14:06:59,324 INFO [org.alfresco.config.JndiPropertiesFactoryBean] Loading properties file from URL [file:/opt/Alfresco/tomcat/shared/classes/alfresco-global.properties]
14:06:59,569 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:22,259 INFO [org.springframework.extensions.webscripts.TemplateProcessorRegistry] Registered template processor Repository Template Processor for extension ftl
14:07:22,261 INFO [org.springframework.extensions.webscripts.ScriptProcessorRegistry] Registered script processor Repository Script Processor for extension js
14:07:33,434 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] Schema managed by database dialect org.hibernate.dialect.PostgreSQLDialect.
14:07:36,903 INFO [org.alfresco.repo.domain.schema.SchemaBootstrap] No changes were made to the schema.
14:07:38,368 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'sysAdmin' subsystem, ID: [sysAdmin, default]
14:07:38,377 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:38,385 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'sysAdmin' subsystem, ID: [sysAdmin, default] complete
14:07:40,210 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'thirdparty' subsystem, ID: [thirdparty, default]
14:07:40,252 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:40,296 ERROR [org.alfresco.repo.content.transform.magick.AbstractImageMagickContentTransformerWorker] ImageMagickContentTransformerWorker not available: 06260000 Failed to perform ImageMagick transformation:
Execution result:
os: Linux
command: [./ImageMagick/bin/convert, /opt/Alfresco/tomcat/temp/Alfresco/ImageMagickContentTransformerWorker_init_source_2188914104342565805.gif[0], /opt/Alfresco/tomcat/temp/Alfresco/ImageMagickContentTransformerWorker_init_target_5588705765401271919.png]
succeeded: false
exit code: 1
out:
err: Cannot run program "./ImageMagick/bin/convert": java.io.IOException: error=2, No such file or directory
14:07:40,334 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'thirdparty' subsystem, ID: [thirdparty, default] complete
14:07:40,334 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'OOoDirect' subsystem, ID: [OOoDirect, default]
14:07:40,344 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:41,901 ERROR [org.alfresco.util.exec.RuntimeExecBootstrapBean] Bootstrap command failed:
Execution result:
os: Linux
command: [soffice, -accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager, -env:UserInstallation=file:///opt/Alfresco/${ooo.user}, -nologo, -headless, -nofirststartwizard, -nocrashrep, -norestore]
succeeded: false
exit code: 2
out:
err: Cannot run program "soffice": java.io.IOException: error=2, No such file or directory
14:07:41,947 WARN [org.alfresco.util.OpenOfficeConnectionTester] An initial OpenOffice connection could not be established.
14:07:41,961 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'OOoDirect' subsystem, ID: [OOoDirect, default] complete
14:07:43,462 INFO [org.alfresco.repo.admin.ConfigurationChecker] The Alfresco root data directory ('dir.root') is: /opt/Alfresco/alf_data
14:07:43,661 INFO [org.alfresco.repo.admin.patch.PatchExecuter] Checking for patches to apply ...
14:07:44,092 INFO [org.alfresco.repo.admin.patch.PatchExecuter] No patches were required.
14:07:44,122 INFO [org.alfresco.repo.module.ModuleServiceImpl] Found 0 module(s).
14:07:44,134 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'fileServers' subsystem, ID: [fileServers, default]
14:07:44,170 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:44,369 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
14:07:44,381 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:44,703 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1] complete
14:07:44,703 INFO [org.alfresco.repo.management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, passthru1]
14:07:44,970 INFO [org.alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
14:07:44,991 DEBUG [org.alfresco.smb.protocol.auth] Protocol order primary=Native SMB (port 445), secondary=
14:07:44,993 DEBUG [org.alfresco.smb.protocol.auth] Using offline check interval of 30 seconds
14:07:44,995 ERROR [org.alfresco.fileserver] CIFS server configuration error, Error creating bean with name 'globalAuthenticationFilter' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/ntlm-filter-context.xml]: Cannot resolve reference to bean 'AuthenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 06260001 Set passthru server via local server or specify name
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'globalAuthenticationFilter' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/ntlm-filter-context.xml]: Cannot resolve reference to bean 'AuthenticationComponent' while setting bean property 'authenticationComponent'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'AuthenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'authenticationComponent' while setting bean property 'target'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationComponent' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Cannot resolve reference to bean 'passthruServers' while setting bean property 'passthruServers'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'passthruServers' defined in file [/opt/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/passthru/passthru-authentication-context.xml]: Invocation of init method failed; nested exception is org.alfresco.error.AlfrescoRuntimeException: 06260001 Set passthru server via local server or specify name
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:328)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:106)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1305)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1067)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:511)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:450)
at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:290)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
when i change the property passthru.authentication.useLocalServer=false the error it will be set server name when i put in passthru.authentication.servers= the local ip then print passthrue @ip offline
i dont know what ip i put in passthru servers and if i miss something else
please help me
—
dward
- Posts
- 558
- Achievements
- 6
- Member for
- 4 years 1 month
Alfresco Employee
Stats
Please read
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#Domain_level_properties
You can only set one of these properties. The other two should be blank or false. Most probably you want this
passthru.authentication.useLocalServer=true
passthru.authentication.servers=
passthru.authentication.domain=
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
thank you for the reply but when i set the server and the domain properties blank i have an error
i dont know if the localhost is not the passthru server or not can you tell me what address take the passthru server
dward
- Posts
- 558
- Achievements
- 6
- Member for
- 4 years 1 month
Alfresco Employee
Stats
It looks like there may be a bug with the local server IP address detection when all the local server addresses are loopback addresses (perhaps when disconnected from the network?)
Try this
passthru.authentication.useLocalServer=false
passthru.authentication.servers=127.0.0.1
passthru.authentication.domain=
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
hello thank you but i reach the same problem from the beginning now i have "Passthru offline check failed for alfrescovm" look to the log
the cifs server it is started with offline passthru server when i try to check the share this is the result
my network divided into subnetworks can this make problem for the future ? now i just want to misidentify using the ldap login and password for cifs share (i have installed alfresco 3.3 community release on centos 5)
dward
- Posts
- 558
- Achievements
- 6
- Member for
- 4 years 1 month
Alfresco Employee
Stats
The passthru server must be a Windows domain server (or possibly a Samba server configured as such).
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
hello thank you
i understand now what does mean passthru servers, in this case i have the alfresco cifs server this is my samba server and it is installed on localhost what i dont understand why it is offline and why the samba client can't login even the samba cifs server it is running ?
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
hello please can someone help me or give me his experience
i get "Failed to open a passthru session, mapped domain = null" message when i try connect with samba client
mu passthru configuration its :
i dont know passthru talk about can't find domain controller i use just the cifs server of alfresco and i have a remote server for ldap
please help thanks
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
hello,
there is no body can help me ??
dward
- Posts
- 558
- Achievements
- 6
- Member for
- 4 years 1 month
Alfresco Employee
Stats
passthru is designed to talk to a windows domain controller. You either need one of these, or a samba installation that can act as one. It doesn't work with a raw LDAP directory.
An alternative is to set up this authentication chain
authentication.chain=alfrescoNtlm1:alfrescoNtlm,ldap1:ldap
and allow the internal alfresco repository to handle CIFS authentication. This would mean that only built-in users such as admin could use CIFS. LDAP users would still be able to use FTP and webdav.
fedoratori
- Posts
- 12
- Achievements
- 1
- Member for
- 2 years 11 months
Stats
hello,
is that mean that my alfresco cifs server does not a have a windows domain controller or the problem can be that the passthru does not work with my ldap ?? in that case there is no way to use cifs with ldap users ???
thanks
dward
- Posts
- 558
- Achievements
- 6
- Member for
- 4 years 1 month
Alfresco Employee
Stats
passthru is designed to talk to a windows domain controller. You either need one of these, or a samba installation that can act as one. Otherwise, LDAP users will not be able to authenticate with CIFS.
sydwellz
- Posts
- 4
- Achievements
- 0
- Member for
- 2 years 2 weeks
Stats
Hi dward and others
Thanks for clearing some of the confusion out there with regards to CIFS and LDAP.
Just one more question, what happens when a user is imported using LDAP synchronization.
Surely that user should now be able to use CIFS as this users is now "built-in" or am I wrong?
Thanks