Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I want Alfresco to authenticate users using SSO with MIT Kerberos.

What authentication.chain should I use?

I tried authentication.chain=kerberos1:kerberos without success.

Based on this answer I have also set up an LDAP server containing the same users as MIT Kerberos, and tried with authentication.chain=kerberos1:kerberos;ldap1:ldap, but that does not work either.

Important lines of ldap1/ldap-authentication.properties:

ldap.authentication.active=true
ldap.synchronization.active=true

I always get CIFS server configuration error, Error creating bean with name 'globalAuthenticationFilter', even though I don't care about CIFS, only HTTP. In kerberos1/kerberos-authentication.properties I have kerberos.authentication.authenticateCIFS=false.

What am I doing wrong?
Do I maybe need passthru somehow?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

This chain should work:

authentication.chain=kerberos1:kerberos

but as far as I know MIT kerberos won't work out of the box with Alfresco kerberos authentication backend. You might need some additionnal config on the KDC

you can still use ldap if your KDC uses an LDAP directory as a backend and passthru would only work if you have samb along side with you kerberos.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.