One of the main features of the Alfresco ECM System is the ability to integrate user authentication and synchronization with Microsoft Active Directory.
Unfortunately, integration is not trivial and it is error prone. While I’ll provide explanations how stuff works you can also have a look at the chapter 6 of the Professional Alfresco: Practical Solutions for Enterprise Content Management (Wrox Programmer to Programmer)
In this guide I’ll show you how to achieve full integration with Active Directory which includes Alfresco Explorer and Alfresco Share SSO, CIFS SSO, and Active Directory (LDAP) users and groups synchronization.
Prerequisites for this article are: working Active Directory environment, functional basic installation of Alfresco i.e. you can login into working Alfresco using the default admin/admin user. I tend to use bundled Alfresco/Tomcat zip installation since installer can be buggy from version to version and you don’t have full control. I recommend using Alfresco CE 3.2 build 2242 or later since it includes many fixes for NTLM, CIFS and LDAP merged from enterprise version. In my case Alfresco is installed on Windows 2003 EE with SP2 32bit.
Alfresco subsystems
Introduced in version 3.2 are the number of Alfresco subsystems:
- Authentication
- Synchronization
- File Servers
- IMAP
- sysAdmin
- WCM Deployment Receiver
- Third party (OpenOffice, Image Magick, etc.)
Subsystems in their nature are separate configurable modules responsible for a sub-part of the Alfresco functionality. Subsystems that we are interested in this article are the first three: authentication, synchronization and file servers. Note that configuration for subsystems is located in their respective folders as shown in the picture:
Note that LDAP synchronization is linked to LDAP authentication.
Lets get our hands dirty now.
Authentication
First thing to do to integrate user authentication with Active Directory is to configure the main authentication chain in Alfresco configuration. We do this by adding the following line in \Alfresco\tomcat\shared\classes\alfresco-global.properties:
authentication.chain=passthru1:passthru,ldap-ad1:ldap-ad
Note: ldap-ad is here in chain to support later explained user synchronization.
Now, create the file \subsystems\Authentication\passthru\passthru1\changes.properties and put the following inside:
passthru.authentication.useLocalServer=false
passthru.authentication.servers=DOMAIN\\192.168.0.1,192.168.0.1
ntlm.authentication.sso.enabled=true
alfresco.authentication.allowGuestLogin=false
ntlm.authentication.mapUnknownUserToGuest=false
passthru.authentication.authenticateCIFS=true
passthru.authentication.authenticateFTP=false
passthru.authentication.guestAccess=false
passthru.authentication.defaultAdministratorUserNames=AD_usernames
What we tell Alfresco with the above config is to use the external server for authentication, enable NTLM SSO, and put the list of usernames that should have the administrator role.
Now, edit the \Alfresco\tomcat\shared\classes\alfresco\web-extension\webscript-framework-config-custom.xml file and make sure the following is present and uncommented:
<config evaluator=”string-compare” condition=”Remote”>
<remote>
<!– SSL client certificate + trusted CAs. Optionally used to authenticate share to an external SSO system such as CAS –>
<keystore>
<path>alfresco/web-extension/alfresco-system.p12</path>
<type>pkcs12</type>
<password>alfresco-system</password>
</keystore>
<connector>
<id>alfrescoCookie</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using cookie-based authentication</description>
<class>org.alfresco.connector.AlfrescoConnector</class>
</connector><endpoint>
<id>alfresco</id>
<name>Alfresco – user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfrescoCookie</connector-id>
<endpoint-url>http://localhost:8080/alfresco/wcs</endpoint-url>
<identity>user</identity>
<external-auth>true</external-auth>
</endpoint>
</remote>
</config>
Next, edit the WEB-INF\web.xml file found in share.war (hint: share.war is just a zip file with .war extension) and uncomment the following:
<filter>
<filter-name>Authentication Filter</filter-name>
<filter-class>org.alfresco.web.site.servlet.NTLMAuthenticationFilter</filter-class>
<init-param>
<param-name>endpoint</param-name>
<param-value>alfresco</param-value>
</init-param>
</filter><filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/page/*</url-pattern>
</filter-mapping><filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/p/*</url-pattern>
</filter-mapping><filter-mapping>
<filter-name>Authentication Filter</filter-name>
<url-pattern>/s/*</url-pattern>
</filter-mapping>
SSO should now be fully functional for Alfresco Explorer and Alfresco Share. Lets synchronize the users and groups now.
Synchronization
For user synchronization to work we must configure Alfresco to hit the Active Directory domain controller with the appropriate LDAP queries. Queries are highly dependant of ones AD structure so the following configuration covers the scenario where:
- All groups that I want in Alfresco are members of a single group called Alfresco Groups,
- Users that I want synchronized to Alfresco are members of the above mentioned member groups.
This structure is nice if you have users in different OUs but don’t want them all to be also present in Alfresco.
So, edit the \subsystems\Authentication\ldap-ad\ldap-ad1\changes.properties file and add the following inside:
#
# LDAP Sync
#
# This flag enables use of this LDAP subsystem for authentication. It may be
# that this subsytem should only be used for synchronization, in which case
# this flag should be set to false.
ldap.authentication.active=false
ldap.authentication.java.naming.security.authentication=simple# This flag enables use of this LDAP subsystem for user and group
# synchronization. It may be that this subsytem should only be used for
# authentication, in which case this flag should be set to false.
ldap.synchronization.active=true
ldap.authentication.userNameFormat=%s
ldap.authentication.allowGuestLogin=true
ldap.authentication.java.naming.provider.url=ldap://domain.local:389# The default principal to bind with (only used for LDAP sync). This should be a UPN or DN
ldap.synchronization.java.naming.security.principal=user@domain.local# The password for the default principal (only used for LDAP sync)
ldap.synchronization.java.naming.security.credentials=YourPass# If positive, this property indicates that RFC 2696 paged results should be
# used to split query results into batches of the specified size. This
# overcomes any size limits imposed by the LDAP server.
ldap.synchronization.queryBatchSize=1000# The query to select all objects that represent the groups to import.
ldap.synchronization.groupQuery=(&(objectclass\=group)(memberOf\=cn\=Alfresco Groups,ou\=user,dc\=domain,dc\=local))# The query to select objects that represent the groups to import that have changed since a certain time.
ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(memberOf\=cn\=Alfresco Groups,ou\=user,dc\=domain,dc\=local)(!(modifyTimestamp<\={0})))# The query to select all objects that represent the users to import.
ldap.synchronization.personQuery=(&(objectclass\=user)(|(memberOf\=CN\=Developers,OU\=user,DC\=domain,DC\=local)(memberOf\=CN\=Sales,OU\=user,DC\=domain,DC\=local))(userAccountControl\:1.2.840.113556.1.4.803\:\=512))# The query to select objects that represent the users to import that have changed since a certain time.
ldap.synchronization.personDifferentialQuery=(&(objectclass\=user)(|(memberOf\=CN\=Developers,OU\=user,DC\=domain,DC\=local)(memberOf\=CN\=Sales,OU\=user,DC\=domain,DC\=local))(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0})))# The group search base restricts the LDAP group query to a sub section of tree on the LDAP server.
ldap.synchronization.groupSearchBase=dc\=domain,dc\=local# The user search base restricts the LDAP user query to a sub section of tree on the LDAP server.
ldap.synchronization.userSearchBase=dc\=domain,dc\=local# The name of the operational attribute recording the last update time for a group or user.
ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp# The timestamp format. Unfortunately, this varies between directory servers.
ldap.synchronization.timestampFormat=yyyyMMddHHmmss’.0Z’# The attribute name on people objects found in LDAP to use as the uid in Alfresco
ldap.synchronization.userIdAttributeName=sAMAccountName# The attribute on person objects in LDAP to map to the first name property in Alfresco
ldap.synchronization.userFirstNameAttributeName=givenName# The attribute on person objects in LDAP to map to the last name property in Alfresco
ldap.synchronization.userLastNameAttributeName=sn# The attribute on person objects in LDAP to map to the email property in Alfresco
ldap.synchronization.userEmailAttributeName=mail# The attribute on person objects in LDAP to map to the organizational id property in Alfresco
ldap.synchronization.userOrganizationalIdAttributeName=company# The default home folder provider to use for people created via LDAP import
ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider# The attribute on LDAP group objects to map to the gid property in Alfrecso
ldap.synchronization.groupIdAttributeName=cn# The group type in LDAP
ldap.synchronization.groupType=group# The person type in LDAP
ldap.synchronization.personType=user# The attribute in LDAP on group objects that defines the DN for its members
ldap.synchronization.groupMemberAttributeName=membersynchronization.synchronizeChangesOnly=true
What we do above is: disable LDAP authentication and enable just LDAP synchronization, set the LDAP URL to query, credentials with read rights on LDAP, groups query, users query, and LDAP attributes to map Alfresco user’s attributes to. Note that LDAP synchronization is not instant, duration depends on number of objects to synchronize and is scheduled to run every hour (configurable in scheduled-jobs-context.xml).
CIFS
Now, the problematic part. CIFS is usually the hardest one to get it to work properly. So lets start with basic config that should work and then try to fix the eventual problems if there are any.
Edit the \subsystems\fileServers\default\default\changes.properties file and add the following inside:
filesystem.name=Alfresco
filesystem.domainMappings=DOMAIN
filesystem.domainMappings.value.DOMAIN.rangeFrom=192.168.0.0
filesystem.domainMappings.value.DOMAIN.rangeTo=192.168.0.255cifs.enabled=true
cifs.localname=HOSTNAME
cifs.domain=DOMAIN
cifs.hostannounce=true
cifs.urlfile.prefix=http://hostname:8080/alfresco/cifs.broadcast=192.168.0.255
cifs.bindto=192.168.0.123
cifs.ipv6=disabledftp.enabled=false
ftp.ipv6=disabled
nfs.enabled=false
If it doesn’t work you can try to enable only the Java socket based NetBIOS over TCP/IP. You do this by copying file-servers-context.xml to \subsystems\fileServers\default\default\custom-file-servers-context.xml and commenting out the following sections in it:
<!–
<property name=”netBIOSSMB”>
<bean class=”org.alfresco.filesys.config.NetBIOSSMBConfigBean”>
<property name=”bindTo”>
<value>${cifs.bindto}</value>
</property>
<property name=”sessionPort”>
<value>${cifs.netBIOSSMB.sessionPort}</value>
</property>
<property name=”namePort”>
<value>${cifs.netBIOSSMB.namePort}</value>
</property>
<property name=”datagramPort”>
<value>${cifs.netBIOSSMB.datagramPort}</value>
</property>
<property name=”platforms”>
<value>linux,solaris,macosx</value>
</property>
</bean>
</property>
–>
<!– Use Win32 NetBIOS interface on Windows –>
<!–
<property name=”win32NetBIOS”>
<bean class=”org.alfresco.filesys.config.Win32NetBIOSConfigBean” />
</property>
<property name=”win32HostAnnouncerEnabled”>
<value>${cifs.hostannounce}</value>
</property>
<property name=”win32HostAnnounceInterval”>
<value>5</value>
</property>
–>
Make sure the following property is setup like this:
<!– Use Java socket based NetBIOS over TCP/IP and native SMB on linux –>
<property name=”tcpipSMB”>
<bean class=”org.alfresco.filesys.config.TcpipSMBConfigBean”>
<!–
Can be mapped to non-privileged ports, then use firewall rules to forward requests from the standard
ports
–>
<property name=”port”>
<value>${cifs.tcpipSMB.port}</value>
</property>
<property name=”ipv6Enabled”>
<value>${cifs.ipv6.enabled}</value>
</property>
</bean>
</property>
You must also disable the native SMB over TCP/IP by editing th following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
“SMBDeviceEnabled”=dword:00000000
You can also try to disable File and Printer sharing in the network interface’s properties dialog.
Conclusion
As you can see Alfresco integration with Active Directory can be tricky but benefits you get are definitely worth the trouble. If you have any questions feel free to ask them in comments. Feedback is highly appreciated.
November 3, 2009 at 23:03
Thanks a lot, it is very helpful.
But when I set up 3.2.0 (r 2384) schema 3003 on a CentOS 4.8 box, the back slash in the ldap-ad configuration did give me some trouble:
On linux, it should be something like
org.alfresco.error.AlfrescoRuntimeException: 09050014 Failed to import people.at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonIterator.(LDAPUserRegistry.java:772)
at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getPersons(LDAPUserRegistry.java:455)
at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncPersonsWithPlugin(ChainingUserRegistrySynchronizer.java:379)
at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronize(ChainingUserRegistrySynchronizer.java:270)
at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$1$1.execute(ChainingUserRegistrySynchronizer.java:916)
at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:326)
at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:233)
at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$1.doWork(ChainingUserRegistrySynchronizer.java:908
It should be something like:
Correct:
ldap.synchronization.personQuery=(&(objectclass=user)(userAccountControl:1.2.840.113556.1.4.803:=512)(memberOf=cn=alfresco,ou=internal_access,dc=domain,dc=com))ldap.synchronization.personDifferentialQuery=(&(objectclass=user)(userAccountControl:1.2.840.113556.1.4.803:=512)(memberOf=cn=alfresco,ou=internal_access,dc=domain,dc=com)(!(modifyTimestamp<\={0})))November 4, 2009 at 18:27
Thanks for the feedback.
Actually queries are based on samples (either from wiki or forum) posted by Alfresco team and they do work on Windows server I’m running Alfresco on. I doubt it has anything to do with host OS to be honest.
Idea is to escape extra ‘=’ signs when they are located in the .properties files which are in [property]=[value] format. You are running a newer build so it might even be a regression on their part.
I guess one could try both solutions and see which one works best for him.
November 12, 2009 at 18:43
Hi Ivan,
I have one question for solve and i cannot find the solution in any place. I need import user and groups on SAME ACTIVE DIRECTORY but in DIFFERENTS OU’s and CN’s. Something like this:
#
# This properties file is used to configure LDAP syncronisation
#
# The query to find the people to import
ldap.synchronisation.personQuery=(objectclass=user)
# The search base of the query to find people to import
#ldap.synchronisation.personSearchBase=OU=Lojas e CDs,DC=astec,DC=montreal,DC=br
ldap.synchronisation.personSearchBase=CN=Users,DC=astec,DC=montreal,DC=br
ldap.synchronisation.personSearchBase=OU=RH,DC=astec,DC=montreal,DC=br
# The attribute name on people objects found in LDAP to use as the uid in Alfresco
ldap.synchronisation.userIdAttributeName=sAMAccountName
#ldap.synchronisation.userIdAttributeName=uid
# The attribute on person objects in LDAP to map to the first name property in Alfresco
ldap.synchronisation.userFirstNameAttributeName=givenName
# The attribute on person objects in LDAP to map to the last name property in Alfresco
ldap.synchronisation.userLastNameAttributeName=sn
# The attribute on person objects in LDAP to map to the email property in Alfresco
ldap.synchronisation.userEmailAttributeName=mail
# The attribute on person objects in LDAP to map to the organizational id property in Alfresco
ldap.synchronisation.userOrganizationalIdAttributeName=o
# The default home folder provider to use for people created via LDAP import
ldap.synchronisation.defaultHomeFolderProvider=personalHomeFolderProvider
# The query to find group objects
ldap.synchronisation.groupQuery=(objectclass=group)
# The search base to use to find group objects
#ldap.synchronisation.groupSearchBase=OU=Lojas e CDs,DC=astec,DC=montreal,DC=br
ldap.synchronisation.groupSearchBase=CN=Users,DC=astec,DC=montreal,DC=br
ldap.synchronisation.groupSearchBase=OU=RH,DC=astec,DC=montreal,DC=br
# The attribute on LDAP group objects to map to the gid property in Alfrecso
ldap.synchronisation.groupIdAttributeName=cn
# The group type in LDAP
ldap.synchronisation.groupType=group
# The person type in LDAP
ldap.synchronisation.personType=user
# The attribute in LDAP on group objects that defines the DN for its members
ldap.synchronisation.groupMemberAttributeName=member
# The cron expression defining when people imports should take place
#ldap.synchronisation.import.person.cron=0 0 * * * ?
ldap.synchronisation.import.person.cron=0 * 13 * * ?
# The cron expression defining when group imports should take place
#ldap.synchronisation.import.group.cron=0 30 * * * ?
ldap.synchronisation.import.group.cron=0 * 13 * * ?
# Should all groups be cleared out at import time?
# – this is safe as groups are not used in Alfresco for other things (unlike person objects which you should never clear out during an import)
# – setting this to true means old group definitions will be tidied up.
ldap.synchronisation.import.group.clearAllChildren=false
I know when i use two identics lines Alfresco will read just the last line. Could have any idea how i can do this?
Thank you so much
November 13, 2009 at 00:13
Thanks for the feedback,
personSearchBase property is actually just a starting point for your personQuery. So to make sure all OUs are taken into account you should change the scope of LDAP you want to search to cover entire domain so you could set your personSearchBase=DC=astec,DC=montreal,DC=br.
personQuery=(objectclass=user) should now import users from all OUs actually entire domain. What you will likely want then is to filter users/OUs that don’t belong to Alfresco so you need to put required users into groups, these groups can have as members all users from some OU, and then include those groups in personQuery as it is shown in the article.
Group sync is analog to person sync.
November 18, 2009 at 18:07
I am new to Alfresco (3.2 running on 2003 server) and I am trying to follow your document in order to setup Alfresco with SSO and CIFS.
You give the directory structure \Alfresco\tomcat\shared\classes\alfresco\extension\subsystems
My directory only goes to extension. Am I suppose to create subsystem?
Thank you for your help!
November 25, 2009 at 06:56
Thank you… worked after some tinkering… adding folders etc…
Successfully installed on 2003 server r2 follwing the above guide
January 26, 2010 at 01:24
This is really good information and the NTLM authentication is working fine;however, I am still unable to sync group information! And I am not seeing any errors!
-ak
January 26, 2010 at 12:02
If you are not seeing any error that means you likely have a bad LDAP query which returns empty set.
February 1, 2010 at 22:06
Hi Ivan,
I am having problem due to following bug with Alfresco 3.2r2
https://issues.alfresco.com/jira/browse/ETHREEOH-2242?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
According to the Alfresco forum, the bug was fix six months ago. I have built Alfresco from source and the problem still exists.
Not sure what to do next!
-Ak
February 16, 2010 at 13:58
Ak
I had the same issue – it is the apostrophe in the synchronization configuration:
yyyyMMddHHmmss’.0Z’
Make sure the ‘(single quote) is not an `(apostrophe). If in doubt, do a comparison of your edited file and the default configuration.
February 17, 2010 at 10:21
Hello!
Thanks for the directions for the setup.
I do have a problem,
After the setup, i can not get into /share
CIFS is working
/Alfresco is working
(ad user and groups not yet. I can get into /Alfresco with my admin name from AD. So the look ups are correct, i just need to work on the filters)
On a clean install of Alfresco, /share works.
System: WinSBS2k3 Alfresco 3.2rc2
Here is part of the error i get when trying /share
Thanks in advance!
org.alfresco.error.AlfrescoRuntimeException: 01170002 Unable to retrieve object: site-index of type: page
org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:140)
org.alfresco.web.site.Model.getObject(Model.java:513)
org.alfresco.web.site.Model.getPage(Model.java:165)
org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
org.alfresco.web.site.servlet.DispatcherServlet.service(DispatcherServlet.java:142)
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
February 17, 2010 at 10:53
Check that endpoint url to Alfresco webscripts in webscript-framework-config-custom.xml looks like http://localhost:8080/alfresco/wcs. Also take note of the following thread.
February 17, 2010 at 11:30
lol….ok..that was it. “webscript-framework-config-custom.xml” the line was not right.
Sorry i thought i checked that.
I get the login screen, but can’t log in…I am thinning due to my users not being pulled from AD yet so Alfresco cannot look them up. (working on that later)
now, i just noticed CIFS is fighting with this server.
The Server is SBS2003 so it is a DC. Some computers are getting bad browse to the server/alfresco.
I guess due to this
http://wiki.alfresco.com/wiki/File_Server_Configuration#Vista_And_Windows_2008
and.or this?
http://forums.alfresco.com/en/viewtopic.php?f=9&t=17836
Thanks again for your help!! 🙂
February 17, 2010 at 12:33
Well, in theory CIFS should use another NetBIOS name like SBS2003A. Check if it is registered using “nbtstat -n” command. In practice, installing Alfresco on SBS server and particularly using CIFS is an adventure I personally wouldn’t like to be part of :). Let me know if you get it to work.
March 2, 2010 at 13:29
Great article, very useful since AD integration is not immediate…
Though I have more or less the same problem as Vito since I can log in in /alfresco with my AD accounts but not in /share (always rejected).
Where is the authentication made for /share ?
Thanks for your help.
March 2, 2010 at 20:10
Alfresco Share SSO using NTLM.
March 4, 2010 at 16:19
Thank you, but this is similar to your content.
I double ckecked and it looks good but it doesn’t work still, I cannot log in as admin either (The remote server may be unavailable or your authentication details have not been recognized.). Tomcat windows doesn’t show any error.
Any clue ?
March 4, 2010 at 17:51
Ok, I found that the .war seems not to extract again once already extracted. I remove the share folder and let it auto extract again.
Here is what I get now :
java.lang.NullPointerException
org.alfresco.web.framework.RemoteStoreModelObjectPersister.getCache(RemoteStoreModelObjectPersister.java:107)
org.alfresco.web.framework.StoreModelObjectPersister.cacheGet(StoreModelObjectPersister.java:532)
org.alfresco.web.framework.StoreModelObjectPersister.getObjectByPath(StoreModelObjectPersister.java:127)
org.alfresco.web.framework.StoreModelObjectPersister.getObject(StoreModelObjectPersister.java:108)
org.alfresco.web.framework.MultiModelObjectPersister.getObject(MultiModelObjectPersister.java:106)
org.alfresco.web.framework.ModelObjectManager.getObject(ModelObjectManager.java:136)
org.alfresco.web.site.Model.getObject(Model.java:513)
org.alfresco.web.site.Model.getPage(Model.java:165)
org.alfresco.web.site.SlingshotPageMapper.executeMapper(SlingshotPageMapper.java:188)
org.alfresco.web.site.AbstractPageMapper.execute(AbstractPageMapper.java:62)
org.alfresco.web.site.DefaultRequestContextFactory.newInstance(DefaultRequestContextFactory.java:109)
org.alfresco.web.site.FrameworkHelper.initRequestContext(FrameworkHelper.java:202)
org.alfresco.web.site.servlet.NTLMAuthenticationFilter.doFilter(NTLMAuthenticationFilter.java:147)
March 4, 2010 at 22:43
If I recall correctly I had that error when I setup the wrong endpoint URL for Alfresco. Double check <endpoint-url>http://localhost:8080/alfresco/wcs</endpoint-url> in \tomcat\shared\classes\alfresco\web-extension\webscript-framework-config-custom.xml.
March 8, 2010 at 19:04
The endpoint is http://localhost:8080/alfresco/wcs, correct ?
Well, I really believe my values in C:\Alfresco\tomcat\shared\classes\alfresco\extension\subsystems\fileServers\default\default\change.properties are not correct. Here is what I have :
filesystem.name=Alfresco
filesystem.domainMappings=
filesystem.domainMappings.value..rangeFrom=192.168.192.0
filesystem.domainMappings.value..rangeTo=192.168.195.255
cifs.enabled=true
cifs.localname=
cifs.domain=
cifs.hostannounce=true
cifs.urlfile.prefix=http://hostname:8080/alfresco/
cifs.broadcast=192.168.195.255
cifs.bindto=192.168.193.147
cifs.ipv6=disabled
http://ftp.enabled=false
http://ftp.ipv6=disabled
nfs.enabled=false
What should I put on : cifs.bindto= ? I don’t understand what is this ? my Alfresco machine IP ?
My network is 192.168.192.0/22
I really find very few explanation about this on the wiki/web.
Any advice please ?
Thank you.
March 8, 2010 at 19:30
Yes, that is the most likely URL if you’ve got Alfresco and Share applications on same server and you didn’t change default ports.
Indeed, CIFS really tends to be problematic and its configuration depends a lot of the target OS stack and you didn’t specify it though your config seems fine to me (I suppose you intentionally left out host/domain names). cifs.bindto specifies the server or to be more precise network interface IP address where Alfresco listens. Installation guide has a lot more details (p. 90).
March 9, 2010 at 17:48
My machine is a 32bit XP / Alfresco 3.2R2.
(BTW some of the fields in my previous post didn’t display correctly once posted).
I tried all this, no result.
BTW, the folder subsystems doesn’t not exist by default, I just created it with empty files that I filled with the information you give here.
/alfresco works, /share fails.
I’m really disappointed, and may look at another product if I cannot make it work : AD integration is so painful and finally doesn’t work correctly…
March 10, 2010 at 10:59
Hello there,
first of all thank you for your excellent guide.
Ive the same problem like Christophe.
Is there any solution?
March 10, 2010 at 11:30
Most likely solution for your problem can be found here: http://forums.alfresco.com/en/viewtopic.php?f=47&t=24349&p=82484. Note that you should put the patch in $TOMCAT_HOME/webapps/share/WEB-INF/classes instead of $TOMCAT_HOME/shared/classes as was mentioned.
March 10, 2010 at 12:05
Hey Ivan,
thank you for your comment.
sorry but ive to ask you again. ive downloaded patch_r17646.zip and sharesso.patch.
Must i copy both files in $TOMCAT_HOME/webapps/share/WEB-INF/classes?
March 10, 2010 at 14:39
Copy just the zip file and unpack it there. Not sure but you might need to unpack it here too: $TOMCAT_HOME/webapps/alfresco/WEB-INF/classes
March 11, 2010 at 10:56
Hello,
Very very very helpfull !
I’m beginning with alfresco.
Is your doc valid with 3.2r2 community (install on windows system) ?
Thanks
March 11, 2010 at 11:21
Thanks for feedback. Yes, it is compatible (notice the fix for Share in comments).
March 11, 2010 at 11:29
Ok dude,
share works.
Another problem again :(.
In this file webscript-framework-config-custom.xml ive to uncomment:
alfresco/web-extension/alfresco-system.p12
pkcs12
alfresco-system
alfrescoCookie
Alfresco Connector
Connects to an Alfresco instance using cookie-based authentication
org.alfresco.connector.AlfrescoConnector
alfresco
Alfresco – user access
Access to Alfresco Repository WebScripts that require user authentication
alfrescoCookie
http://localhost:8080/alfresco/wcs
user
true
As i see in my alfresco logs, there are always warnings:
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/markup/edit.get.desc.xml due to error: 02110024 Failed to read script configuration file ; Unable to test document path: components/common/markup/edit.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/markup/edit.post.desc.xml due to error: 02110025 Failed to read script configuration file ; Unable to test document path: components/common/markup/edit.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/markup/view.get.desc.xml due to error: 02110026 Failed to read script configuration file ; Unable to test document path: components/common/markup/view.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/navigation/edit.get.desc.xml due to error: 02110027 Failed to read script configuration file ; Unable to test document path: components/common/navigation/edit.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/navigation/edit.post.desc.xml due to error: 02110028 Failed to read script configuration file ; Unable to test document path: components/common/navigation/edit.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/navigation/view.get.desc.xml due to error: 02110029 Failed to read script configuration file ; Unable to test document path: components/common/navigation/view.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/video/edit.get.desc.xml due to error: 02110030 Failed to read script configuration file ; Unable to test document path: components/common/video/edit.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/video/edit.post.desc.xml due to error: 02110031 Failed to read script configuration file ; Unable to test document path: components/common/video/edit.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/site-webscripts/components/common/video/view.get.desc.xml due to error: 02110032 Failed to read script configuration file ; Unable to test document path: components/common/video/view.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/index.get.desc.xml due to error: 02110033 Failed to read script configuration file ; Unable to test document path: org/alfresco/index.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,487 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/index.post.desc.xml due to error: 02110034 Failed to read script configuration file ; Unable to test document path: org/alfresco/index.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexall.get.desc.xml due to error: 02110035 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexall.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexfailures.get.desc.xml due to error: 02110036 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexfailures.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexfamily.get.desc.xml due to error: 02110037 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexfamily.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexlifecycle.get.desc.xml due to error: 02110038 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexlifecycle.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexpackage.get.desc.xml due to error: 02110039 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexpackage.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/indexuri.get.desc.xml due to error: 02110040 Failed to read script configuration file ; Unable to test document path: org/alfresco/indexuri.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/jsdebugger.get.desc.xml due to error: 02110041 Failed to read script configuration file ; Unable to test document path: org/alfresco/jsdebugger.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/jsdebugger.post.desc.xml due to error: 02110042 Failed to read script configuration file ; Unable to test document path: org/alfresco/jsdebugger.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/scriptdescription.get.desc.xml due to error: 02110043 Failed to read script configuration file ; Unable to test document path: org/alfresco/scriptdescription.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/scriptdump.get.desc.xml due to error: 02110044 Failed to read script configuration file ; Unable to test document path: org/alfresco/scriptdump.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/scriptinstall.get.desc.xml due to error: 02110045 Failed to read script configuration file ; Unable to test document path: org/alfresco/scriptinstall.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/scriptinstall.post.desc.xml due to error: 02110046 Failed to read script configuration file ; Unable to test document path: org/alfresco/scriptinstall.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/atomentry.post.desc.xml due to error: 02110047 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/atomentry.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/bogustest.post.desc.xml due to error: 02110048 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/bogustest.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/encodedsubmit.post.desc.xml due to error: 02110049 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/encodedsubmit.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/exception.get.desc.xml due to error: 02110050 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/exception.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/jsonecho.post.desc.xml due to error: 02110051 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/jsonecho.post.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/requestbody.put.desc.xml due to error: 02110052 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/requestbody.put.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/test/runas.get.desc.xml due to error: 02110053 Failed to read script configuration file ; Unable to test document path: org/alfresco/test/runas.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/org/alfresco/web/messages.get.desc.xml due to error: 02110054 Failed to read script configuration file ; Unable to test document path: org/alfresco/web/messages.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/content/associations/associations.get.desc.xml due to error: 02110055 Failed to read script configuration file ; Unable to test document path: web-studio/api/content/associations/associations.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/context/setcontext.get.desc.xml due to error: 02110056 Failed to read script configuration file ; Unable to test document path: web-studio/api/context/setcontext.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/importer/importer.get.desc.xml due to error: 02110057 Failed to read script configuration file ; Unable to test document path: web-studio/api/importer/importer.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/importer/statuscheck.get.desc.xml due to error: 02110058 Failed to read script configuration file ; Unable to test document path: web-studio/api/importer/statuscheck.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/login/login.get.desc.xml due to error: 02110059 Failed to read script configuration file ; Unable to test document path: web-studio/api/login/login.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/model/get.get.desc.xml due to error: 02110060 Failed to read script configuration file ; Unable to test document path: web-studio/api/model/get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/model/list.get.desc.xml due to error: 02110061 Failed to read script configuration file ; Unable to test document path: web-studio/api/model/list.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/model/put.get.desc.xml due to error: 02110062 Failed to read script configuration file ; Unable to test document path: web-studio/api/model/put.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/page/associations/associations.get.desc.xml due to error: 02110063 Failed to read script configuration file ; Unable to test document path: web-studio/api/page/associations/associations.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/prebuilt/list.get.desc.xml due to error: 02110064 Failed to read script configuration file ; Unable to test document path: web-studio/api/prebuilt/list.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/region/region-get.get.desc.xml due to error: 02110065 Failed to read script configuration file ; Unable to test document path: web-studio/api/region/region-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/regions/regions-get.get.desc.xml due to error: 02110066 Failed to read script configuration file ; Unable to test document path: web-studio/api/regions/regions-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/resource/sites.get.desc.xml due to error: 02110067 Failed to read script configuration file ; Unable to test document path: web-studio/api/resource/sites.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,503 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/resource/spaces.get.desc.xml due to error: 02110068 Failed to read script configuration file ; Unable to test document path: web-studio/api/resource/spaces.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/resource/webapp.get.desc.xml due to error: 02110069 Failed to read script configuration file ; Unable to test document path: web-studio/api/resource/webapp.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/site/create.get.desc.xml due to error: 02110070 Failed to read script configuration file ; Unable to test document path: web-studio/api/site/create.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/template/absolutelayout/region/delete/deleteregion-get.get.desc.xml due to error: 02110071 Failed to read script configuration file ; Unable to test document path: web-studio/api/template/absolutelayout/region/delete/deleteregion-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/template/tablelayout/panel/delete/deletepanel-get.get.desc.xml due to error: 02110072 Failed to read script configuration file ; Unable to test document path: web-studio/api/template/tablelayout/panel/delete/deletepanel-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/template/tablelayout/region/delete/deleteregion-get.get.desc.xml due to error: 02110073 Failed to read script configuration file ; Unable to test document path: web-studio/api/template/tablelayout/region/delete/deleteregion-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/api/template/tablelayout/row/delete/deleterow-get.get.desc.xml due to error: 02110074 Failed to read script configuration file ; Unable to test document path: web-studio/api/template/tablelayout/row/delete/deleterow-get.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/incontext/components.get.desc.xml due to error: 02110075 Failed to read script configuration file ; Unable to test document path: web-studio/incontext/components.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/trees/comptree.get.desc.xml due to error: 02110076 Failed to read script configuration file ; Unable to test document path: web-studio/trees/comptree.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/trees/contenttree.get.desc.xml due to error: 02110077 Failed to read script configuration file ; Unable to test document path: web-studio/trees/contenttree.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/trees/navtree.get.desc.xml due to error: 02110078 Failed to read script configuration file ; Unable to test document path: web-studio/trees/navtree.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/trees/sitestree.get.desc.xml due to error: 02110079 Failed to read script configuration file ; Unable to test document path: web-studio/trees/sitestree.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/trees/spacestree.get.desc.xml due to error: 02110080 Failed to read script configuration file ; Unable to test document path: web-studio/trees/spacestree.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/content/associations/add/wizard.get.desc.xml due to error: 02110081 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/content/associations/add/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/content/associations/remove/wizard.get.desc.xml due to error: 02110082 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/content/associations/remove/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/editregion/wizard.get.desc.xml due to error: 02110083 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/editregion/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/navigation/add/wizard.get.desc.xml due to error: 02110084 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/navigation/add/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/navigation/copy/wizard.get.desc.xml due to error: 02110085 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/navigation/copy/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/navigation/delete/wizard.get.desc.xml due to error: 02110086 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/navigation/delete/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/navigation/edit/wizard.get.desc.xml due to error: 02110087 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/navigation/edit/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/page/associations/add/wizard.get.desc.xml due to error: 02110088 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/page/associations/add/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/page/associations/remove/wizard.get.desc.xml due to error: 02110089 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/page/associations/remove/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/regionmanager/absoluteposition/wizard.get.desc.xml due to error: 02110090 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/regionmanager/absoluteposition/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/regionmanager/tablelayout/wizard.get.desc.xml due to error: 02110091 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/regionmanager/tablelayout/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/removecomponent/wizard.get.desc.xml due to error: 02110092 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/removecomponent/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/site/config/siteconfig.get.desc.xml due to error: 02110093 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/site/config/siteconfig.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/template/add/wizard.get.desc.xml due to error: 02110094 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/template/add/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/template/copy/wizard.get.desc.xml due to error: 02110095 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/template/copy/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/template/delete/wizard.get.desc.xml due to error: 02110096 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/template/delete/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/template/edit/wizard.get.desc.xml due to error: 02110097 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/template/edit/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,518 WARN [org.alfresco.web.scripts.DeclarativeRegistry] Unable to register script classpath:alfresco/webscripts/web-studio/wizards/template/tablelayoutmanager/wizard.get.desc.xml due to error: 02110098 Failed to read script configuration file ; Unable to test document path: web-studio/wizards/template/tablelayoutmanager/wizard.get.config.xml in remote store: alfresco-webuser due to error: 500
10:17:42,628 INFO [org.alfresco.web.site.FrameworkHelper] Successfully Initialized Web Framework
10:17:43,878 ERROR [org.alfresco.web.scripts.AbstractRuntime] Exception from executeScript – redirecting to status template error: 02110004 Login failed
org.alfresco.web.scripts.WebScriptException: 02110004 Login failed
March 11, 2010 at 11:56
This is due to Web Studio which is an early prototype. I suggest you just remove the web studio war. If you want to try it though check this: http://forums.alfresco.com/en/viewtopic.php?f=8&t=21993
March 12, 2010 at 11:19
How can i set that only the group alfresco-member can join the alfresco share and explorer site?
March 15, 2010 at 13:02
“Share” finally works with this patch !
Thank you very much for your help.
March 17, 2010 at 13:39
Curious thing, all works except that with CIFS : after copied a file directly in “User Homes\Olivier” the file size is zero and my file is empty… (3r2 on xp and client on xp).
A idea ?
March 17, 2010 at 18:23
I complete my post about copy with CIFS : i resolved my problem ! I used a specific tool (“supercopier2”) to replace windows copy function. After closed this tool, all is correct.
March 19, 2010 at 18:53
Like Olivier I have an issue with the \\a\Alfresco\User Homes
Properties of files in “User Homes” shows 0 even if in the explorer it says __CheckInOut.exe 384kb.
Another thing, more important, is that if I try to enter one of its subfolders , the virtual server stops working and I have to stop alfresco and restart it and then the virtual server to have it back online…..
Alfresco links in the CIFS share go to http://localhost:8080… which is wrong from a client.
I believe I have to change all by my server name in the configuration files ?
March 19, 2010 at 19:05
Sorry my fault, I have changed hostname, HOSTNAME and DOMAIN to the right values, and it seems ok.
March 24, 2010 at 17:53
unfortunately i get the following error after configuring ldap sync:
Client using NTLMv2 logon, not valid with passthru authentication
any suggestions?
March 24, 2010 at 21:31
NTLMv2 is not supported with passthru authentication. You need to enable basic NTLM on client side.
March 25, 2010 at 10:01
well, soon i will upgrade the domain controllers to windows server 2008 r2.
then it would not be possible to downgrade to ntlmv1. another point is that the security of ntlmv1 is not as good as in ntlmv2…
any other solution you can think of?
March 25, 2010 at 10:16
sry my mistake. i will enable it at the client side… thanks
March 25, 2010 at 15:03
now alfresco seems fine. but share-login is not working atm.
any suggestions? thanks a lot!
March 25, 2010 at 15:20
There is a solution in the comments above.
March 25, 2010 at 15:57
Dear Ivan, i have read that. But the patch doesn´t work for me.
i patched the jar and also tried to only copy the org-folder into the 2 mentioned folders. but no change… still no working
March 25, 2010 at 17:58
finally got it working, thanks a lot!
March 31, 2010 at 11:37
ldap-authentication is working fine now. but still i can´t sync the users i defined.
I always get the following output:
——–
11:32:19,746 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Synchronizing users and groups with user registry ‘ldap-ad1’
11:32:19,746 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving all groups from user registry ‘ldap-ad1’
11:32:19,793 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 Group Analysis: Commencing batch of 0 entries
11:32:19,793 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 Group Analysis: Completed batch of 0 entries
11:32:19,793 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Retrieving users changed since 30.03.2010 16:00:49 from user registry ‘ldap-ad1’
11:32:19,809 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 User Creation and Association: Commencing batch of 0 entries
11:32:19,809 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] ldap-ad1 User Creation and Association: Completed batch of 0 entries
11:32:19,824 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] Finished synchronizing users and groups with user registry ‘ldap-ad1’
11:32:19,840 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] 0 user(s) and 0 group(s) processed
————–
any hints for me? i already delegated the right for the ldap-user to read inetorg info. i also tried different alfresco-groups configurations (nothing is working).
thanks
March 31, 2010 at 13:21
This could be likely due to faulty LDAP queries. I suggest you start with a simple query and then build on it to filter down results. Note that faulty query won’t return an error but just 0 results as in your case. SysInternals AD Explorer is your best friend here…
March 31, 2010 at 19:44
Authentication works. However, I get an synchronization error:
Caused by: java.text.ParseException: Unparseable date: “20100325132918.0Z”
Any suggestions?
In additon, I am no longer able to log on as admin from the localhost:
HTTP Status 500-
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
net.sf.acegisecurity.AuthenticationServiceException: Failed to open passthru auth session
org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticatePassthru(NTLMAuthenticationComponentImpl.java:789)
org.alfresco.repo.security.authentication.ntlm.NTLMAuthenticationComponentImpl.authenticate(NTLMAuthenticationComponentImpl.java:560)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:304)
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
$Proxy162.authenticate(Unknown Source)
org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.processType1(BaseNTLMAuthenticationFilter.java:401)
org.alfresco.repo.webdav.auth.BaseNTLMAuthenticationFilter.doFilter(BaseNTLMAuthenticationFilter.java:313)
sun.reflect.GeneratedMethodAccessor372.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:597)
org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:109)
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
$Proxy167.doFilter(Unknown Source)
org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:88)
Again, any help is very much appreciated.
thanks
April 22, 2010 at 04:16
Please refer to comment by Jason jolley on February 16, 2010 @ 13:58, it might helps.
it is the apostrophe in the synchronization configuration:
yyyyMMddHHmmss’.0Z’
Make sure the ‘(single quote) is not an `(apostrophe). If in doubt, do a comparison of your edited file and the default configuration.
April 22, 2010 at 04:38
I believe I have SSO working properly but not 100% sure thus would like to confirm. Any help would be very much appreciated
Server 1: Win server 2003R2 – AD
Server 2: Win server 2003R2 – Alfresco ECM 3.2
Client: Win XP Pro SP3
Scenario:
Server 1 is the domain controller (AD), DNS and DHCP server.
Server 1 and Client is registered in the AD.
Question:
When I login to Client machine as an AD authenticated user and start the browser and go to the alfresco site e.g. http://server2.company.net:8080/alfresco, I am prompted by a popup window asking my username and password (AD Username/Password that is). Is this the expected behaviour?
The alfresco login page is not there anymore. The popup will only appear once and if I open the alfresco site on other window or tab it will automatically log me in.