AnsweredAssumed Answered

CIFS and Kerberos, Windows XP unable to map network drive

Question asked by esafonov on Nov 24, 2009
Latest reply on Nov 24, 2009 by mikeh
After installing Alfresco 3.2 CE and configuring Alfresco against Active Directory using this http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems, I'v get this symptoms:
MS Windows XP Professional SP3 can't map network drive to Alfresco CIFS share using full host name (with domain part), but can map using short form (only hostname, without domain part):

does'nt work:
net use p: "\\alfresco.mydomain.ru\alfresco"
with error in alfresco.log and catalina.out:
ERROR [org.alfresco.smb.protocol.auth] java.lang.NullPointerException
And Windows XP says:
System error 1311

do work:
net use "\\alfresco.mydomain.ru"
net use p: "\\alfresco.mydomain.ru\alfresco"

I'v done some checks:
    - time synchronization is ok,
    - kerberos is alive
    - can get ticket at alfresco server with kinit,
    - ldap syncronization is ok
    - user can login into alfresco with Alfresco Explorer login
The question is,
Why Windows XP workstation can map network drive to Alfresco CIFS server only if there is a connection to IPC$ before mapping ?
Does anybody have the same thing?


===============
[size=85]Centos 5.3 x86_64 Linux 2.6.18-164.el5
java version "1.6.0_11" Java(TM) SE Runtime Environment (build 1.6.0_11-b03) Java HotSpot(TM) 64-Bit Server VM (build 11.0-b16, mixed mode)
Active directory server: MS Windows 2003 Standart Edition server SP2
Workstation client: MS Windows XP Professional SP3
Alfresco 3.2 CE[/size]

/opt/alfresco/tomcat/shared/classes/alfresco-global.properties
[size=85]
cifs.enabled=true
cifs.serverName=alfresco
cifs.domain=LOCAL.UGSG.RU
cifs.hostannounce=true

authentication.chain=ldap1:ldap-ad,kb1:kerberos

…skipped…

kerberos.authentication.sso.enabled=true
kerberos.authentication.realm=LOCAL.UGSG.RU
kerberos.authentication.authenticateHTTP=false
kerberos.authentication.authenticateCIFS=true
kerberos.authentication.user.configEntryName=Alfresco
kerberos.authentication.cifs.configEntryName=AlfrescoCIFS
kerberos.authentication.http.configEntryName=AlfrescoHTTP

kerberos.authentication.http.password=skipped
kerberos.authentication.cifs.password=skipped
[/size]

added:
There is a similar bug:
https://issues.alfresco.com/jira/browse/ETHREEOH-531

Outcomes