Search

That means that you're not getting the correct roles. OpenKM uses ROLE_USER and ROLE_ADMIN by default, if you have the option simply create these two groups in your AD, add a test user to each and then try again. Otherwise you'll have to change the default roles in OpenKM configuration and remove th...

Try using the AD auth provider that's built into spring security: http://docs.spring.io/spring-security/site/docs/3.1.x/reference/ldap.html I also wrote a small tutorial on how to get Kerberos working for SSO - http://wiki.openkm.com/index.php/Kerberos Since it's an integral part of AD you could als...

OpenKM will automatically generate a user if the AD authentication is sucessful.

Hi

I was able to get Kerberos SSO working for OpenKM webpage, but not the webservices.

http://forum.openkm.com/viewtopic.php?f=6&t=9371 (this procedure still works in 6.2.4).

But if I understood right, you want to use the auth token that you get via wsdl auth for browser login, correct?

Check ~/.davfs2/davs2.conf, there should be a line " if_match_bug 1", try to uncomment it, remount the folder and try again.

You can also try to increase the maxPostsize in server.xml , in the <Connector> segment.

You'll have to pass the authenticated user in header over the proxy-ajp module in apache (if your portal is on another server you'll have to tell the Tomcat to listen for ajp connections from that ip) and adjust the Spring Security config in OpenKM for preauth mode.

http://sourceforge.net/projects/openkm/files/6.2/

You'll have to replace the authentication manager in OpenKM.xml:

http://static.springsource.org/spring-s ... /ldap.html - scroll down to the AD example.

Another example on OKM wiki:

http://wiki.openkm.com/index.php/Active ... OpenKM_6.2

http://wiki.openkm.com/index.php/MySQL_-_OpenKM_6.2

Use ./catalina.sh run or ./startup to run it in background.

Glad you got it working . Could you not mount the share as user without first adding the user to davfs2 group? It's been a while since I've done this procedure, hence why I didn't mention it in my previous post - I forgot about it .

You should first make sure that davfs can mount the webdav share as user by default, without doing chown on folders. Add the entry to /etc/fstab http://dms:8080/OpenKM/webdav /home/username/webdav davfs noauto,user,rw 0 0 And then in user's home dir, look for ./davfs2/davfs2.conf There you'll find a...

That is correct.

edit: If you go to login page (login.jsp) directly, the browser won't perform negotiation because that url is exempt from the protected urls listed in Spnego Entry Point bean. To perform spnego auth you have to visit **/OpenKM/ url which is the default.

$tomcat_install_dir/logs

Alternatively you can run the server with ./catalina run instead of ./startup and check the error messages directly on stdout.