#2
Alfresco Authentication Subsystems
Community Edition 3.2
Doc. v. 0.1 - 23/07/09
Wildan Maulana | wildan [at] tobethink.com

About Me
• Freelance Consultant - Software
Developer – System Integrator
• Founder of OpenThink Labs
• Open Source Software (OSS) Evangelist
• Main Developer of OpenThink SAS
• More Info :
– Blog : http://wildanm.wordpress.com
– Y! : hawking_123
– Gtalk : wildan.m
– Mobile Phone : +6287884599249

What are the Authentication
Subsystems
Type Description Single-Sign-On CIFS User Registry Export ?
(SSO) ? Authentication
alfrescoNtlm Native Alfresco
authentication
Yes, NTLM Yes No
ldap Authentication
and user registry
No No Yes
export via the
LDAP protocol
(e.g. OpenLDAP)
ldap-ad Authentication
and user registry
No No Yes
export from
Active Directoy
via the LDAP
protocol
passthru Authentication
via a Windows
Yes, NTLM Yes No
domain server
kerberos Authentication
via a Kerberos
Yes, Yes No
Realm SPNEGO

Kerberos Package in Ubuntu
• krb5-config - Configuration files for Kerberos Version 5
• krb5-doc - Documentation for MIT Kerberos
• krb5-user - Basic programs to authenticate using MIT Kerberos
• libkrb5-dbg - Debugging files for MIT Kerberos
• libkrb5-dev - Headers and development libraries for MIT Kerberos
• libkrb53 - MIT Kerberos runtime libraries
• libpam-krb5 - PAM module for MIT Kerberos
• krb5-admin-server - MIT Kerberos master server (kadmind)
• krb5-auth-dialog - dialog for reauthenticating kerberos tickets
• krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos
• krb5-ftpd - Secure FTP server supporting MIT Kerberos
• krb5-kdc - MIT Kerberos key server (KDC)
• krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
• krb5-pkinit - PKINIT plugin for MIT Kerberos
• krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos
• krb5-telnetd - Secure telnet server supporting MIT Kerberos
•