AD logins work for pages but not for attachments

[maphew]

I have MindTouch Core v.9.08.3 using Active Directory for logins (using the NTLM method), and that works in so far as people can login using their domain credentials and view & edit pages. However for any page that has attachments users get prompted to login for each and every attachment, and, every login attempt fails.

I remember seeing a thread with similar symptoms but can't find it again. Can someone point me in the right direction?

thanks

[maphew]

correction: the extra login prompts for attachments only occur when connecting from a Windows7 machine. WinXP has no troubles.

[mrfredrik]

Try this
Control Panel - Administrative Tools - Local Security Policy

Local Policies - Security Options

Network security: LAN Manager authentication level
Send LM & NTLM responses

Minimum session security for NTLM SSP
Disable Require 128-bit encryption

[maphew]

thanks for the suggestion mrfrederik, however that didn't change anything for me.

[MaxM]

You're not running into this issue are you?

http://forums.developer.mindtouch.com/showthread.php?t=7113

[maphew]

You're not running into this issue are you?

http://forums.developer.mindtouch.com/showthread.php?t=7113

ah yes, that's the thread I was looking for, thank you. My symptoms are a little different, but I'll add to that thread instead of here.

[maphew]

I finally solved this issue. The route was long and tortured to get here so I'm not sure if this is the complete solution, but the final change which worked was ensure the computer name/hostname/netbios name is the same in all of these files:



/etc/hosts:
# make sure FQDN is before the short name!
127.0.0.1 wiki.internal.dom.ca wiki localhost

/etc/hostname:
wiki

/etc/samba/smb.conf (partial):
[global]
netbios name = wiki

# netbios names of primary and backup domain controllers
# '...server = *' doesn't work
password server = primaryDC backupDC

[t.kammerl]

I've the same problem, but this doesn't work for me.

I have MindTouch Core v.9.12.2 also using Active Directory for logins with NTLM.
The problem is the same: for any page that has attachments users get prompted to login.

It occurs when connecting from WinXp machines, but just with internet explorer
When I use firefox it works (after I had modified network.automatic-ntlm.trusted-uris in about.config).

Any ideas?

[t.kammerl]

I think the linux server need an authorization from the WindowsXP client to display the attachments.
Because if there is no attachment at a page, no auth dialog prompts.

What configuration must be changed?