Hello Alfresco community,
we are currently running Alfresco version v7.3.0 with the AOS addon (version: 1.6.0) on our server.
Our problem is that users who open an Office document from the "Recently Opened Menu Tab" - the document first opens in a read-only mode. Only after activating editing writing and saving is possible. (See: Photo 1: Write protected mode
The users are using the Office version starting from 2019. The Source of the Documents (where they were opened first) is from a network drive, it was added via WEBDAV with the URL https://***dms.***.com/alfresco/aos/UserHomes/[specific User] .
(Office 2013 seems fine and there arent any Problems similiar to that)
What we triedso far:
- Adding WEBDAV drives Path to the Trusted Sites in the Office Trust Center. (example: K:\[User Home webdav link])
- Disable Protected View in the Office Trust Center (all three Options)
- Adding the WEBDAV / AOS URL to the Intranet Zone / Trusted Sites (example: https://...dms.com/aos/...)
Glad if anyone can help with this problem!
sir can you show your nginx.conf , docker-compose.yml , and alfresco-global.properties config thanks!
We use the system exclusively on our internal network, so no proxy sits in front of the system. Also we do not use Docker.
We are running the System from bitnami. Alfresco Community Cloud Hosting, Alfresco Community Installer, Docker Container and VM (bitnami.com...
I can only attach the alfresco-global.properties now:
###You need to restart the server for the configuration changes to take effect. dir.root=/opt/ALFRESCODATA dir.keystore=${dir.root}/keystore alfresco.context=alfresco alfresco.host=**.**.**.com alfresco.port=443 alfresco.protocol=https share.context=share share.host=**.**.**.com share.port=443 share.protocol=https ### database connection properties ### db.driver=org.mariadb.jdbc.Driver db.username=bn_alfresco db.password=*** db.name=bitnami_alfresco db.url=jdbc:mysql://127.0.0.1:3306/${db.name}?useUnicode=yes&characterEncoding=UTF-8 ### FTP Server Configuration ### ftp.enabled=true ftp.port=2121 ftp.ipv6.enabled=false #ftp.bindto=local_machine_ip ### RMI service ports ### alfresco.rmi.services.port=50500 avm.rmi.service.port=0 avmsync.rmi.service.port=0 attribute.rmi.service.port=0 authentication.rmi.service.port=0 repo.rmi.service.port=0 action.rmi.service.port=0 deployment.rmi.service.port=0 ### Trashcan properties trashcan-cleaner.cron=0 30 * * * ? trashcan-cleaner.keepPeriod=P1D trashcan-cleaner.deleteBatchCount=10000 ### Initial admin password ### alfresco_user_store.adminusername=admin alfresco_user_store.adminpassword=*** ### E-mail site invitation setting ### notification.email.siteinvite=false ### File Protocol Root ### protocols.rootPath=/${spaces.company_home.childname} ### License location ### dir.license.external=/opt/bitnami/alfresco ### BMP Engine ### system.workflow.engine.jbpm.enabled=false ### Solr indexing ### index.subsystem.name=solr6 solr.port=8983 solr.host=localhost solr.base.url=/solr solr.secureComms=secret solr.sharedSecret=*** ### ActiveMQ configuration messaging.broker.url=failover:(tcp://localhost:61616)?timeout=3000 messaging.broker.username=admin messaging.broker.password=*** # Shared File Store properties: sfs.url=http://localhost:8099 sfs.endpoint=${sfs.url}/alfresco/api/-default-/private/sfs/versions/1/file # Alfresco PDF renderer alfresco-pdf-renderer.root=/opt/bitnami/alfresco-pdf-renderer alfresco-pdf-renderer.exe=${alfresco-pdf-renderer.root}/bin/alfresco-pdf-renderer # Transform Core properties: localTransform.core-aio.url=http://localhost:8090/ alfresco-pdf-renderer.url=http://localhost:8090/ jodconverter.enabled=true jodconverter.officeHome=/usr/lib/libreoffice img.url=http://localhost:8090/ tika.url=http://localhost:8090/ transform.misc.url=http://localhost:8090/ # Content store delete job system.content.orphanCleanup.cronExpression=0 0 1 * * ? ## LDAP Authentication Conf # ############################### ##Authentizierungsreihenfolge authentication.chain=kerberos1:kerberos,alfrescoNtlm1:alfrescoNtlm,ldap1:ldap-ad ntlm.authentication.sso.enabled=false ldap.authentication.active=true ldap.synchronization.active=true ldap.authentication.allowGuestLogin=false ldap.authentication.userNameFormat=%s@**.com ldap.authentication.java.naming.provider.url=ldap://*** ldap.synchronization.java.naming.security.authentication=simple ldap.synchronization.java.naming.security.principal=CN=**,CN=Users,DC=**,DC=** ldap.synchronization.java.naming.security.credentials=**** ldap.synchronization.queryBatchSize=1000 ldap.synchronization.personType=user ldap.synchronization.userFirstNameAttributeName=givenName ldap.synchronization.userLastNameAttributeName=sn ldap.synchronization.userEmailAttributeName=mail ldap.authentication.defaultAdministratorUserNames=*** ldap.synchronization.userIdAttributeName=sAMAccountName ## Set up regular synchronization with the LDAP server ## synchronization.syncWhenMissingPeopleLogIn=true synchronization.synchronizeChangesOnly=false ###synchronization.allowDeletions=true synchronization.allowDeletions=false ###Nicht noetig, da synchr jede 1 Min synchronization.syncOnStartup=true synchronization.syncOnStartup=true # Wenn nicht in ldap, dann auch nicht anmelden synchronization.autoCreatePeopleOnLogin=false # When TESTING, synchronise every 5 minutes # secs min hour dom mon dow synchronization.import.cron=0 0/1 * * * ? ldap.synchronization.enableProgressEstimation=true ldap.authentication.java.naming.security.authentication=simple ldap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory ldap.authentication.escapeCommasInBind=false ldap.authentication.escapeCommasInUid=false ldap.synchronization.modifyTimestampAttributeName=modifyTimestamp ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z' ldap.synchronization.userOrganizationalIdAttributeName=msExchALObjectVersion ldap.synchronization.defaultHomeFolderProvider=userHomesHomeFolderProvider ldap.synchronization.groupIdAttributeName=cn ldap.synchronization.groupType=group ldap.synchronization.groupMemberAttributeName=member ###User Synchronisation ldap.synchronization.personType=user ldap.synchronization.userSearchBase=cn=Users, DC=xx, DC=xx ###ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_Alle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)) ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)) ###ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0}))) ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0}))) ###ldap.synchronization.personType=user ###ldap.synchronization.userSearchBase=cn=Users, DC=xx, DC=xx #######ldap.synchronization.userSearchBase=DC=xx, DC=xx #######ldap.synchronization.personQuery=(&(objectClass\=user)(memberOf\=CN\=g_Alle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)) #######ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,CN\=Users,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0}))) ###ldap.synchronization.personDifferentialQuery=(&(objectClass\=user)(memberOf\=CN\=g_aAlle,OU\=Alfresco,DC\=xx,DC\=xx)(userAccountControl\:1.2.840.113556.1.4.803\:\=512)(!(modifyTimestamp<\={0}))) ###Groupen Synchronisation ldap.synchronization.groupSearchBase=OU=Alfresco, DC=xx, DC=xx ldap.synchronization.groupQuery=(objectclass=group) ldap.synchronization.groupDifferentialQuery=(&(objectclass\=group)(!(modifyTimestamp<\={0}))) triggering.aspect.qname={http://www.alfresco.org/model/content/1.0}templatable #Versioning version.store.initialVersion=false version.store.enableAutoVersioning=false version.store.enableAutoVersionOnUpdateProps=false ### Kerberos properties ### kerberos.authentication.sso.enabled=true kerberos.authentication.realm=xx.xx kerberos.authentication.sso.fallback.enabled=true kerberos.authentication.user.configEntryName=Alfresco
Regarding the problem we have found that Office stores the recently opened documents in a path (C:\Users\[Some User]\AppData\Roaming\Microsoft\Office\Recent) that can be found as shortcuts. See phot 2.
In the shortcuts instead of the UNC path (K:\[some path of user]\SomeDocument.pdf] the direct URL to the document (https://****/aos/UserHomes/[some User]/SomeDocument.pdf) is given.
If you open the document directly from the UNC path in the Office program or from the File Explorer, the specified error does not occur.
See picture: 2 URL instead of UNC in the Shortcut from the Hyperlinks of the Office Program
We also tried Adding this Path to the Trusted Paths in the Office Programms, no changes.
Ask for and offer help to other Alfresco Content Services Users and members of the Alfresco team.
Related links:
By using this site, you are agreeing to allow us to collect and use cookies as outlined in Alfresco’s Cookie Statement and Terms of Use (and you have a legitimate interest in Alfresco and our products, authorizing us to contact you in such methods). If you are not ok with these terms, please do not use this website.