Problems with SOLR and Login in share

[plean]

I got some progress I think ... ... even so not yet working.

I did following 2 things:

(1) I did put absolute paths in solr4.xml

<Context crossContext="true">
  <Environment name="solr/home"  type="java.lang.String" value="/opt/alfresco-5.0.d/alf_data2/solr4" override="true"/>
  <Environment name="solr/model/dir" type="java.lang.String" value="/opt/alfresco-5.0.d/alf_data2/solr4/model" override="true"/>
  <Environment name="solr/content/dir" type="java.lang.String" value="/opt/alfresco-5.0.d/alf_data2/solr4/content" override="true"/>
</Context>

(2) Link solr4 and solr directories:

cd /usr/local/alfresco-5.0.d/

ln -s solr4 solr

Only the first did not change a lot, but after the second one, I now can start solr4 app without error.

Unfortuatley, login does not yet wortk, but I get much more messages in access_log:

192.168.211.1 - - [24/Jul/2017:13:54:12 +0200] "POST /share/page/dologin HTTP/1.1" 302 -
127.0.0.1 - - [24/Jul/2017:13:54:12 +0200] "POST /alfresco/s/api/login HTTP/1.1" 403 368
192.168.211.1 - - [24/Jul/2017:13:54:12 +0200] "GET /share/page/?error=true HTTP/1.1" 200 37889
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromId=0&toId=2000&maxResults=1 HTTP/1.1" 200 235
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromId=0&toId=2000&maxResults=1 HTTP/1.1" 200 235
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/transactions?minTxnId=0&maxTxnId=2000&maxResults=1 HTTP/1.1" 200 245
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500617624687&toTime=1500621224687&maxResults=2000 HTTP/1.1" 200 782
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500617624687&toTime=1500621224687&maxResults=2000 HTTP/1.1" 200 782
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/transactions?fromCommitTime=1500617631508&toCommitTime=1500621231508&maxResults=2000 HTTP/1.1" 200 2092
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500621224465&toTime=1500624824465&maxResults=2000 HTTP/1.1" 200 345
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500621224465&toTime=1500624824465&maxResults=2000 HTTP/1.1" 200 345
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/transactions?fromCommitTime=1500621231496&toCommitTime=1500624831496&maxResults=2000 HTTP/1.1" 200 379
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500621224687&toTime=1500624824687&maxResults=2000 HTTP/1.1" 200 235
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500621224687&toTime=1500624824687&maxResults=2000 HTTP/1.1" 200 235
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/transactions?fromCommitTime=1500621231508&toCommitTime=1500624831508&maxResults=2000 HTTP/1.1" 200 246
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500624824687&toTime=1500632024687&maxResults=2000 HTTP/1.1" 200 127
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500624824687&toTime=1500632024687&maxResults=2000 HTTP/1.1" 200 127
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/transactions?fromCommitTime=1500624831508&toCommitTime=1500632031508&maxResults=2000 HTTP/1.1" 200 115
127.0.0.1 - CN=Alfresco Repository Client, OU=Unknown, O=Alfresco Software Ltd., L=Maidenhead, ST=UK, C=GB [24/Jul/2017:13:54:15 +0200] "GET /alfresco/service/api/solr/aclchangesets?fromTime=1500632024687&toTime=1500646424687&maxResults=2000 HTTP/1.1" 200 127

[afaust · Accepted solution]

That means SOLR indexing now works and you could search for content - if you were able to log in that is...

What did you set for the authentication chain in alfresco-global.properties? If you have not enabled alfrescoNtlm then you cannot login as admin because Alfresco will not use the internal user data and MD4 hash...

[plean]

I did have nothing with "authentication" in alfresco-global.properties, I did now add and reloaded the alfresco app:

authentication.chain=alfrescoNtlm1:alfrescoNtlm

I now get the following when trying to log in:

192.168.211.1 - - [24/Jul/2017:15:20:23 +0200] "POST /share/page/dologin HTTP/1.1" 302 -
127.0.0.1 - - [24/Jul/2017:15:20:23 +0200] "POST /alfresco/s/api/login HTTP/1.1" 403 368
192.168.211.1 - - [24/Jul/2017:15:20:23 +0200] "GET /share/page/?error=true HTTP/1.1" 200 37889

So the errors seem to be the same as above...

[afaust]

OK - if you did have nothing then the default was active, which actually is alfrescoNtlm.

Well, then the only remaining explanation is that the password hash simply does not match. You might want to try set the MD4 hash to a value that you explicitly calculated for a given password (do a SQL update on the alf_node_properties row) and then try to login with that password. If that then still does not work, you may have a weird issue somewhere in communication channel up to the comparison hash generation that results in a different hash value... Never encountered any of these so I don't know how / where that could happen...

[plean]

# echo admin | openssl md4
(stdin)= 23416c5cf7b6d5f466a7f10590a2b99c

which is not 209c6174da490caeb422f3fa5a7ae634 

weird ... I did now do:

UPDATE alf_node_properties
SET string_value='209c6174da490caeb422f3fa5a7ae634' where node_id=4 and qname_id=11;

I still get the following when loging in:

127.0.0.1 - - [24/Jul/2017:16:46:34 +0200] "POST /alfresco/s/api/login HTTP/1.1" 403 368
192.168.211.1 - - [24/Jul/2017:16:46:34 +0200] "POST /share/page/dologin HTTP/1.1" 302 -
192.168.211.1 - - [24/Jul/2017:16:46:34 +0200] "GET /share/page/?error=true HTTP/1.1" 200 37889

[plean]

When I try to open /alfresco/s/api/login?u=admin&pw=admin

I get following response:

<response>

<status>

<code>403</code>

<name>Forbidden</name>

<description>Server understood the request but refused to fulfill it.</description>

</status>

<message>06250013 Login failed</message>

<exception/>

<callstack></callstack>

<server>Community v5.0.0 (d r99759-b2) schema 8.022</server>

<time>25.07.2017 10:02:11</time>

</response>

[plean]

I will close this issue as most of the problems, except the login-issue are ok now. Thanks to Axel Faust‌!

I created a new and cleaner post for the login-issue: