Return-Path: X-Original-To: apmail-chemistry-dev-archive@www.apache.org Delivered-To: apmail-chemistry-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 76FEB77FF for ; Fri, 16 Sep 2011 14:18:56 +0000 (UTC) Received: (qmail 77792 invoked by uid 500); 16 Sep 2011 14:18:56 -0000 Delivered-To: apmail-chemistry-dev-archive@chemistry.apache.org Received: (qmail 77749 invoked by uid 500); 16 Sep 2011 14:18:56 -0000 Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@chemistry.apache.org Delivered-To: mailing list dev@chemistry.apache.org Received: (qmail 77741 invoked by uid 99); 16 Sep 2011 14:18:56 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Sep 2011 14:18:56 +0000 X-ASF-Spam-Status: No, hits=-2.3 required=5.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of florian.mueller@alfresco.com designates 207.126.144.137 as permitted sender) Received: from [207.126.144.137] (HELO eu1sys200aog114.obsmtp.com) (207.126.144.137) by apache.org (qpsmtpd/0.29) with SMTP; Fri, 16 Sep 2011 14:18:48 +0000 Received: from zimbra.alfresco.com ([88.151.129.3]) by eu1sys200aob114.postini.com ([207.126.147.11]) with SMTP ID DSNKTnNasUMpT+YNIm2xSYQ348K+czdSo2YQ@postini.com; Fri, 16 Sep 2011 14:18:28 UTC Received: from localhost (localhost.localdomain [127.0.0.1]) by zimbra.alfresco.com (Postfix) with ESMTP id ADD5F41411C; Fri, 16 Sep 2011 15:18:25 +0100 (BST) X-Virus-Scanned: amavisd-new at unx-d-manc4.tc.ifeltd.com Received: from zimbra.alfresco.com ([127.0.0.1]) by localhost (zimbra.alfresco.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b0XH6mzg9hOb; Fri, 16 Sep 2011 15:18:25 +0100 (BST) Received: from Florian-Mullers-MacBook-Pro-2.local (unknown [194.75.202.169]) (Authenticated sender: florian.mueller) by zimbra.alfresco.com (Postfix) with ESMTP id 3A611414117; Fri, 16 Sep 2011 15:18:25 +0100 (BST) Message-ID: <4E735AA5.5010905@alfresco.com> Date: Fri, 16 Sep 2011 15:18:13 +0100 From: =?ISO-8859-1?Q?Florian_M=FCller?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:6.0.2) Gecko/20110902 Thunderbird/6.0.2 MIME-Version: 1.0 To: dev@chemistry.apache.org CC: Naresh Bhatia Subject: Re: Pointers on connecting to Sharepoint 2010 using OpenCMIS References:

In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org Naresh, A few checkpoints: - Are you setting the NTLMAuthenticationProvider in the session parameters? - Follows the user name the pattern "\"? - Is this the only application in your Tomcat? If not, is there another application that uses the java.net.Authenticator class? - Does your application create multiple sessions with different users? (That doesn't work with NTLM.) - Does it fail immediately when it tries to retrieve the repository infos? If not, you are running in another known problem with NTLM. Some operations have to be repeated once in a while to work correctly. Again, NTLM is not a viable option for a production system. - Florian On 16/09/2011 02:54, Naresh Bhatia wrote: > George, > > Per your suggestion, I used Fiddler to monitor the traffic between CMIS > Workbench and SP. CMIS workbench (as well as my standalone OpenCMIS program) > is able to authenticate successfully in 2 tries. However I can't figure out > what credentials are being sent to SP as they are hashed or encrypted, e.g. > > Authorization: NTLM TlRMTVNTUAAB...EQ0RTSzAxQkhBVElOQVdFTExJTkdUT04= > > How did you figure out what this means? > > Anyway, when I try the same experiment with OpenCMIS running on Tomcat, > OpenCMIS tries 39 times to authenticate, but the server keeps on returning > 401's. OpenCMIS finally gives up. Again, the Authorization headers are > encrypted, so I really don's know what OpenCMIS is trying to do. > > Any further pointers on this issue? > > Thanks. > Naresh > > > On Thu, Sep 8, 2011 at 1:10 AM, Florentine, George < > George.Florentine@flatironssolutions.com> wrote: > >> Naresh, I'd suggest using Wireshark or some other network protocol analyzer >> to look at the packets going between your application and the SharePoint >> CMIS producer endpoint. I found that very useful when trying to debug >> authorization issues between the OpenCMIS client and the SP server. For >> example, I discovered that when you specify NTLM as the authentication >> mechanism, the OpenCMIS client tries to first send the credentials of the >> process persona your web is running in on your app server before it sends >> the credentials you specify in your code. I would never have figured that >> out without looking at network packets...You might also want to post to the >> group what calls you're making to the OpenCMIS classes to set authorization >> type and creds. That info will be useful in determining why your app is >> behaving differently from the CMIS Workbench client. >> >> thx, >> >> g >> --- >> >> >> George Florentine >> >> VP, Engineering >> >> +1 (303) 542-2173 | Office >> +1 (303) 669-8628 | Cell >> +1 (303) 544-0522 | Fax >> >> george.florentine@flatironssolutions.com >> >> http://www.flatironssolutions.com >> >> >> >> >> >> >> >> >> >> >> -----Original Message----- >> From: Naresh Bhatia [mailto:bhatian@comcast.net] >> Sent: Wednesday, September 07, 2011 6:50 PM >> To: dev@chemistry.apache.org >> Subject: Re: Pointers on connecting to Sharepoint 2010 using OpenCMIS >> >> J�r�me, >> >> I made quite a bit of progress based on your suggestions. I have figured >> out >> what my Library Id is. I can access the library using the CMIS Workbench >> and >> my own standalone OpenCMIS app. The last hurdle is that I cannot get it to >> work through my web application - it is giving me >> a CmisUnauthorizedException: >> >> org.apache.chemistry.opencmis.commons.exceptions.CmisUnauthorizedException: >> Unauthorized >> at >> >> org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.convertStatusCode(AbstractAtomPubService.java:423) >> at >> >> org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.read(AbstractAtomPubService.java:552) >> at >> >> org.apache.chemistry.opencmis.client.bindings.spi.atompub.AbstractAtomPubService.getRepositoriesInternal(AbstractAtomPubService.java:716) >> at >> >> org.apache.chemistry.opencmis.client.bindings.spi.atompub.RepositoryServiceImpl.getRepositoryInfo(RepositoryServiceImpl.java:62) >> at >> >> org.apache.chemistry.opencmis.client.bindings.impl.RepositoryServiceImpl.getRepositoryInfo(RepositoryServiceImpl.java:69) >> at >> >> org.apache.chemistry.opencmis.client.runtime.SessionImpl.connect(SessionImpl.java:610) >> at >> >> org.apache.chemistry.opencmis.client.runtime.SessionFactoryImpl.createSession(SessionFactoryImpl.java:92) >> at >> >> org.apache.chemistry.opencmis.client.runtime.SessionFactoryImpl.createSession(SessionFactoryImpl.java:64) >> at >> >> com.wellmanage.wellington2go.domain.cmis.CmisSession.(CmisSession.java:69) >> >> The parameters I am passing to SessionFactory.createSession() are exactly >> the same as what I pass to my standalone app, so I can't understand why I >> get the CmisUnauthorizedException. >> >> Another interesting thing is that my standalone program (and CMIS >> Workbench) >> can access SharePoint even if I don't pass a username and password. That's >> really puzzling. >> >> Anything you can make out of this? >> >> Thanks. >> Naresh >> >> >> >> On Fri, Sep 2, 2011 at 3:44 PM, J�rome Simard wrote: >> >>> Naresh, >>> >>> Sorry I meant Library id. >>> >>> Your best bet would be to use the CMIS Workbench to connect to SharePoint >>> using the webservice binding, once connected you will see the Library ID >> of >>> all the available SharePoint libraries. It should have this form >>> 2625c04a-8ec6-4e30-bcca-d7895e87c89f. >>> >>> Good luck, >>> J�r�me >>> >>> >>> -----Original Message----- >>> From: Naresh Bhatia [mailto:bhatian@comcast.net] >>> Sent: 2 septembre 2011 15:36 >>> To: dev@chemistry.apache.org >>> Subject: Re: Pointers on connecting to Sharepoint 2010 using OpenCMIS >>> >>> Thanks so much J�r�me. I will give it a shot. >>> >>> What is a Site ID btw? >>> >>> Naresh >>> >>> >>> On Fri, Sep 2, 2011 at 3:23 PM, J�rome Simard >> wrote: >>> >>>> Hi Naresh, >>>> >>>> You must use the same URL for each services, i.e >>>> http://spserver/_vti_bin/CMISSoapwsdl.aspx >>>> >>>> To use the AtomPub binding, your URL should include the Site ID, like >>> this: >>>> >>>> >>> >> http://spserver/_vti_bin/cmis/rest/2625c04a-8ec6-4e30-bcca-d7895e87c89f?getrepositoryinfo >>>> >>>> Cheers, >>>> J�r�me >>>> >>>> >>>> J�r�me Simard >>>> Principal Software Architect | T 418-525-0606 #2264 | F >> 418-525-0909 >>>> 400, boul. Jean-Lesage, Suite 38 | Qu�bec, QC, Canada, G1K 8W1 | >>>> >>>> >>>> >>>> -----Original Message----- >>>> From: Naresh Bhatia [mailto:bhatian@comcast.net] >>>> Sent: 2 septembre 2011 15:09 >>>> To: dev >>>> Subject: Pointers on connecting to Sharepoint 2010 using OpenCMIS >>>> >>>> I am trying to connect to Sharepoint 2010 using OpenCMIS. I was given a >>> URL >>>> for the WSDL by my sysadmin (something like >>>> http://spserver/_vti_bin/CMISSoapwsdl.aspx). Unfortunately, it looks >>> like >>>> the URL have a combined WSDL for all CMIS services. Looking at this >>>> OpenCMIS >>>> example< >>>> http://chemistry.apache.org/java/examples/example-create-session.html >>> , >>>> it appears that I need one URL per service. >>>> >>>> >>>> 1. How do I go about connecting to Sharepoint using this combined >>> WSDL? >>>> Does Sharepoint also publish separate WSDLs as shown in the example. >>>> 2. Does sharepoint support AtomPub? >>>> >>>> >>>> Thanks. >>>> Naresh >>>> >>>> >>>> >>> >>> >>> >> >