Passthru, NTLM, SSO and Mobile

Hi

I am looking for some help with this..

I have a pretty basic Alfresco community installation and I am trying to get the authentication sorted out.

Environment
Alfresco: Community 5.0d
Server: Ubuntu 14.04 LTS
AD Server: Windows 2012
Clients: Windows 7
iPad with Alfresco mobile app version 2.1.2
network: LAN - without proxy or anything clever

Outcome
CIFS drive mapping on Windows 7 desktop
NTLM SSO for web client - and in particular to use the sharepoint protocol to allow edit online, etc.
Alfresco mobile app - to access the repository

Current status
With the settings below - the Windows clients are working as desired…
Mobile app will no connect

I have turned on DEBUG in CMIS in ./tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
And get the error in the alfresco.log file below.

If I undo the NTLM and SSO changes then the mobile client works - and o the desktop doesn’t do SSO and the edit online doesn't work.

I am pretty new to Alfresco so any help and guidance will be greatly appreciated.

I installed the opencmis workbench to make testing a little easier - and have the same error when connect from that.

thanks, Jon

alfresco-global.properties

### passthru authentication ###

authentication.chain=passthru1:passthru,alfrescoNtlm1:alfrescoNtlm

# authentication.chain=passthru1:passthru
 

ntlm.authentication.sso.enabled=true
 

passthru.authentication.useLocalServer=false

passthru.authentication.domain=

passthru.authentication.servers=JONNO\\jonno-ad01.jonno.org,jonno-ad01.jonno.org

passthru.authentication.authenticateCIFS=true

passthru.authentication.guestAccess=false

passthru.authentication.protocolOrder=TCPIP,NETBIOS

passthru.authentication.defaultAdministratorUserNames=jon,administrator

alfresco.authentication.authenticateCIFS=false

alfresco.log

2015-09-07 13:10:03,836 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter][http-apr-8080-exec-2] NTLM blob not handled, redirecting to login page.
2015-09-07 13:10:03,837 DEBUG [org.alfresco.web.app.servlet.NTLMAuthenticationFilter][http-apr-8080-exec-2] restartLoginChallenge…