topic Alfresco CE (2.9 B), CAS 3.2, LDAP (Apache DS) config issues in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-2-9-b-cas-3-2-ldap-apache-ds-config-issues/m-p/151444#M106199 <HTML><HEAD></HEAD><BODY><SPAN>Hi,</SPAN><BR /><BR /><SPAN>I'm attempting to set up an environment using CAS with LDAP authentication for the Alfresco. I've been successful in that when I try to access Alfresco, the request gets intercepted and redirects to the server running JA-SIG CAS and Apache DS. When I enter a user ID / password, CAS authenticates and grants a service ticket for the user and redirects to Alfresco.</SPAN><BR /><BR /><SPAN>However, instead of displaying the dashboard, Tomcat serves "noaccess.jsp" (a screen with the logo and a message reading "You have no access to Alfresco").</SPAN><BR /><BR /><SPAN>When I remove CAS from the chain and let Alfresco directly authenticate against LDAP, users can log on alright. Also, when I access the CAS login screen directly and enter a user's details, it shows "Login successful" - so it looks like CAS and LDAP are working together in the way they should.</SPAN><BR /><BR /><SPAN>After reading through the various posts and How-Tos dealing with setting up a CAS/LDAP authentication, I have to say that I'm pretty much stumped: there is nothing in any of the logs, and there doesn't seem to be a way of finding out what's going on "behind the scenes", i.e. what values CAS is sending to Alfresco and what Alfresco is doing with it…</SPAN><BR /><SPAN>The fact that I couldn't find any posts in regards to this particular issue seems to indicate that I' missing something blindingly obvious.</SPAN><BR /><BR /><SPAN>Any help or thoughts would be much appreciated. Thanks in advance,</SPAN><BR /><BR /><SPAN>Frank.</SPAN><BR /><BR /><SPAN>The setup is the following:</SPAN><BR /><STRONG>Server A</STRONG><SPAN> ("aaa" in web.xml):</SPAN><BR /><SPAN>Windows Server 2003</SPAN><BR /><SPAN>Tomcat</SPAN><BR /><SPAN>Alfresco CE 2.9 B</SPAN><BR /><BR /><STRONG>Server B</STRONG><SPAN> ("bbb" in web.xml):</SPAN><BR /><SPAN>Windows XP (test setup, will go to Win Server 2003 in time for production)</SPAN><BR /><SPAN>Tomcat</SPAN><BR /><SPAN>JA-SIG CAS Server 3.2</SPAN><BR /><SPAN>Apache DS</SPAN><BR /><BR /><STRONG>web.xml</STRONG><BR /><PRE class="language-none line-numbers"><CODE><BR />…<BR />&nbsp;&nbsp;&nbsp;&lt;filter&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;CAS&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-class&gt;edu.yale.its.tp.cas.client.filter.CASFilter&lt;/filter-class&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-name&gt;edu.yale.its.tp.cas.client.filter.loginUrl&lt;/param-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-value&gt;<A href="https://bbb:8443/cas/login" rel="nofollow noopener noreferrer">https://bbb:8443/cas/login</A>&lt;/param-value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-name&gt;edu.yale.its.tp.cas.client.filter.validateUrl&lt;/param-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-value&gt;<A href="https://bbb:8443/cas/serviceValidate" rel="nofollow noopener noreferrer">https://bbb:8443/cas/serviceValidate</A>&lt;/param-value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-name&gt;edu.yale.its.tp.cas.client.filter.serverName&lt;/param-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-value&gt;aaa:8080&lt;/param-value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-name&gt;edu.yale.its.tp.cas.client.filter.wrapRequest&lt;/param-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;param-value&gt;true&lt;/param-value&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;/init-param&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;filter&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;Authentication Filter&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-class&gt;org.alfresco.web.app.servlet.HTTPRequestAuthenticationFilter&lt;/filter-class&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;filter&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;Admin Authentication Filter&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-class&gt;org.alfresco.web.app.servlet.AdminAuthenticationFilter&lt;/filter-class&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;filter-mapping&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;CAS&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;url-pattern&gt;/faces/*&lt;/url-pattern&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter-mapping&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;filter-mapping&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;Authentication Filter&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;url-pattern&gt;/faces/*&lt;/url-pattern&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter-mapping&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;filter-mapping&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;Authentication Filter&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;url-pattern&gt;/template/*&lt;/url-pattern&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter-mapping&gt;<BR /><BR />&nbsp;&nbsp;&nbsp;&lt;filter-mapping&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;filter-name&gt;Authentication Filter&lt;/filter-name&gt;<BR />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&lt;url-pattern&gt;/download/*&lt;/url-pattern&gt;<BR />&nbsp;&nbsp;&nbsp;&lt;/filter-mapping&gt;<BR />…<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE></BODY></HTML> Tue, 25 Mar 2008 10:31:17 GMT frank_s 2008-03-25T10:31:17Z Alfresco CE (2.9 B), CAS 3.2, LDAP (Apache DS) config issues https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-2-9-b-cas-3-2-ldap-apache-ds-config-issues/m-p/151444#M106199 Hi,I'm attempting to set up an environment using CAS with LDAP authentication for the Alfresco. I've been successful in that when I try to access Alfresco, the request gets intercepted and redirects to the server running JA-SIG CAS and Apache DS. When I enter a user ID / password, CAS authenticates Tue, 25 Mar 2008 10:31:17 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-2-9-b-cas-3-2-ldap-apache-ds-config-issues/m-p/151444#M106199 frank_s 2008-03-25T10:31:17Z Re: Alfresco CE (2.9 B), CAS 3.2, LDAP (Apache DS) config issues https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-2-9-b-cas-3-2-ldap-apache-ds-config-issues/m-p/151445#M106200 <HTML><HEAD></HEAD><BODY><SPAN>Am I really the only person to have experienced this behaviour? I would very much appreciate any help or comment - I'm completely at a loss.</SPAN><BR /><BR /><SPAN>Thanks in advance,</SPAN><BR /><BR /><SPAN>f.</SPAN></BODY></HTML> Fri, 28 Mar 2008 16:04:19 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-2-9-b-cas-3-2-ldap-apache-ds-config-issues/m-p/151445#M106200 frank_s 2008-03-28T16:04:19Z