topic Re: Subsystem External authentication 3.3 in Alfresco Archive

Subsystem External authentication 3.3

loftux — Mon, 26 Apr 2010 14:24:48 GMT

I'm trying to set up external authentication susbsystem for Community 3.3.For Alfresco explorer it works just fine, but not for Share.alfresco-global.properties hasexternal.authentication.proxyUserName=external.authentication.proxyHeader=X-Alfresco-Remote-Userexternal.authentication.enabled=trueexte

Re: Subsystem External authentication 3.3

loftux — Tue, 27 Apr 2010 08:07:20 GMT

Trying this out a bit more.
Seems like the webscript-framework-config-custom.xml is no longer read. I filed a case for this https://issues.alfresco.com/jira/browse/ALF-2605.
So I'm not sure where to put the config for Remote endpoint, still I'm not sure if that is the main issue.

Any useful logging I can use for Share client? I've tried

log4j.logger.org.alfresco.web.app.servlet.AuthenticationFilter=debug
log4j.logger.org.alfresco.web.app.servlet=debug
log4j.logger.org.alfresco.web.app.servlet.HTTPRequestAuthenticationFilter=debug
log4j.logger.org.alfresco.repo.security.authentication.SimpleAcceptOrRejectAllAuthenticationComponentImpl=debug
log4j.logger.org.springframework.transaction.interceptor.TransactionProxyFactoryBean=debug
log4j.logger.org.alfresco.repo.security.authentication.AuthenticationServiceImpl=debug
log4j.logger.org.alfresco.repo.security.authentication=debug
log4j.logger.org.springframework.transaction.interceptor=debug
log4j.logger.org.alfresco.connector.RemoteClient=debug
log4j.logger.org.alfresco.connector=debug‍‍‍‍‍‍‍‍‍‍

but that doesn't give anything useful.

Re: Subsystem External authentication 3.3

loftux — Tue, 04 May 2010 09:58:51 GMT

Hi,

Can someone clarify: Is external subsystem header authentication supported for Alfresco Share 3.3?
Scenario: An external proxy application authenticates the user, and then forward all request to share. In the header I want to pass the username as per documentation. Works for Alfresco Explorer, but not for Share. CAS is not used.

Re: Subsystem External authentication 3.3

pat2man — Wed, 12 May 2010 18:12:14 GMT

I am having the same issue.

Re: Subsystem External authentication 3.3

carbotex — Wed, 09 Jun 2010 15:58:11 GMT

I've been having the same issue and looking for an answer myself. You are asking the perfect question. Does external subsystem header authentication work for Alfresco Share 3.3?

Yes or No answer from Alfresco Engineer would be nice, it takes a few seconds to answer the question. But good luck getting any help in this forum.

Re: Subsystem External authentication 3.3

bsculley — Sun, 27 Jun 2010 22:45:10 GMT

I'm also having the same problem with 3.3 Enterprise. Anybody here find a solution?

Re: Subsystem External authentication 3.3

tommorris — Wed, 15 Dec 2010 21:28:41 GMT

Hi there.

We have a similar problem (along with an Apache reverse-proxy) and I believe this was working on the 3.2.x branch but is now broken on 3.3.3.

I think it's related to this (NTLM against AD is the external authentication in this case):
https://issues.alfresco.com/jira/browse/ALF-1997
…which is fixed in 3.3.5.

I hope this is helpful.
Tom
http://www.ixxus.com

Re: Subsystem External authentication 3.3

ipuljiz — Thu, 07 Apr 2011 13:26:20 GMT

Can I reraise this issue. Alfresco 3.4.e. I can login to alfresco with external but not to share. Please help.

Re: Subsystem External authentication 3.3

juhanig — Tue, 12 Apr 2011 19:48:22 GMT

Hi,

Same story here with Alfresco 3.4.d.

I have a Sun Proxy server in front of Alfresco which does Sun Access Manager (OpenSSO) autentication which sets the authenticated user as a custom http header.

Works fine for Alfresco Explorer but not for Share.

Could someone from Alfresco comment?

If external auth for share is currently unsupported (with a custom http header / remote user approach), are there anywhere updated instructions or examples how to write a custom authenticator filter for Share and how to configure it? Earlier there was an OpenSSO filter (made by SourceSense) but seems like that won't work with newer Alfresco versions.

Regards,
Juhani

Re: Subsystem External authentication 3.3

cmtran — Fri, 08 Jul 2011 19:41:27 GMT

Hi,

Has this been resolved? I'm unable to get external authentication to work for share while it works for Alfresco explorer in version 3.4.d. Any guidance is appreciated. Thank you in advance.

cmtran

Re: Subsystem External authentication 3.3

craig_michael_n — Thu, 18 Aug 2011 23:46:46 GMT

I agree has this been resolved?

Re: Subsystem External authentication 3.3

supalucas — Fri, 11 May 2012 05:54:17 GMT

This will be resolved in 3.4.9 and 4.0.2