topic Re: External Auth Subsystem for SSO in Alfresco and Share in Alfresco Archive

External Auth Subsystem for SSO in Alfresco and Share

kbonnet — Sun, 29 Nov 2009 11:39:51 GMT

Hello Alfrescians,I'm trying to get the external authentication subsystem to work with Alfresco 3.2r2. I need Alfresco Explorer and Share to authenticate users based on a http header. I use the default x-remote-alfresco-user for this. From 3.2r2 this is working for Alfresco Explorer like a dream. Bu

Re: External Auth Subsystem for SSO in Alfresco and Share

dward — Mon, 30 Nov 2009 10:39:47 GMT

I recently found a problem in this area and will be merging a fix to HEAD shortly.

The trouble is that in order to use just the header to provide the user ID to the alfresco web app, without using a secured connection and a 'proxy user' you would need to set the external.authentication.proxyUserName property to the empty string, as follows

external.authentication.proxyUserName=

The trouble is, there appears to be a problem with the overriding of property values to be the empty string. At the moment you would have no option but to edit this value in

$TOMCAT_HOME/webapps/alfresco/WEB-INF/classes/alfresco/subsystems/Authentication/external/external-filter.properties

Re: External Auth Subsystem for SSO in Alfresco and Share

kbonnet — Mon, 30 Nov 2009 10:44:38 GMT

Hi David,

Thanks for your reply! I will try this and let you know. I dont have big problems with this workaround, since i can override the subsystem configuration in the extension root, right?

Thanks.
Koen

Re: External Auth Subsystem for SSO in Alfresco and Share

dward — Mon, 30 Nov 2009 10:48:05 GMT

No. I am trying to tell you that the extension based override mechanism doesn't work in this instance. I will fix it so that it does ASAP.

Re: External Auth Subsystem for SSO in Alfresco and Share

kbonnet — Mon, 30 Nov 2009 11:20:50 GMT

🙂 Got it. When the property gets a value it cannot be overridden to have no value.

It worked for me. For now i will do with this workaround. Thanks a lot!

Koen

Re: External Auth Subsystem for SSO in Alfresco and Share

kbonnet — Thu, 03 Dec 2009 09:48:18 GMT

I moved my followup question about logging into share based on HTTP headers to the Share topic, because it's slightly different from the question above.

http://forums.alfresco.com/en/viewtopic.php?f=47&t=23657

Re: External Auth Subsystem for SSO in Alfresco and Share

varunss — Mon, 22 Mar 2010 10:24:17 GMT

I came across the same situation..having the same requirement to authenticate using external system and came across the same error….I changed the ProxyUsername to empty..Still i get the exception.. What should be done…