topic Re: Alfresco Authentication with CAS? in Alfresco Archive

Alfresco Authentication with CAS?

kjordan2001 — Wed, 12 Jul 2006 14:57:45 GMT

I'm setting up a Single Sign-on system for my company and we need a content management system that can easily be integrated with our CAS system which in turn may authenticate against Kerberos or LDAP (unknown which we will use, but we have both installed but not fully configured yet for all our user

Re: Alfresco Authentication with CAS?

kjordan2001 — Thu, 13 Jul 2006 20:14:46 GMT

Anyone gotten Alfresco working with CAS in any form?

Re: Alfresco Authentication with CAS?

andy — Fri, 14 Jul 2006 10:30:57 GMT

Hi

I do not recall anyone trying this.

Upgrading acegi to 1.0 is on the to do list.

It looks like you could authenticate direct with JAAS & Kerberos, or LDAP.

Alternatively, you should be able to configure authentication to use the acegi CAS support. In a similar way to how we use the acegi DAO stuff.
Take a look at authentication-services-context.xml

Regards

Andy

Re: Alfresco Authentication with CAS?

kjordan2001 — Fri, 14 Jul 2006 16:12:22 GMT

Hi

I do not recall anyone trying this.

Upgrading acegi to 1.0 is on the to do list.

It looks like you could authenticate direct with JAAS & Kerberos, or LDAP.

Alternatively, you should be able to configure authentication to use the acegi CAS support. In a similar way to how we use the acegi DAO stuff.
Take a look at authentication-services-context.xml

Regards

Andy

I plan on setting it up like in this HOWTO. Will this be compatible with how Alfresco does stuff? And I suppose my most important concern is getting users who have been authenticated but haven't logged in before added to the user list or somehow syncing with our LDAP server since that will contain all the users as well (since we may have a hundred or more users and we don't want to add them manually).

Re: Alfresco Authentication with CAS?

kjordan2001 — Mon, 17 Jul 2006 17:09:41 GMT

Anyone know if hacking it like that will work?

Re: Alfresco Authentication with CAS?

andy — Wed, 19 Jul 2006 18:18:25 GMT

Hi

You can schedule groups and users to be pulled from an LDAP user so that alfrecso is in sync with your LDAP server. You could authenticate direct to LDAP or via CAS. I see no reason why you should not be able to validate a user+password using CAS and the acegi based alfresco authenticator.

There is no point in having CAS unless it gives you single sign on.
What clients understand it and how would web calls etc pull out the credentials? You would have to write something here using the NTLM single sign on filter code as an example.

You may also want to implement your own ticket component.

Are there any dependacies in the acegi version for CAS support?

Regards

Andy