topic Share 4 SSO with Jasig CAS in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/share-4-sso-with-jasig-cas/m-p/260216#M213346 <HTML><HEAD></HEAD><BODY><SPAN>Hi all,</SPAN><BR /><SPAN>searching the forum I've read other posts on this argument, but I've not found a solution to the problem I have, so I've decided to start a new post.</SPAN><BR /><BR /><SPAN>Well, I had to implement a SSO system among several tools (Alfresco, Liferay, Mediawiki, Track, etc.) and I have decided to employ Jasig CAS.</SPAN><BR /><BR /><SPAN>Following this guide (</SPAN><A href="http://holisticsecurity.wordpress.com/2011/02/19/web-sso-between-liferay-and-alfresco-with-cas-and-penrose-part-22/" rel="nofollow noopener noreferrer">http://holisticsecurity.wordpress.com/2011/02/19/web-sso-between-liferay-and-alfresco-with-cas-and-penrose-part-22/</A><SPAN>)</SPAN><BR /><SPAN>I was able to implement a filter for Alfresco Explorer 4.0b and setup a minimalistic SSO system among Liferay and Alfresco Explorer, system that is in production</SPAN><BR /><SPAN>since last summer, so it works.</SPAN><BR /><BR /><SPAN>Then it was the turn to implement SSO for Alfresco Share… and I've started having more than some problems.</SPAN><BR /><SPAN>I've followed some guides like this one (</SPAN><A href="http://akselsarchitecture.blogspot.com/2010/09/cas-sso-for-alfresco-33-and-share.html" rel="nofollow noopener noreferrer">http://akselsarchitecture.blogspot.com/2010/09/cas-sso-for-alfresco-33-and-share.html</A><SPAN>) and</SPAN><BR /><SPAN>this (</SPAN><A href="http://ecmstuff.blogspot.com/2011/06/configuring-alfresco-for-sso-with-cas.html" rel="nofollow noopener noreferrer">http://ecmstuff.blogspot.com/2011/06/configuring-alfresco-for-sso-with-cas.html</A><SPAN>) and, in summary, I was able to implement a Filter, an Authenticator</SPAN><BR /><SPAN>and a web service allowing users to log into Share through CAS.</SPAN><BR /><BR /><SPAN>The problem I've finally encountered seems related to the notification email that a user receives when he gets invited to join a project site. If the user clicks on one of the links inside the email (both to accept or reject the invitation), from the system logs I see a normal login procedure (Share invoke Alfresco web service to contact CAS, CAS create and validate a ticket and finally alfresco share is called back) but, when finally the service "org/alfresco/repository/invite/inviteresponse.put" is executed, I get the following error:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE><BR />2011-11-08 19:24:31,117&nbsp; ERROR [extensions.webscripts.AbstractRuntime] [TP-Processor24] Exception from executeScript - redirecting to status template error: A valid SecureContext was not provided in the RequestContext<BR /> net.sf.acegisecurity.AuthenticationCredentialsNotFoundException: A valid SecureContext was not provided in the RequestContext<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.credentialsNotFound(AbstractSecurityInterceptor.java:477)<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:355)<BR />&nbsp;&nbsp;&nbsp;at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:146)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:110)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)<BR />&nbsp;&nbsp;&nbsp;at $Proxy19.exists(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleServiceImpl.checkForCopy(RuleServiceImpl.java:1257)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleServiceImpl.canExecuteRule(RuleServiceImpl.java:1237)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleServiceImpl.executePendingRule(RuleServiceImpl.java:1149)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleServiceImpl.executePendingRulesImpl(RuleServiceImpl.java:1102)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleServiceImpl.executePendingRules(RuleServiceImpl.java:1075)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.rule.RuleTransactionListener.beforeCommit(RuleTransactionListener.java:57)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:747)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.doBeforeCommit(AlfrescoTransactionSupport.java:727)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.AlfrescoTransactionSupport$TransactionSynchronizationImpl.beforeCommit(AlfrescoTransactionSupport.java:687)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.TransactionSynchronizationUtils.triggerBeforeCommit(TransactionSynchronizationUtils.java:95)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.triggerBeforeCommit(AbstractPlatformTransactionManager.java:927)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:737)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.util.transaction.SpringAwareUserTransaction.commit(SpringAwareUserTransaction.java:472)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:410)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:462)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:500)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:275)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:372)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)<BR />&nbsp;&nbsp;&nbsp;at org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:118)<BR />&nbsp;&nbsp;&nbsp;at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)<BR />&nbsp;&nbsp;&nbsp;at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:433)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:542)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)<BR />&nbsp;&nbsp;&nbsp;at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:875)<BR />&nbsp;&nbsp;&nbsp;at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)<BR />&nbsp;&nbsp;&nbsp;at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)<BR />&nbsp;&nbsp;&nbsp;at java.lang.Thread.run(Thread.java:662)<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I thought that the problem was related to the authentication required to invoke this particular web service, so I have tryed to modify the authentication method required, but this has not modified the error.</SPAN><BR /><BR /><SPAN>At present I have no idea of where this error comes from. Do you have any suggestion for this issue?</SPAN><BR /><SPAN>Any hint from Alfresco community will be greatly appreciated.</SPAN><BR /><BR /><SPAN>Thanks,</SPAN><BR /><SPAN>Stefano.</SPAN><BR /><BR /><SPAN>P.S.: To reduce the post size I have not attached any code. If part of the setup/code can help you understanding the problem, just ask.</SPAN></BODY></HTML> Wed, 09 Nov 2011 13:48:53 GMT sl_superb 2011-11-09T13:48:53Z Share 4 SSO with Jasig CAS https://connect.hyland.com/t5/alfresco-archive/share-4-sso-with-jasig-cas/m-p/260216#M213346 Hi all,searching the forum I've read other posts on this argument, but I've not found a solution to the problem I have, so I've decided to start a new post.Well, I had to implement a SSO system among several tools (Alfresco, Liferay, Mediawiki, Track, etc.) and I have decided to employ Jasig CAS.Fol Wed, 09 Nov 2011 13:48:53 GMT https://connect.hyland.com/t5/alfresco-archive/share-4-sso-with-jasig-cas/m-p/260216#M213346 sl_superb 2011-11-09T13:48:53Z Re: Share 4 SSO with Jasig CAS https://connect.hyland.com/t5/alfresco-archive/share-4-sso-with-jasig-cas/m-p/260217#M213347 <HTML><HEAD></HEAD><BODY><SPAN>Propably you have to read over </SPAN><A href="http://www.ixxus.com/blog/2011/08/configuring-alfresco-for-sso-with-cas-and-securing-tomcat/" rel="nofollow noopener noreferrer">http://www.ixxus.com/blog/2011/08/configuring-alfresco-for-sso-with-cas-and-securing-tomcat/</A><BR /><BR /><BR /><SPAN>But I have another, very related problem:</SPAN><BR /><SPAN>I am using Alfresco 4.2b and have followed</SPAN><BR /><A href="http://wiki.alfresco.com/wiki/Alfresco_cas_with_jasig_cas_client" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Alfresco_cas_with_jasig_cas_client</A><BR /><SPAN>and</SPAN><BR /><A href="http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration" rel="nofollow noopener noreferrer">http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration</A><BR /><SPAN>to connect Alfresco with the JASIG CAS service to provide SSO.</SPAN><BR /><BR /><SPAN>Everythings works perfectly until the point I have to get the keembay jar file for the CASAuthenticationFilter class.</SPAN><BR /><SPAN>This is really weird because in this JASIG context there are no edu.yale variables or classes like</SPAN><BR /><SPAN>edu.yale.its.tp.cas.client.filter.user</SPAN><BR /><SPAN>For some time everything begins with org.jasig…</SPAN><BR /><BR /><SPAN>I dont know what I have to do now. Can you help me?</SPAN></BODY></HTML> Mon, 26 Nov 2012 13:30:10 GMT https://connect.hyland.com/t5/alfresco-archive/share-4-sso-with-jasig-cas/m-p/260217#M213347 pzystorm 2012-11-26T13:30:10Z