topic Re: Authentication Chain CAS + Local User in Alfresco Archive

Authentication Chain CAS + Local User

togum — Mon, 14 May 2012 10:33:54 GMT

I've configured so that my Alfresco can integrated with CAS Jasig.I'm successfull login via CAS redirect to alfresco page.Fyi: CAS configured connect to Active DirectoryThis is my alfresco-global.properties CAS configuration:#CASauthentication.chain=cas:external,ldap1:ldap‍‍‍‍But now, I want local u

Re: Authentication Chain CAS + Local User

andrepra — Tue, 15 May 2012 14:38:41 GMT

Since your authentication process is performed by CAS you need to change your Authentication Handler to check the user first on ActiveDirectory and after on Alfresco repository (ie: via web services or rest API)

Re: Authentication Chain CAS + Local User

togum — Mon, 21 May 2012 02:28:43 GMT

Thank you andrepra

Can you advise me to change my Authentication Handler?
I'm sorry, I really don't understand about it yet.

Re: Authentication Chain CAS + Local User

luca — Thu, 30 Aug 2012 09:20:12 GMT

Hi togumm,
did you integrate CAS with Alfresco 3.2 or a newer version?

I'm tryng to use CAS with Alfresco 4, but I have some problems, can you help me?
I already did it with Alfresco 3.2, but I can't with Alfresco 4…

Re: Authentication Chain CAS + Local User

andrepra — Thu, 30 Aug 2012 09:55:49 GMT

Since 3.2 change the authentication architecture. You have to understand how authentication subsystem works and configure a chain that perform the authetication process.
I did the integration also with 3.4 and 4 but I built my own authentication subsystem, I'm not using the "external"

Re: Authentication Chain CAS + Local User

luca — Thu, 30 Aug 2012 10:07:58 GMT

Hi andrepra,
in my configuration now I succefully authenticate the user in CAS, the I return in my filter class in Alfresco, but I can't authenticate the user in Alfresco.

I tried in some ways, but none worked… :x (https://forums.alfresco.com/en/viewtopic.php?f=57&t=45399).

Could you tell me how did you authenticate the user in Alfresco?

I tried something like that:

AuthenticationUtil.runAsSystem(new RunAsWork<Void>() {
   public Void doWork() throws Exception {
      WebApplicationContext wc = WebApplicationContextUtils.getRequiredWebApplicationContext(contextF);
      AuthenticationContext authenticationContext = (AuthenticationContext)authentication;
      
      GrantedAuthority[] gas = new GrantedAuthority[1];
        gas[0] = new GrantedAuthorityImpl("ROLE_AUTHENTICATED");
        UserDetails ud = new net.sf.acegisecurity.providers.dao.User(userName, "", true, true, true, true, gas);
      
      authenticationContext.setUserDetails(ud);
   }
}‍‍‍‍‍‍‍‍‍‍‍‍

I reconstructed it from my various test, so there may be some errors…

Re: Authentication Chain CAS + Local User

togum — Tue, 27 Nov 2012 08:11:16 GMT

Hi andrepra, thanks for your help. It's work with Alfresco 3.
Luca, I didn't tested with Alfresco 4 yet