Authenticating Without a Password (based off SDK example)

patorjk — Tue, 20 Sep 2011 14:56:24 GMT

I've setup Alfresco to work with an LDAP server, and I can login fine. My next step was to have the login page re-direct the LDAP webapp, which is an external login screen, and have the user login there and then be redirected back to Alfresco. The reason for this is because the LDAP webapp sets a co

Re: Authenticating Without a Password (based off SDK example)

patorjk — Thu, 22 Sep 2011 14:30:28 GMT

So it's starting to look like doing it this way isn't possible.

I was looking into the External Authentication Subsystem, and saw the CAS guide, but that seems like overkill and I'm not sure I understand everything that's going on or why all of that is needed for my situation.

After poking around in the Exernal subsystem, I saw it uses "SimpleAcceptOrRejectAllAuthenticationComponentImpl", which overrides the authentication function. In that function it authenticates a user via a "setCurrentUser" function, but that relies on the value of "accept" being set to true. I grepped through the Alfresco source, and looked in the files under WEB-INF/classes/alfresco/subsystems/Authentication/external, but I couldn't find out how the setAccept function ever got called. After some googling I found this:

http://code.google.com/p/alfresco-container-security/source/browse/trunk/src/java/com/pararede/alfresco/security/AlfrescoContainerSecurityFilter.java?spec=svn4&r=4

It looks like they setup a filter that logs the user in via a SimpleAcceptOrRejectAllAuthenticationComponentImpl object where they explicitly call setAccept(true). I haven't tried this yet, but their wiki says the web.xml file needs to be edited, something an Alfresco Dev said in another post wasn't needed after Alfresco v3.2 (I'm using Enterprise v3.4.3). Is this the right avenue to go down?

I've heard another idea would be to write my own Authenticator subsystem, but I don't see any docs on that, and without knowing how the "setAccept" function gets called for the External subsystem, I feel like I'd be shooting in the dark.

Any thoughts? Anyone?

best,

- Pat

topic Re: Authenticating Without a Password (based off SDK example) in Alfresco Archive

Authenticating Without a Password (based off SDK example)

Re: Authenticating Without a Password (based off SDK example)