External SSO + Share

cyberjus — Mon, 04 Mar 2013 18:09:56 GMT

Hello All, I am trying to authenticate Alfresco Share (community 4.2.c) against OpenAM and I am having gotten to the point where I could use some help. I have mainly followed the instructions here: http://forums.alfresco.com/comment/84401#comment-84401and verified that based here: http://wiki.alfres

Re: External SSO + Share

smcardle — Tue, 12 Mar 2013 10:32:00 GMT

Hi cyberjus

Two points to note :

1. The OpenAM filter should be the first filter in the filter chain.
2. In the share-config-custom.xml file you have two

<config evaluator="string-compare" condition="Remote">…</config>‍

sections. For the case of SSO your first one should be commented out. The second one shown in you listing is correct.

Please change these settings and get back to me. I will try to help you resolve your issues as we are using this on about 20 environments including production now without issue.

Regards

Steve

Re: External SSO + Share

sadagopan — Fri, 26 Apr 2013 08:44:38 GMT

Hi Steve,
I have an issue in initializing the agent properties. Since Alfresco uses tomcat as Windows service it isn't able load the agent root config. any ideas ? or help me with the way you have installed the J2EE agent

Re: External SSO + Share

glaenen — Mon, 12 Jan 2015 09:52:25 GMT

Hello Cyberjus,
Hello Steve,

Did you ever solve this issue?
I'm facing the exact same problem on Alfresco 5 EE.

The share.log shows this error:

09:41:36,935 ERROR [org.alfresco.web.site] [http-apr-8080-exec-7] org.apache.jasper.JasperException: java.lang.NullPointerException
java.lang.NullPointerException
        at org.apache.jsp.site_002dindex_jsp._jspService(site_002dindex_jsp.java:78)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:432)
        at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:390)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:334)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at com.sun.identity.agents.filter.AmAgentBaseFilter.allowRequestToContinue(AmAgentBaseFilter.java:130)
        at com.sun.identity.agents.filter.AmAgentBaseFilter.doFilter(AmAgentBaseFilter.java:80)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1040)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:607)
        at org.apache.tomcat.util.net.AprEndpoint$SocketWithOptionsProcessor.run(AprEndpoint.java:2378)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
        at java.lang.Thread.run(Unknown Source)

Thanks,
Glenn

Re: External SSO + Share

glaenen — Mon, 12 Jan 2015 15:22:02 GMT

In OpenAm I was mapping the mail attribute to SsoUserHeader, after changing this from mail to cn it started working.
However this doesn't solve my problem because we want to use the mail attribute.

topic Re: External SSO + Share in Alfresco Archive

External SSO + Share

Re: External SSO + Share

Re: External SSO + Share

Re: External SSO + Share

Re: External SSO + Share