topic Re: External auth. ok but navigation in share not ok in Alfresco Archive

External auth. ok but navigation in share not ok

jpmerlin — Wed, 18 Sep 2013 07:04:21 GMT

Hello,I have tested on 4.2.c and 4.2.d, on both i have the same issue.I configure Alfresco to work with a external siteminder.Here is my alfresco-global.properties :## LDAP AUTH###authentication.chain=external:external,alfrescoNtlm1:alfrescoNtlmexternal.authentication.enabled=trueexternal.authentica

Re: External auth. ok but navigation in share not ok

jpmerlin — Wed, 18 Sep 2013 08:35:51 GMT

perhaps it's my apache mod_proxy configuration ?

here is my apache conf :


LoadModule proxy_module         /usr/lib64/apache2-prefork/mod_proxy.so
LoadModule proxy_http_module         /usr/lib64/apache2-prefork/mod_proxy_http.so
ProxyRequests Off


ProxyPreserveHost Off

ProxyPass /alfresco http://ecm-dev1.eic.intra:8080/alfresco

ProxyPassReverse /alfresco http://ecm-dev1.eic.intra:8080/alfresco

ProxyPass /share http://ecm-dev1.eic.intra:8080/share

ProxyPassReverse /share http://ecm-dev1.eic.intra:8080/share

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

if i browse data dictionnary i have a http 500 on this URL


http://ecm-dev1.eic.intra/share/service/components/documentlibrary/data/doclist/all/node/alfresco/company/home/Dictionnaire%20de%20donn%C3%A9es?filter=path&size=50&pos=1&sortAsc=true&sortField=cm%3Acreated&libraryRoot=alfresco%3A%2F%2Fcompany%2Fhome&view=browse&noCache=1379492661281
‍‍‍

but if i do the same request on Tomcat directly , i have a json response who is ok:


http://ecm-dev1.eic.intra:8080/share/service/components/documentlibrary/data/doclist/all/node/alfresco/company/home/Dictionnaire%20de%20donn%C3%A9es?filter=path&size=50&pos=1&sortAsc=true&sortField=cm%3Acreated&libraryRoot=alfresco%3A%2F%2Fcompany%2Fhome&view=browse&noCache=1379492661281
‍‍‍

Re: External auth. ok but navigation in share not ok

jpmerlin — Thu, 19 Sep 2013 15:40:03 GMT

I test mod_proxy_ajp, it's change nothing.

I test with mod_jk, it's better : i can validate task from workflow, but i still can't browse folder with accent.

I was thinking it's the mod_jk who was doing something wrong with charset because the response is correct when i request Tomcat directly.

But if i remove the external authentication configuration and replace with a AD and Ntlm authentication, all is ok with the same configuration of apache/tomcat.

Re: External auth. ok but navigation in share not ok

jpmerlin — Thu, 17 Oct 2013 07:48:05 GMT

The problem is resolve.
It was a problem of configuration of the external authentication system : siteminder.
By default, Siteminder don't accept special character in the URL with the properties BadCssChars and BadUrlChars.