topic Re: using custom authenticationmanager/processingfilter in Alfresco Archive

using custom authenticationmanager/processingfilter

timv — Wed, 16 Aug 2006 15:15:24 GMT

Hi,I am trying to implement SSO with Sun Access Manager. I wrote a custom processFilter which checks for a valid Access Manager cookie. I also added my custom authentication manager to the list of the providermanager.I added the following to authentication-service-context.html: <bean id="amProc

Re: using custom authenticationmanager/processingfilter

saulius23 — Tue, 31 Oct 2006 15:13:41 GMT

Hi,

I am trying to implement SSO with Sun Access Manager. I wrote a custom processFilter which checks for a valid Access Manager cookie. I also added my custom authentication manager to the list of the providermanager.

I added the following to authentication-service-context.html:
   <bean id="amProcessingFilter" class="be.acait.cms.alfresco.auth.ui.am.AMProcessingFilter">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
   </bean>

    <bean id="AMAuthenticationProvider" class="be.acait.cms.alfresco.auth.provider.am.AMAuthenticationProvider" />

    <bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref bean="AMAuthenticationProvider" />
                <ref bean="authenticatedAuthenticationPassthroughProvider" />
                <ref bean="daoAuthenticationProvider" />
            </list>
        </property>
    </bean>

But now, how do I know Alfresco picks it up? I tried remote debugging in my code, but it seems that my code doesn't run.

Oh yes, I'm using 1.3 community edition..

Greets,
timv

Tim,

Have you had luck in finishing setting up SSO with Sun Access Manager? If you could share experiences that would be awesome.

Saul

Re: using custom authenticationmanager/processingfilter

andy — Mon, 20 Nov 2006 14:29:07 GMT

Hi

AuthenticationComponentImpl should use the acegi authentication manager bean. Check that you have wired the correct authentication manager bean into the authentication component impl bean as you have defined your own authentication manager bean.

In authentication-services-context.xml


 <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDao" />
        </property>
        <property name="authenticationManager">
            <ref bean="*****authenticationManager*****" />
        </property>
        <property name="allowGuestLogin">
            <value>true</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍

You should probably wire in a DAO that does not support password changes etc.

SSO is best done with a web filter and to disable normal login.

Regards

Andy