<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic CAS integration, 5.0.d, keystore is unused ? in Alfresco Archive</title>
    <link>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310917#M264047</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I'm working with alfresco community 5.0.d.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I'm trying to integrate Alfresco + Share with a CAS system. I followed the documentation instructions from &lt;/SPAN&gt;&lt;A href="http://docs.alfresco.com/community/concepts/alf-modauthcas-home.html" rel="nofollow noopener noreferrer"&gt;http://docs.alfresco.com/community/concepts/alf-modauthcas-home.html&lt;/A&gt;&lt;SPAN&gt;. Actually, I have the same configuration : 2 servers, one with apache and the CAS, and the other with Alfresco and Share.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The CAS authentication works well :&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;- I can log in via the CAS form when accessing to &lt;/SPAN&gt;&lt;A href="http://host/alfresco" rel="nofollow noopener noreferrer"&gt;http://host/alfresco&lt;/A&gt;&lt;SPAN&gt;, and /examples&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;- If I add the alfresco-system.p12 certificate to my browser, I'm automatically authenticated as "alfresco-system" : I can see it when accessing to the example page &lt;/SPAN&gt;&lt;A href="http://host/examples/jsp/snp/snoop.jsp" rel="nofollow noopener noreferrer"&gt;http://host/examples/jsp/snp/snoop.jsp&lt;/A&gt;&lt;SPAN&gt;, and in the CAS logs I can see &lt;/SPAN&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;[org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction] - Certificate found in request.&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;The problem is the communication between Share and Alfresco. From the documentation, I understand that the alfresco-system.p12 certificate should be used by the share, to communicate with Alfresco. But it doesn't. When accessing &lt;/SPAN&gt;&lt;A href="http://host/share" rel="nofollow noopener noreferrer"&gt;http://host/share&lt;/A&gt;&lt;SPAN&gt;, I can authenticate through the CAS form, but then when the share send requests to Alfresco, it is not authenticated and it fails because the CAS form is returned in the responses. It appears that the certificate is not sent as I can view that in the CAS logs : &lt;/SPAN&gt;&lt;BR /&gt;&lt;PRE class="language-none line-numbers"&gt;&lt;CODE&gt;[org.jasig.cas.adaptors.x509.web.flow.X509CertificateCredentialsNonInteractiveAction] - Certificates not found in request&lt;SPAN class="line-numbers-rows"&gt;&lt;SPAN&gt;‍&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;When digging in the code, we found the class &amp;lt;a href="&lt;/SPAN&gt;&lt;A href="https://svn.alfresco.com/repos/alfresco-open-mirror/alfresco/COMMUNITYTAGS/V5.0.d/root/projects/surf/spring-webscripts/spring-webscripts/src/main/java/org/springframework/extensions/config/RemoteConfigElement.java" rel="nofollow noopener noreferrer"&gt;https://svn.alfresco.com/repos/alfresco-open-mirror/alfresco/COMMUNITYTAGS/V5.0.d/root/projects/surf/spring-webscripts/spring-webscripts/src/main/java/org/springframework/extensions/config/RemoteConfigElement.java&lt;/A&gt;&lt;SPAN&gt;"&amp;gt;RemoteConfigElement&amp;lt;/a&amp;gt;. There is a REMOTE_KEYSTORE attribute which is unused. So maybe the problem comes from there ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Do you have any clue on it ? Any information ? &lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Could you explain how the alfresco-system.p12 certificate, located in "tomcat/shared/classes/alfresco/web-extension", should be processed ? Because when we specify a dummy name in share-config-custom.xml, it does nothing ! No exception such as FileNotFound or whatever is thrown.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Thank you in advance for your response.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Sebastien.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 30 Apr 2015 14:19:40 GMT</pubDate>
    <dc:creator>Anonymous</dc:creator>
    <dc:date>2015-04-30T14:19:40Z</dc:date>
    <item>
      <title>CAS integration, 5.0.d, keystore is unused ?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310917#M264047</link>
      <description>Hello,I'm working with alfresco community 5.0.d.I'm trying to integrate Alfresco + Share with a CAS system. I followed the documentation instructions from http://docs.alfresco.com/community/concepts/alf-modauthcas-home.html. Actually, I have the same configuration : 2 servers, one with apache and th</description>
      <pubDate>Thu, 30 Apr 2015 14:19:40 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310917#M264047</guid>
      <dc:creator>Anonymous</dc:creator>
      <dc:date>2015-04-30T14:19:40Z</dc:date>
    </item>
    <item>
      <title>Re: CAS integration, 5.0.d, keystore is unused ?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310918#M264048</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hello&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I have the same problem with 5.0.d&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Were you ever able to solve this?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Best regards,&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;David&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 29 Jun 2015 20:16:11 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310918#M264048</guid>
      <dc:creator>dynabix</dc:creator>
      <dc:date>2015-06-29T20:16:11Z</dc:date>
    </item>
    <item>
      <title>Re: CAS integration, 5.0.d, keystore is unused ?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310919#M264049</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Hi,&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Nope, I have no more information about it, and the problem is still there but it's aside for now. But I still would like know how to solve it.&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Does anybody have clues or information ?&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Sébastien.&lt;/SPAN&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 03 Jul 2015 13:14:16 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310919#M264049</guid>
      <dc:creator>Anonymous</dc:creator>
      <dc:date>2015-07-03T13:14:16Z</dc:date>
    </item>
    <item>
      <title>Re: CAS integration, 5.0.d, keystore is unused ?</title>
      <link>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310920#M264050</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;SPAN&gt;Although it's a slightly different configuration I think it's the same problem as described at &lt;/SPAN&gt;&lt;A href="http://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-ldap-sso/alfresco-community-50d" rel="nofollow noopener noreferrer"&gt;http://forums.alfresco.com/forum/installation-upgrades-configuration-integration/authentication-ldap-sso/alfresco-community-50d&lt;/A&gt;&lt;SPAN&gt; - I think there's a bug…&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;You shouldn't be using CAS for the communication between share and the repo because it's between the 2 apps rather than share and the browser - share needs to tell the repo the identity of the remote user which is done by setting headers on the request&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;Communication between the user and repo should go via the share proxy so also doesn't use CAS&lt;/SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;SPAN&gt;I suspect the docs may be slightly out of date now that the repo client has been removed - I don't &amp;lt;em&amp;gt;think&amp;lt;/em&amp;gt; it should be necessary to put the /alfresco URL behind CAS but it should only be accessed from the share host &lt;/SPAN&gt;&lt;BR /&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 09 Jul 2015 13:07:27 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/alfresco-archive/cas-integration-5-0-d-keystore-is-unused/m-p/310920#M264050</guid>
      <dc:creator>idwright</dc:creator>
      <dc:date>2015-07-09T13:07:27Z</dc:date>
    </item>
  </channel>
</rss>

