topic Re: CAS SSO with alfresco in Alfresco Archive

CAS SSO with alfresco

lakmal — Sun, 24 Jun 2007 16:43:07 GMT

Dear all, I'm trying to get Alfresco within liferay portal to work in single sign on using CAS. I'm using alfresco 1.4 and liferay 4.2.2. I managed to get liferay working with CAS but need to relogin for alfresco again within liferay portal. Alfresco is currently authenticated against a LDAP server

Re: CAS SSO with alfresco

lakmal — Mon, 25 Jun 2007 21:56:37 GMT

Hi Luis,

I tried to integrate Alfresco 2.0 on liferay but it's giving a lot of errors and consequently not registered with the portlet. I downloaded the .war file and added the following files from version 1.4 into \WEB-INF of alfresco 2.0 and recreated the alfresco.war file


org.alfresco.error.AlfrescoRuntimeException: Ensure that the 'dir.root' property is pointing to the correct data location.
   at org.alfresco.repo.admin.ConfigurationChecker.check(ConfigurationChecker.java:313)
   at org.alfresco.repo.admin.ConfigurationChecker.access$000(ConfigurationC‍‍‍‍

Is there any place where I can find how to integrate alfresco 2 into liferay 4.2.2?

I'm looking forward to hear about the CAS integration part too.

Regards,

Lakmal

Re: CAS SSO with alfresco

lakmal — Fri, 29 Jun 2007 21:13:32 GMT

I got alfresco 2.0 working with Liferay 4.3 now on MySQL. Liferay is using ldap and i'm trying to get alfresco also to authenticate via the same ldap server. I followed the last configuration given in the following link to configure LDAP-authencation-context.xml file as well as renamed chaining-authentication-context.xml to chaining-authentication.xml. All these files are in alfresco/extension folder.

http://forums.alfresco.com/viewtopic.php?t=3351

When i try to login with alfresco web client i get the following error:

javax.portlet.PortletException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
org.alfresco.error.AlfrescoRuntimeException: Not implemented

I actually got alfresco 1.4 working with ldap on liferay 4.2.2, but the same configuration seems to be not working.

Any ideas?

Regards,

Lakmal

Re: CAS SSO with alfresco

lakmal — Fri, 29 Jun 2007 23:40:05 GMT

Additionally I get the following errors from tomcat. Hope this might provide more information.

javax.faces.FacesException: Error calling action method of component with id loginForm:submit
   org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:74)
   javax.faces.component.UICommand.broadcast(UICommand.java:106)
   javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:90)
   javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:164)
   org.apache.myfaces.lifecycle.LifecycleImpl.invokeApplication(LifecycleImpl.java:316)
   org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:86)
   javax.faces.webapp.FacesServlet.service(FacesServlet.java:105)
   org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:94)

‍‍‍‍‍‍‍‍‍‍‍

Re: CAS SSO with alfresco

jonas — Thu, 12 Jul 2007 04:59:14 GMT

Hi

A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.0.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Alfresco_201-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine.

2. Then create database (this is cofigurable) MySQL

for Liferay Portal 4.3
create database liferay43dev;
grant all on liferay43dev.* to 'liferay43dev'@'localhost' identified by 'liferay43dev' with grant option;
grant all on liferay43dev.* to 'liferay43dev'@'localhost.localdomain' identified by 'liferay43dev' with grant option;

for Alfresco Portlet
create database alfresco201plet;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost' identified by 'alfresco201plet' with grant option;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost.localdomain' identified by 'alfresco201plet' with grant option;

3. Start your AS from unzipped file
tomcat/bin/startup.bat or sh startup.sh

Go to http://localhost:8080

press sign in

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Liferay Portal with your login name. No need relogin in Liferay Portal.

Add Alfresco Ext Client. You should be in Alfresco Portlet with your login name. No need relogin in Alfresco Portlet.

Get it?

Good luck.

Re: CAS SSO with alfresco

lakmal — Tue, 28 Aug 2007 22:08:51 GMT

Hi Jonas,

I tried the the way you explained, but after validation by CAS i'm getting redirected to a blank page, and get the following error in the logs.

I'm using liferay+alfresco zip file downloaded from cignex. The additional thing i have done is deployed cas in the same server and running LDAP on the same server. I have also changed the URLs in the CAS configuration web interface in liferay accordingly. Any tips to sort this out?


ERROR [edu.yale.its.tp.cas.client.CASReceipt] edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator
‍‍‍

Regards,

Lakmal

Re: CAS SSO with alfresco

mamuly — Wed, 29 Aug 2007 10:09:56 GMT

Hi,

Can you help me in the alfresco-ldap authentication.
I have alfresco2.1 integrated with liferay4.3

Any help is highly appreciated.

Thanks,
Mamuly

Re: CAS SSO with alfresco

jonas — Wed, 29 Aug 2007 16:50:27 GMT

Hi lakma,

You can keep CAS server and LDAP Server in one domain, and Alfresco and Alfresco in other domain.

If you only use localhost for all servers, just use casclient.jar from CAS official web site. It should works well.

Hi mamuly,

For more details, you can get instructions for Do-It-Yourselfers (Liferay 4.3, Alfresco 2.1, LDAP and SSO CAS - Full Integration) at http://liferay.cignex.com

possible user account
jonas/jonas

Re: CAS SSO with alfresco

kulfon — Thu, 17 Jul 2008 12:27:59 GMT

Is there a solution for the "Unable to validate ProxyTicketValidator" exception? I see a lot of people having this issue but not many recommendations out there. I'm able to see the CAS authentication page. When I authenticate with incorrect user/passwd it verifies and indicates that user/id invalid. But when I use the correct user/passwd it redirects to a blank page and displays the following exception. Any help would be greatly appreciated.

javax.servlet.ServletException: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.y ale.its.tp.cas.client.ServiceTicketValidator casValidateUrl