topic Re: TICKET problem in Alfresco Session in Alfresco Archive

TICKET problem in Alfresco Session

alexcocia — Tue, 28 Aug 2007 07:33:50 GMT

Hi all,I want to keep Alfresco session along with my app session, and when navigating through the tree, some times (no reason or patron seen), it shows the following error, when trying to get a node's childrenthis is how I get the node's children:queryResult = WebServiceFactory.getRepositoryService(

Re: TICKET problem in Alfresco Session

alexcocia — Tue, 28 Aug 2007 10:24:46 GMT

Having a look at the code, I've seen that AuthenticationUtils uses:

private static ThreadLocal<AuthenticationDetails> authenticationDetails = new ThreadLocal<AuthenticationDetails>();

to store ticket credentials.
I want to use the ticket through my web application's life cycle. My tomcat uses ThreadPool, so I think I cannot use this implementation of the web services client…

Any Idea?, Am I wrong? What can I do…….

Re: TICKET problem in Alfresco Session

sylvain78 — Fri, 31 Aug 2007 17:09:06 GMT

I had the same problem. The user sessions were getting mixed up because of the ThreadPool.

Here is the class I use to work with a ticket.

Basically, I took the startSession, the endSession and the WS_SECURITY_INFO from the AuthenticationUtils class and add them to WebServiceFactory. I don't use the callbackHandler anymore, I just set the password (ticket, in fact…) right away whenever I call a service.

I had to make a few changes to other class, such as ContentUtils, etc.

This solution doesn't use the CookieHandler. What do you think the CookieHandler is used for? All I know is that it works without it!


public final class WebServiceClient
{
    /** Log */
    private static Log logger = LogFactory.getLog(WebServiceClient.class);
    
    /** Property file name */
    private static final String PROPERTY_FILE_NAME = "alfresco/webserviceclient.properties";
    private static final String REPO_LOCATION = "repository.location";
    
    /** Default endpoint address **/
    private static final String DEFAULT_ENDPOINT_ADDRESS = "http://localhost:8080/alfresco/api";
    private static String endPointAddress;
    
    /** Service addresses */
    private static final String AUTHENTICATION_SERVICE_ADDRESS  = "/AuthenticationService";
    private static final String REPOSITORY_SERVICE_ADDRESS      = "/RepositoryService";
    private static final String CONTENT_SERVICE_ADDRESS         = "/ContentService";
    private static final String AUTHORING_SERVICE_ADDRESS       = "/AuthoringService";
    private static final String CLASSIFICATION_SERVICE_ADDRESS  = "/ClassificationService";
    private static final String ACTION_SERVICE_ADDRESS          = "/ActionService";
    private static final String ACCESS_CONTROL_ADDRESS          = "/AccessControlService";
    private static final String ADMINISTRATION_ADDRESS          = "/AdministrationService";
    private static final String DICTIONARY_SERVICE_ADDRESS      = "/DictionaryService";
    
    /** WS security information */
    private static final String WS_SECURITY_INFO =
         "<deployment xmlns='http://xml.apache.org/axis/wsdd/' xmlns:java='http://xml.apache.org/axis/wsdd/providers/java'>" +
         "   <transport name='http' pivot='java:org.apache.axis.transport.http.HTTPSender'/>" +
         "   <globalConfiguration >" +
         "     <requestFlow >" +
         "       <handler type='java:org.apache.ws.axis.security.WSDoAllSender' >" +
         "               <parameter name='action' value='UsernameToken Timestamp'/>" +
         "               <parameter name='user' value='ticket'/>" +
         "               <parameter name='passwordType' value='PasswordText'/>" +
         "           </handler>" +
//         "       <handler name='cookieHandler' type='java:util.CookieHandler' />" +
         "     </requestFlow >" +
         "   </globalConfiguration>" +
         "</deployment>";

    /**
     * Sets the endpoint address manually, overwrites the current value
     * 
     * @param endPointAddress   the end point address
     */
    public static void setEndpointAddress(String endPointAddress)
    {
       WebServiceClient.endPointAddress = endPointAddress;
    }
    
    /**
     * Get the current endpoints host
     * 
     * @return  the current endpoint host name
     */
    public static String getHost()
    {
        try
        {
            URL url = new URL(getEndpointAddress());
            return url.getHost();
        }
        catch (MalformedURLException exception)
        {
            throw new RuntimeException("Unable to get host string", exception);
        }
    }
    
    /**
     * Get the current endpoints port
     * 
     * @return  the current endpoint port number
     */
    public static int getPort()
    {
        try
        {
            URL url = new URL(getEndpointAddress());
            return url.getPort();
        }
        catch (MalformedURLException exception)
        {
            throw new RuntimeException("Unable to get host string", exception);
        }
    }
    
    public static AuthenticationDetails startSession(String username, String password)
       throws AuthenticationFault
   {
      AuthenticationDetails details = null;
       try
       {
           // Start the session
          AuthenticationResult result = getAuthenticationService().startSession(username, password);
          details = new AuthenticationDetails(result.getUsername(), result.getTicket(), result.getSessionid());
       }
       catch (RemoteException exception)
       {
           if (exception instanceof AuthenticationFault)
           {
               // Rethrow the authentication exception
               throw (AuthenticationFault)exception;
           }
           else
           {
               // Throw the exception as a wrapped runtime exception
               throw new WebServiceException("Error starting session.", exception);
           }
       }
       return details;
   }

    public static void endSession(AuthenticationDetails details)
    {
        if (details != null)
        {
            try
            {
                getAuthenticationService().endSession(details.getTicket());
            }
            catch (RemoteException exception)
            {
                throw new WebServiceException("Error ending session.", exception);
            }
        }
    }

    /**
     * Get the authentication service
     * 
     * @return
     */
    public static AuthenticationServiceSoapBindingStub getAuthenticationService()
    {
       AuthenticationServiceSoapBindingStub authenticationService = null;
        try 
        {
            // Get the authentication service
            AuthenticationServiceLocator locator = new AuthenticationServiceLocator();
            locator.setAuthenticationServiceEndpointAddress(getEndpointAddress() + AUTHENTICATION_SERVICE_ADDRESS);                
            authenticationService = (AuthenticationServiceSoapBindingStub)locator.getAuthenticationService();
        }
        catch (ServiceException jre) 
        {
           if (logger.isDebugEnabled() == true)
            {
              if (jre.getLinkedCause() != null)
                {
                 jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating authentication service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        authenticationService.setTimeout(60000);
        
        return authenticationService;
    }
    
    public static RepositoryServiceSoapBindingStub getRepositoryService(AuthenticationDetails details)
    {
       return getRepositoryService(details, getEndpointAddress());
    }
    
    /**
     * Get the repository service
     * 
     * @return
     */
    public static RepositoryServiceSoapBindingStub getRepositoryService(AuthenticationDetails details, String endpointAddress)
    {
       RepositoryServiceSoapBindingStub repositoryService = null;           
      try 
      {
          // Get the repository service
          RepositoryServiceLocator locator = new RepositoryServiceLocator(getEngineConfiguration());
          locator.setRepositoryServiceEndpointAddress(endpointAddress + REPOSITORY_SERVICE_ADDRESS);                
          repositoryService = (RepositoryServiceSoapBindingStub)locator.getRepositoryService();
          repositoryService.setPassword(details.getTicket());
            repositoryService.setMaintainSession(true);
       }
       catch (ServiceException jre) 
       {
          if (logger.isDebugEnabled() == true)
           {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
           }
         
          throw new WebServiceException("Error creating repositoryService service: " + jre.getMessage(), jre);
      }        
   
      // Time out after a minute
      repositoryService.setTimeout(60000);      
        
        return repositoryService;
    }
    
    public static AuthoringServiceSoapBindingStub getAuthoringService(AuthenticationDetails details)
    {
       return getAuthoringService(details, getEndpointAddress());
    }
    
    /**
     * Get the authoring service
     * 
     * @return
     */
    public static AuthoringServiceSoapBindingStub getAuthoringService(AuthenticationDetails details, String endpointAddress)
    {
       AuthoringServiceSoapBindingStub authoringService = null;
                  
        try 
        {
            // Get the authoring service
            AuthoringServiceLocator locator = new AuthoringServiceLocator(getEngineConfiguration());
            locator.setAuthoringServiceEndpointAddress(endpointAddress + AUTHORING_SERVICE_ADDRESS);                
            authoringService = (AuthoringServiceSoapBindingStub)locator.getAuthoringService();
            authoringService.setPassword(details.getTicket());
            authoringService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating authoring service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        authoringService.setTimeout(60000);       
        
        return authoringService;
    }
    
    public static ClassificationServiceSoapBindingStub getClassificationService(AuthenticationDetails details)
    {
       return getClassificationService(details, getEndpointAddress());
    }
    
    /**
     * Get the classification service
     * 
     * @return
     */
    public static ClassificationServiceSoapBindingStub getClassificationService(AuthenticationDetails details, String endpointAddress)
    {
       ClassificationServiceSoapBindingStub classificationService = null;
            
        try 
        {
            // Get the classification service
            ClassificationServiceLocator locator = new ClassificationServiceLocator(getEngineConfiguration());
            locator.setClassificationServiceEndpointAddress(endpointAddress + CLASSIFICATION_SERVICE_ADDRESS);                
            classificationService = (ClassificationServiceSoapBindingStub)locator.getClassificationService();
            classificationService.setPassword(details.getTicket());
            classificationService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating classification service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        classificationService.setTimeout(60000);        
        
        return classificationService;
    }
    
    public static ActionServiceSoapBindingStub getActionService(AuthenticationDetails details)
    {
       return getActionService(details, getEndpointAddress());
    }
    
    /**
     * Get the action service
     * 
     * @return
     */
    public static ActionServiceSoapBindingStub getActionService(AuthenticationDetails details, String endpointAddress)
    {
       ActionServiceSoapBindingStub actionService = null;
            
        try 
        {
            // Get the action service
            ActionServiceLocator locator = new ActionServiceLocator(getEngineConfiguration());
            locator.setActionServiceEndpointAddress(endpointAddress + ACTION_SERVICE_ADDRESS);                
            actionService = (ActionServiceSoapBindingStub)locator.getActionService();
            actionService.setPassword(details.getTicket());
            actionService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating action service: " + jre.getMessage(), jre);
        }        
            
        // Time out after a minute
        actionService.setTimeout(60000);      
        
        return actionService;
    }
    
    public static ContentServiceSoapBindingStub getContentService(AuthenticationDetails details)
    {
       return getContentService(details, getEndpointAddress());
    }
    
    /**
     * Get the content service
     * 
     * @return  the content service
     */
    public static ContentServiceSoapBindingStub getContentService(AuthenticationDetails details, String endpointAddress)
    {
       ContentServiceSoapBindingStub contentService = null;           
        try 
        {
            // Get the content service
            ContentServiceLocator locator = new ContentServiceLocator(getEngineConfiguration());
            locator.setContentServiceEndpointAddress(endpointAddress + CONTENT_SERVICE_ADDRESS);                
            contentService = (ContentServiceSoapBindingStub)locator.getContentService();
            contentService.setPassword(details.getTicket());
            contentService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating content service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        contentService.setTimeout(60000);       
        
        return contentService;
    }
    
    public static AccessControlServiceSoapBindingStub getAccessControlService(AuthenticationDetails details)
    {
       return getAccessControlService(details, getEndpointAddress());
    }
    
    /**
     * Get the access control service
     * 
     * @return  the access control service
     */
    public static AccessControlServiceSoapBindingStub getAccessControlService(AuthenticationDetails details, String enpointAddress)
    {
       AccessControlServiceSoapBindingStub accessControlService = null;           
        try 
        {
            // Get the access control service
            AccessControlServiceLocator locator = new AccessControlServiceLocator(getEngineConfiguration());
            locator.setAccessControlServiceEndpointAddress(enpointAddress + ACCESS_CONTROL_ADDRESS);                
            accessControlService = (AccessControlServiceSoapBindingStub)locator.getAccessControlService();
            accessControlService.setPassword(details.getTicket());
            accessControlService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating access control service: " + jre.getMessage(), jre);
        }        
            
        // Time out after a minute
        accessControlService.setTimeout(60000);
        
        return accessControlService;
    }
    
    public static AdministrationServiceSoapBindingStub getAdministrationService(AuthenticationDetails details)
    {
       return getAdministrationService(details, getEndpointAddress());
    }
    
    /**
     * Get the administation service
     * 
     * @return  the administration service
     */
    public static AdministrationServiceSoapBindingStub getAdministrationService(AuthenticationDetails details, String endpointAddress)
    {
       AdministrationServiceSoapBindingStub administrationService = null;
            
        try 
        {
            // Get the adminstration service
            AdministrationServiceLocator locator = new AdministrationServiceLocator(getEngineConfiguration());
            locator.setAdministrationServiceEndpointAddress(endpointAddress + ADMINISTRATION_ADDRESS);                
            administrationService = (AdministrationServiceSoapBindingStub)locator.getAdministrationService();
            administrationService.setPassword(details.getTicket());
            administrationService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating administration service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        administrationService.setTimeout(60000);       
        
        return administrationService;
    }
    
    public static DictionaryServiceSoapBindingStub getDictionaryService(AuthenticationDetails details)
    {
       return getDictionaryService(details, getEndpointAddress());
    }

    /**
     * Get the dictionary service
     * 
     * @return  the dictionary service
     */
    public static DictionaryServiceSoapBindingStub getDictionaryService(AuthenticationDetails details, String endpointAddress)
    {
       DictionaryServiceSoapBindingStub dictionaryService = null;
           
        try 
        {
            // Get the dictionary service
            DictionaryServiceLocator locator = new DictionaryServiceLocator(getEngineConfiguration());
            locator.setDictionaryServiceEndpointAddress(endpointAddress + DICTIONARY_SERVICE_ADDRESS);                
            dictionaryService = (DictionaryServiceSoapBindingStub)locator.getDictionaryService();
            dictionaryService.setPassword(details.getTicket());
            dictionaryService.setMaintainSession(true);
        }
        catch (ServiceException jre) 
        {
            if (logger.isDebugEnabled() == true)
            {
                if (jre.getLinkedCause() != null)
                {
                    jre.getLinkedCause().printStackTrace();
                }
            }
   
            throw new WebServiceException("Error creating dictionary service: " + jre.getMessage(), jre);
        }        
        
        // Time out after a minute
        dictionaryService.setTimeout(60000);

        return dictionaryService;
    }
    
    /**
     * Gets the end point address from the properties file
     * 
     * @return
     */
    private static String getEndpointAddress()
    {
       if (endPointAddress == null)
       {
          endPointAddress = DEFAULT_ENDPOINT_ADDRESS;
   
           InputStream is = Thread.currentThread().getContextClassLoader().getResourceAsStream(PROPERTY_FILE_NAME); 
           if (is != null)
           {
               Properties props = new Properties();
               try
               {
                   props.load(is);            
                   endPointAddress = props.getProperty(REPO_LOCATION);
                   
                   if (logger.isDebugEnabled() == true)
                   {
                       logger.debug("Using endpoint " + endPointAddress);
                   }
               }
               catch (Exception e)
               {
                   // Do nothing, just use the default endpoint
                   if (logger.isDebugEnabled() == true)
                   {
                       logger.debug("Unable to file web service client proerties file.  Using default.");
                   }
               }
           }
       }
        
        return endPointAddress;
    }

    /**
     * Gets the engine configuration used to create the web service references
     *
     * @return
     */
    public static EngineConfiguration getEngineConfiguration()
    {
        return new FileProvider(new ByteArrayInputStream(WS_SECURITY_INFO.getBytes()));
    }
}
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Hope this helps

Re: TICKET problem in Alfresco Session

sylvain78 — Fri, 31 Aug 2007 17:13:01 GMT

I may have forgotten to mention that I keep the authenticationDetails (not only the ticket) from the startSession and keep it in my webapp user session.

Whenever I call a web service, I send it along.

Re: TICKET problem in Alfresco Session

alexcocia — Mon, 03 Sep 2007 08:11:16 GMT

Hi sylvain,

I did a little test, and it seems to be working correctly… I think I have to change a bit of my code, but it will be ok, finally….

Thanks for the post!!!!

Alex

Re: TICKET problem in Alfresco Session

karkaletsis — Wed, 26 Sep 2007 13:58:25 GMT

I made the changes you refer to. But how do I pass the ticket from the session to the web service?

Re: TICKET problem in Alfresco Session

nuga — Wed, 26 Sep 2007 16:00:27 GMT

since i didn't want to modify their code. i used an aspect to connect and disconnect each time i wanted to make a service call. that way every time i connected to the service, it would start and stop a fresh session i didn't have to worry about invalid tickets
and i can just create service methods, and using the right selector in the aspect, it will automatically connect me so i dont' have to worry about including that logic in my service

public String connect() throws Exception {

      
      try {
         AuthenticationUtils.startSession(userName, password);
         AuthenticationDetails details = AuthenticationUtils.getAuthenticationDetails();
         EngineConfiguration config = AuthenticationUtils.getEngineConfiguration();
      
         return AuthenticationUtils.getTicket();
      } catch (AuthenticationFault e) {
         log
               .fatal(
                     "Caught Authentication Exception trying to start the session.",
                     e);

         throw e;
      }
   }

   public void disconnect() {
   
      AuthenticationUtils.endSession();

   }‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: TICKET problem in Alfresco Session

sylvain78 — Wed, 26 Sep 2007 17:16:23 GMT

The main concern with creating a new session each time you call the web service is that you send the username and password on the network every time. You can see them clearly using tcpmon.

Anybody succeeded in encrypting the username and password in the SOAP envelope?

This is why I managed to reuse the ticket : WebServiceClient.getRepositoryService(authenticationDetails).get…

Re: TICKET problem in Alfresco Session

karkaletsis — Wed, 26 Sep 2007 18:37:32 GMT

thanks for your answer. I managed it. I store the Authentication details in the session and pass it to the web service.

Re: TICKET problem in Alfresco Session

hanoi — Thu, 07 Feb 2008 14:54:18 GMT

Hi, I'm facing a similar issue using web service client.
Let me describe my scenario: userX performes a login on alfresco system and tries to retrieve a content list using the given ticketid, 'ticketid_X'.
After 3/4 calls to the same method, the same user, using the same ticket, gets the following error while retrieving content list:
WSSecurityEngine: Callback supplied no password for: ticket

Just to be precise: I print the ticketid value for each call done to alfresco system: the ticketid is always set with the correct value 'ticketid_X'.

These are my configuration parameters:
- Alfresco'web.xml: session timeout is set to 60 minutes;
- Alfresco'configuration: ticket expiring time (expires_ticket) is set to false;
Could this the matter be related to cache-context.xml, (max cache size, which is set to 10)?
Any clues? How can I solve it?

Re: TICKET problem in Alfresco Session

robertoroberto — Fri, 08 Feb 2008 12:31:12 GMT

I have the same problem. The ticket go lost.

Re: TICKET problem in Alfresco Session

rwetherall — Thu, 06 Mar 2008 14:18:50 GMT

Hi,

The CookieHandler, as you will have noticed, is not required for the web service call to work. However, what it does do is ensure that the JSESSION id cookie value is mantained on web service calls to the applicaiton server.

This is important because it prevents web sessions, perticularily in Tomcat, from being created everytime a web service request is made. Instead by maintaining the JSESSION only one web serssion per ticket is create. So its worth looking at using the cookie header if you've reimplemenated AuthenticationUtils to ensure you don't run into this silent issue.

Cheers,
Roy

Re: TICKET problem in Alfresco Session

robertoroberto — Thu, 06 Mar 2008 15:24:11 GMT

Hi, I have problem with Authentication web service.
I have a web application with some users.

1. I access with a username, I call authentication web service and i get the ticket.
2. I access to a myspaces web script with that ticket and all is OK.
3. I do logout and I call AuthenticationUtils.endSession
4. I access with an other username, I call authentication web service and i get another the ticket.
5. When I access to myspaces web script it redirect on alfresco login page.

I must open an other browser session to correctly access to myspaces webscript with an other user.
Onyone can help me? is there a solution or there are bug in authentication web service?

sorry for my english

Re: TICKET problem in Alfresco Session

naples78 — Tue, 20 May 2008 16:04:13 GMT

Hi,

I've a similar problem. I get authentication to alfresco via web service and access to user space via http given the ticket id in the url.(/alfresco/navigate/browse.jsp?ticket="TICKET_……")
When i perform a logout and logon with a different user ( with the same procedure webservice+http) alfresco shows the previous user space.

I have seen that the problem is about the two calls, web service and http, because two different sessions are created.
I call endSession via webservice to invalidate the session(created after the startSession) but the http session is still valid.

Then when the session is not created the ticket has importance but when the session is already open with the browser the ticket has not importance!!

It is a bug or normal function?
Is there a solution to use the same session id?

(please sorry for my bad English)

Thanks,
Guido

Re: TICKET problem in Alfresco Session

robertoroberto — Wed, 28 May 2008 07:03:09 GMT

Hi, How I can modify code of Authentication webService?
regards

Re: TICKET problem in Alfresco Session

vanhoeck — Wed, 23 Jul 2008 15:18:02 GMT

I also have a similar problem. We would like to do a Lucene-Query, by using only a ticket to authorize. The problem here is that we don't have Authentication Details from previous sessions. Anyone have an idea on how to fix that?

Greetings,
Tim

Re: TICKET problem in Alfresco Session

madnicow — Thu, 15 Jan 2009 17:12:35 GMT

I had the same problem as Naples78 but I found why I can't logout and then login with a different user using a different ticket.
It's because when we lauch a new web session, the first time, the ticket provided in the url is used to authenticate the user.
At this moment, the user object is maintain in the session.The next time you try to enter a new ticket in the url, the ticket will be ignored and this is the user object in the web session that is used. (You can easily see that if try to open a new session with a different valid ticket, you will see that you will be connected with the other user).

In order to solve this problem, I forced Alfresco to use the ticket provided in the url and not the object in the web session. You have to overwrite the org.alfresco.web.app.servlet.AuthenticationHelper class.
In authenticate(ServletContext context, HttpServletRequest httpRequest, HttpServletResponse httpResponse, String ticket) method in order to not use the User object in session if the ticket is different.

Re: TICKET problem in Alfresco Session

unknown-user — Fri, 16 Jan 2009 04:41:22 GMT

Hi Alexcocia

As i seen that you have solved ticket problem, me also facing the same.
I am passing the ticket id after the URL then also it is showing the login screen and then it is not taking admin (username) and admin(password).

If i paste this URL(with ticket id) in a new browser then it is showing the following error—

System Error

java.lang.IllegalStateException: Cannot create a session after the response has been committed

Is there any configuration required in alfresco server for getting the valid ticket.
Bold line (regarding NTLM) in the below document is not clear to me.I got the following documentation which i am following —-

Security
Access to content or pages in the web-client is protected by the same node level security as any other API within Alfresco. If a request for node content is made without an appropriate security context, a login page will be presented. If NTLM or other single sign-on authentication is present, then it will be used if applicable. Guest Access or a Ticket URL Argument can also be used if appropriate to avoid the login page.

Guest Access
Guest access is now supported for all Alfresco URLs. The URL parameter guest=true can be appended to any Alfresco URL and the login page will not be displayed before the URL is processed. The Guest user must have access to the item referenced by the URL or the access attempt will fail. For example:

http://myserver:8080/alfresco/download/attach/workspace/SpacesStore/0000-0000-0000-0000/myfile.pdf?guest=true
Guest access allows URLs to be sent in emails etc. to provide external access to content or template rendering results to users who do not have an Alfresco login. If the Guest login is successful then the URL will not require a login page, however if guest access fails the Login page is shown as normal. Also, if a permissions check to the template or node referenced by the URL fails then the Login page is shown.

Ticket URL Argument
If the API you are using wishes to use a servlet directly and does not require the Alfresco web-client screen for security authentication, then you must aquire a valid Authentication ticket from the appropriate API call - you can use a Web-Services API call to request a ticket.

This can then be appended to any servlet URL as the ticket argument to provide authentication without login, for example:

/alfresco/download/attach/workspace/SpacesStore/0000-0000-0000-0000/myfile.pdf?ticket=1234567890

Kindly help me.

Regards
Nishant

Re: TICKET problem in Alfresco Session

mayanksahai — Fri, 30 Jan 2009 07:46:09 GMT

Hi sylvain ,

thanks for interesting post. i implemented the code provided by you but while calling service.Query it throws excception
that – PASSWORD NOT FOUND.

i am writing the code to upload bulk of files from file system to alfresco repository.
my logic is :

1) I use "admin" admin as username password combination and establishes a session.
2) use ur code to store the Authentication details.
3) use Executor Service to spool threads – each thread performing an upload in alfresco repository.
4) my issue is that i want to share authentication details with call to service in each thread.
i see that service is having the ticket information associated with it but still it says passowrd not found.

code is :

public boolean serve(){
       try{
        details = WebServiceClient.startSession(username, password);
       }catch(AuthenticationFault f){
          f.printStackTrace();
       }
      String[] files = generatefileName();
      for(String name : files)
         pool.execute( new Handler(name , details)); ———— spooling thread to upload files.
      WebServiceClient.endSession(details); – i feel error could be here…..calling thread may be clsoing the session.
      return uploaded;
   }


   public class Handler implements Runnable{
      private String fileName;
      private AuthenticationDetails authDetails;

      public Handler(String fileName , AuthenticationDetails details){
         this.fileName = fileName;
         this.authDetails = details;
      }

      public void run() {

           try{

           String customerId = "1";
         // start session using authentication util.
           String[] files = {fileName};
         String name = "PATH:\"app:company_home/cm:TaxPlanning/*\"" ;
         logger.log(Level.DEBUG, name);
         RepositoryServiceSoapBindingStub service = WebServiceClient.getRepositoryService(authDetails);
         //service.setPassword("admin");
         Query query = new Query(Constants.QUERY_LANG_LUCENE,name );
         QueryResult queryResult = service.query(STORE, query, true);
         logger.log(Level.DEBUG, " query result size is ::"+queryResult.getResultSet().getTotalRowCount() );
         // bind to content service.
         ContentServiceSoapBindingStub contentService =WebServiceClient.getContentService(authDetails);
         //contentService.setPassword("admin");
         // create parent reference
         ParentReference companyHomeParent = new ParentReference(STORE, null, "/app:company_home/cm:TaxPlanning",
                  Constants.ASSOC_CONTAINS, "{" + Constants.NAMESPACE_CONTENT_MODEL + "}" + "TaxDocs");
         NamedValue[] contentProps = new NamedValue[3];
         NamedValue[] titledProps = new NamedValue[2];
         CML cml = new CML();
         Query query1 = new Query();
         for(String fileName : files){
          // Assign name to children
          companyHomeParent.setChildName("{http://www.alfresco.org/model/content/1.0}" + fileName);
          //
          ContentFormat contentFormat = new ContentFormat("Adobe PDF Document", "UTF-8");
          contentProps[0] = Utils.createNamedValue(Constants.PROP_NAME, fileName);
          contentProps[1] = Utils.createNamedValue(Constants.PROP_CONTENT, contentFormat.getMimetype());
          contentProps[2] = Utils.createNamedValue(Constants.PROP_USER_ORGID, customerId);
          //Construct CML statement to add titled aspect
          titledProps[0] = Utils.createNamedValue(Constants.PROP_TITLE, fileName);
          titledProps[1] = Utils.createNamedValue(Constants.PROP_DESCRIPTION, "Tax Document for customer");

          CMLAddAspect addAspect = new CMLAddAspect(Constants.ASPECT_VERSIONABLE, contentProps, null, "1");
          // query to search for existing file with same name
          query1 = new Query(Constants.QUERY_LANG_LUCENE, "PATH:\"app:company_home/cm:TaxPlanning/cm:" + fileName + "\"");
          ResultSet rs =service.query(STORE, query1, false).getResultSet();
          // file already exist, then, delete it and create a new one
          if(rs.getTotalRowCount() > 0){
             System.out.println("file found ::" + fileName);
             ResultSetRow[] rsRows = rs.getRows();
             System.out.println("Removing file " + rsRows[0].getColumns(3).getValue()); //show file name
             Reference reference = new Reference(STORE, rsRows[0].getNode().getId(), null);
             System.out.println("removing reference" + rsRows[0].getNode().getId());
             Predicate predicate = new Predicate(new Reference[]{reference}, null, null);
             CMLDelete delete = new CMLDelete(predicate);
             cml.setDelete(new CMLDelete[] {delete});
             service.update(cml);
          }
          logger.log(Level.INFO, "creating new content from scratch");
          //create content
          // Construct CML statement to create content node
          // Note: Assign "1" as a local id, so we can refer to it in subsequent
          // CML statements within the same CML block
          CMLCreate create = new CMLCreate("1", companyHomeParent, companyHomeParent.getUuid(), Constants.ASSOC_CONTAINS, null, Constants.PROP_CONTENT, contentProps);
          // Construct CML Block
          cml = new CML();
          cml.setAddAspect(new CMLAddAspect[] {addAspect});
          cml.setCreate(new CMLCreate[] {create});
          // Issue CML statement via Repository Web Service and retrieve result
          // Note: Batching of multiple statements into a single web call
          UpdateResult[] result = service.update(cml);
          Reference content = result[0].getDestination();

          // Write some content
          //ContentServiceSoapBindingStub contentService = WebServiceFactory.getContentService();
          FileInputStream fi = new FileInputStream("/home/mayank/Desktop/" + "ITR Doc.pdf");
          BufferedInputStream is = new BufferedInputStream(fi);
          byte[] bytes = ContentUtils.convertToByteArray(is);
          ContentFormat format = new ContentFormat("application/pdf", "UTF-8");
             // Write the content
          contentService.write(content, Constants.PROP_CONTENT, bytes, format);
         }
         uploaded = true;

       }