topic Re: Basic Authentication in Alfresco Archive

Basic Authentication

mcruz — Wed, 05 Sep 2007 10:41:46 GMT

Hi all !Is it possible to configure Alfresco in order to use basic authentication? (just like Apache)The idea is to reach Alfresco via Apache, authenticate in Apache and then not having to authenticate again in Alfresco.We know this one is not the best security configuration by far, but we have to w

Re: Basic Authentication

mcruz — Thu, 06 Sep 2007 09:16:40 GMT

I have written in web.xml the following lines:

<security-constraint>
<web-resource-collection>
    <web-resource-name>
      Entire Application
    </web-resource-name>
    <url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
      <role-name>member</role-name>
</auth-constraint>
</security-constraint>

<!– Define the Login Configuration for this Application –>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>My Club Members-only Area</realm-name>
</login-config>

Now, when I try to reach Alfresco (http://localhost:8080/alfresco) I get a basic authentication pop-up.

Is it possible that Alfresco uses the information of the pop-up to login ? (and then I wouldn't get the Alfresco login page later)

I have disabled the filter-mapping for "Authentication Filter" but I get a AuthenticationCredentialsNotFoundException when I reach Alfresco

Thanks

Re: Basic Authentication

andy — Mon, 10 Sep 2007 15:33:41 GMT

Hi

There is an autherntication filter that can just read the user name from a header. Is this what you need?

Andy

Re: Basic Authentication

mcruz — Mon, 10 Sep 2007 15:39:10 GMT

Thanks Andy

Yes, that's what I need, a basic authentication and then read the username (but also the password to be able to get a ticket in Alfresco) from the header of the request.

Which one is the authentication filter you talk about?

Thank you again