topic Re: Nginx Reverse Proxy with Kerberos SSO in Alfresco Forum

Nginx Reverse Proxy with Kerberos SSO

neilecker — Tue, 05 Mar 2019 17:05:37 GMT

Has anyone successfully implemented nginx as a reverse proxy for Alfresco with SSO enabled? The below simplified configuration does work except for the SSO part so maybe I'm missing some header? Attempting to access /share results in an authentication challenge when it should pass the kerberos ti

Re: Nginx Reverse Proxy with Kerberos SSO

neilecker — Tue, 19 Mar 2019 17:18:26 GMT

For anyone who reads this it turns out the above configuration was fine. What had changed was in our DNS. I had switched from an "A record" which pointed the url of our Alfresco instance directly at the IP address of the proxy server to a cname which pointed at the name of the proxy server. After this, Kerberos did not function with either nginx or apache. So this somehow matters when passing Kerberos authentication though I'm not certain why, something to do with how the headers are passed that I don't understand I'm sure.

In the end, I switched back to an "A record" and Kerberos SSO works as expected.

Re: Nginx Reverse Proxy with Kerberos SSO

fedorow — Tue, 23 Apr 2019 09:19:47 GMT

I can't force Kerberos SSO works behind a nginx proxy. Can you tall me differences of configurations compared to documented method from docs.alfresco.com?

Re: Nginx Reverse Proxy with Kerberos SSO

neilecker — Thu, 02 May 2019 15:04:23 GMT

Hi Serge,

I'm not sure which documented method you mean, the examples provided on docs.alfresco.com seem to be only for Apache. What I showed earlier was the complete configuration used for nginx (with some names and paths changed).

Re: Nginx Reverse Proxy with Kerberos SSO

fedorow — Sun, 05 May 2019 04:09:37 GMT

Neil thanks! I have got SSO two days ago. It took some dancing with a tambourine, but it works now. Your configuration helps me check my conf file. Thanks!

Re: Nginx Reverse Proxy with Kerberos SSO

jbrasil — Fri, 17 Jul 2020 20:53:50 GMT

Hi neilecker,
The Alfresco Content Services mobile app does not communicate with sites that have the ssl protocol.
I installed Let's Encrypt on a website.
Sites with http connects normally
When trying to connect through the application, the following error message occurs:

Save Account
Couldn't save account. Check your account settings with your IT Team
Retry with diagnostic
Done

Clicking on Retry with diagnosis.
Go through the steps with the exception of Checking repository connection

Any configuration to be done?
Thank you.
José Roberto.

Re: Nginx Reverse Proxy with Kerberos SSO

fedorow — Sat, 18 Jul 2020 21:17:19 GMT

Mobile app works througth CMIS. Check alfresco.global.properties for CMIS configuration:

opencmis.context.override=false
opencmis.context.value=
opencmis.servletpath.override=false
opencmis.servletpath.value=
opencmis.server.override=true
opencmis.server.value=https://<external-proxy-host-name>

Use https://<external-proxy-host-name>/alfresco in the account configuration of Mobile App.

Re: Nginx Reverse Proxy with Kerberos SSO

jbrasil — Mon, 20 Jul 2020 14:51:00 GMT

Ok fedorow
It worked.
Thank you very much.