topic Re: Permanent links don't work with CAS Authentication ? in Nuxeo Forum

Permanent links don't work with CAS Authentication ?

manuek_ — Thu, 25 Apr 2013 15:03:18 GMT

Hi,

We trying to use permanent link like this one "http://localhost/nuxeo/nxdoc/default/5e84c7a3-e40c-4152-9497-b0cfdb916a6a/view_documents" to access document on a "nuxeo-cap-5.6-tomcat" server, with HF15 and DM add-on.

We first test this possibility with a default authentification: it works as expected (direct access).

But, we need use CAS authentication and in this case, the permanent link doesn't work anymore ... It's for us an important issue because we need direct acces on task (workflow context) send via email to our users.

Is it a known problem ?

We've done tests on two differents "Centos (5.9 and 6.4)" servers:

In both case:
- a first direct access doesn't work. The return URL from CAS is wrong: the path to the document is missing.
On one server (Centos 6.4, nuxeo-5.6-HF10), after a first connection and deconnection (without removing JSESSION cookie) to the plateform, the direct access on a document works even with a CAS access for authentication (the return URL is correct). No error message are seen (with a default log4j configuration).

On the other one (Centos 5.9, nuxeo-5.6-HF15), an access after a first connection and deconnection (without removing JSESSION cookie) doesn't work and an error message is sent in the log:

 2013-04-25 14:26:49,819 ERROR [org.nuxeo.ecm.core.api.CoreSession] Permission 'Read' is not granted to 'invite' on document /default-domain/workspaces/niv2/dd (5e84c7a3-e40c-4152-9497-b0cfdb916a6a - Folder)
 2013-04-25 14:26:49,821 ERROR [org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/nuxeo]] L'écouteur d'évènement de session (session event listener) a généré une exception java.lang.IllegalStateException: Please end the HttpSession via org.jboss.seam.web.Session.instance().invalidate()
 at org.jboss.seam.contexts.Lifecycle.endSession(Lifecycle.java:221)
 ....

Thanks for your help

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Tue, 30 Apr 2013 16:00:32 GMT

We just try nuxeo5.6-HF15 on a Ubuntu 11.10 machine and we got the same result

Re: Permanent links don't work with CAS Authentication ?

Anahide_Tchertc — Wed, 15 May 2013 11:01:04 GMT

Hi,

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Wed, 15 May 2013 11:23:09 GMT

Hi,

Re: Permanent links don't work with CAS Authentication ?

Anahide_Tchertc — Wed, 15 May 2013 14:46:56 GMT

No, it's http

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Wed, 15 May 2013 14:58:19 GMT

I thought about the nuxeo server.

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Fri, 17 May 2013 18:28:34 GMT

I think it's more a nuxeo problem as the URL used to go to the CAS server for authentication, is a truncated URL.

Re: Permanent links don't work with CAS Authentication ?

Wed, 22 May 2013 15:42:02 GMT

I've tested this and it works correctly, the URL does not get truncated and after logging in on CAS I'm redirected to the correct page.

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Thu, 23 May 2013 16:17:46 GMT

First, thank you for your help.

Re: Permanent links don't work with CAS Authentication ?

Fri, 24 May 2013 17:29:15 GMT

Yes, the second redirect is wrong, the service isn't encoded correctly, I'll try to give you a fix next week.

Re: Permanent links don't work with CAS Authentication ?

Mon, 27 May 2013 16:29:19 GMT

This should be fixed (works in my tests!) and available in the next hotfix (5.6-HF18).

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Mon, 03 Jun 2013 16:26:01 GMT

Hi,

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Mon, 03 Jun 2013 18:30:23 GMT

For the curious, link to our second pb with CAS authentication and permanent links

Re: Permanent links don't work with CAS Authentication ?

Tue, 04 Jun 2013 15:45:06 GMT

My configuration is pretty much what's in the documentation except for the server names.

Re: Permanent links don't work with CAS Authentication ?

Antoine_Cordier — Fri, 29 Nov 2013 10:21:34 GMT

Hello, is this fixed and if yes can you please tell me what is the hotfix to begin with ?

Re: Permanent links don't work with CAS Authentication ?

manuek_ — Fri, 29 Nov 2013 10:31:30 GMT

Hi,

Re: Permanent links don't work with CAS Authentication ?

ITassas_ — Tue, 14 Jan 2014 17:18:26 GMT

Using CAS authentication with anonymous auth enabled, we've got the same problem( the return URL from CAS is appURL not the permanentlink ). This bug is still present in 5.8.