<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Nuxeo and PROXY_AUTH in Nuxeo Forum</title>
    <link>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328529#M15530</link>
    <description>&lt;P&gt;Hi,
I want to use Nuxeo with openam (access management solution).
So i use PROXY_AUTH plugin.
If i modify index.jsp and add out.print(request.getHeader("ssouser")), i can see my user id.
But after redirection to nxstartup.faces, i have this message :&lt;/P&gt;
&lt;P&gt;"If you can read this in your browser, this probably because of a configuration problem of your nuxeo.war/WEB-INF/pages.xml. To change this, edit the OSGI-INF/deployment-fragment.xml of your project at extension pages#PAGES."&lt;/P&gt;
&lt;P&gt;This is my proxy-auth-config.xml&lt;/P&gt;
&lt;P&gt;&lt;EM&gt;&lt;EXTENSION target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService" point="authenticators"&gt;
&lt;AUTHENTICATIONPLUGIN name="PROXY_AUTH" enabled="true" class="org.nuxeo.ecm.platform.ui.web.auth.proxy.ProxyAuthenticator"&gt;
&lt;LOGINMODULEPLUGIN&gt;Trusting_LM&lt;/LOGINMODULEPLUGIN&gt;
&lt;PARAMETERS&gt;
&lt;PARAMETER name="ssoHeaderName"&gt;SSOUSER&lt;/PARAMETER&gt;
&lt;PARAMETER name="usernameUnwantedPartExpression"&gt;@&lt;/PARAMETER&gt;
&lt;/PARAMETERS&gt;
&lt;/AUTHENTICATIONPLUGIN&gt;
&lt;/EXTENSION&gt;
&lt;EXTENSION target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService" point="chain"&gt;
&lt;AUTHENTICATIONCHAIN&gt;
&lt;PLUGINS&gt;
&lt;!--  Keep basic Auth at top of Auth chain to support RSS access via BasicAuth --&gt;
&lt;PLUGIN&gt;BASIC_AUTH&lt;/PLUGIN&gt;
&lt;PLUGIN&gt;PROXY_AUTH&lt;/PLUGIN&gt;
&lt;/PLUGINS&gt;
&lt;/AUTHENTICATIONCHAIN&gt;
&lt;/EXTENSION&gt;
&lt;/EM&gt;&lt;/P&gt;
&lt;P&gt;I don't know why nuxeo can get my http header attribute.&lt;/P&gt;
&lt;P&gt;Thanks
David&lt;/P&gt;</description>
    <pubDate>Mon, 03 Feb 2014 22:28:08 GMT</pubDate>
    <dc:creator>David79_</dc:creator>
    <dc:date>2014-02-03T22:28:08Z</dc:date>
    <item>
      <title>Nuxeo and PROXY_AUTH</title>
      <link>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328529#M15530</link>
      <description>&lt;P&gt;Hi,
I want to use Nuxeo with openam (access management solution).
So i use PROXY_AUTH plugin.
If i modify index.jsp and add out.print(request.getHeader("ssouser")), i can see my user id.
But after redirection to nxstartup.faces, i have this message :&lt;/P&gt;
&lt;P&gt;"If you can read this in your browser, this probably because of a configuration problem of your nuxeo.war/WEB-INF/pages.xml. To change this, edit the OSGI-INF/deployment-fragment.xml of your project at extension pages#PAGES."&lt;/P&gt;
&lt;P&gt;This is my proxy-auth-config.xml&lt;/P&gt;
&lt;P&gt;&lt;EM&gt;&lt;EXTENSION target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService" point="authenticators"&gt;
&lt;AUTHENTICATIONPLUGIN name="PROXY_AUTH" enabled="true" class="org.nuxeo.ecm.platform.ui.web.auth.proxy.ProxyAuthenticator"&gt;
&lt;LOGINMODULEPLUGIN&gt;Trusting_LM&lt;/LOGINMODULEPLUGIN&gt;
&lt;PARAMETERS&gt;
&lt;PARAMETER name="ssoHeaderName"&gt;SSOUSER&lt;/PARAMETER&gt;
&lt;PARAMETER name="usernameUnwantedPartExpression"&gt;@&lt;/PARAMETER&gt;
&lt;/PARAMETERS&gt;
&lt;/AUTHENTICATIONPLUGIN&gt;
&lt;/EXTENSION&gt;
&lt;EXTENSION target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService" point="chain"&gt;
&lt;AUTHENTICATIONCHAIN&gt;
&lt;PLUGINS&gt;
&lt;!--  Keep basic Auth at top of Auth chain to support RSS access via BasicAuth --&gt;
&lt;PLUGIN&gt;BASIC_AUTH&lt;/PLUGIN&gt;
&lt;PLUGIN&gt;PROXY_AUTH&lt;/PLUGIN&gt;
&lt;/PLUGINS&gt;
&lt;/AUTHENTICATIONCHAIN&gt;
&lt;/EXTENSION&gt;
&lt;/EM&gt;&lt;/P&gt;
&lt;P&gt;I don't know why nuxeo can get my http header attribute.&lt;/P&gt;
&lt;P&gt;Thanks
David&lt;/P&gt;</description>
      <pubDate>Mon, 03 Feb 2014 22:28:08 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328529#M15530</guid>
      <dc:creator>David79_</dc:creator>
      <dc:date>2014-02-03T22:28:08Z</dc:date>
    </item>
    <item>
      <title>Re: Nuxeo and PROXY_AUTH</title>
      <link>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328530#M15531</link>
      <description>&lt;P&gt;And my Nuxeo DEBUG File
DEBUG [http-bio-0.0.0.0-8081-exec-13] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Exit Nuxeo Authentication filter&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,600 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Entering Nuxeo Authentication Filter&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Principal not found inside Request via getUserPrincipal&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Try getting authentication from cache&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Trying to retrieve userIdentification using plugin BASIC_AUTH&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Trying to retrieve userIdentification using plugin PROXY_AUTH&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] user/password not found in request, try into identity cache&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,601 WARN  [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] No auth plugin can be found to do the Login Prompt&lt;/P&gt;
&lt;P&gt;2014-02-03 22:32:15,609 ERROR [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.webapp.helpers.StartupHelper] error while initializing the Seam context with a CoreSession instance:&lt;/P&gt;</description>
      <pubDate>Mon, 03 Feb 2014 22:35:34 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328530#M15531</guid>
      <dc:creator>David79_</dc:creator>
      <dc:date>2014-02-03T22:35:34Z</dc:date>
    </item>
    <item>
      <title>Re: Nuxeo and PROXY_AUTH</title>
      <link>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328531#M15532</link>
      <description>&lt;P&gt;Finally find a solution using frontal apache (mod_ajp) and openam web agent.&lt;/P&gt;</description>
      <pubDate>Tue, 18 Feb 2014 17:13:25 GMT</pubDate>
      <guid>https://connect.hyland.com/t5/nuxeo-forum/nuxeo-and-proxy-auth/m-p/328531#M15532</guid>
      <dc:creator>David79_</dc:creator>
      <dc:date>2014-02-18T17:13:25Z</dc:date>
    </item>
  </channel>
</rss>

