topic Re: Nuxeo + Jasig CAS in Nuxeo Forum

Nuxeo + Jasig CAS

maxpanteleev_ — Mon, 08 Jun 2015 08:56:48 GMT

Hello! I am deploying Nuxeo for the first time and also this is first time I am setting up SSO which is jasig CAS server. I have downloaded the plugin, configured the descriptor and auth chain. Now is the question: should the LDAP or SQL directory be configured in the Nuxeo, to allow the system check the user permissions. I.e.: how can I login with the admin credentials if I am constantly redirected to CAS page?

Re: Nuxeo + Jasig CAS

Antoine_Cordier — Fri, 12 Jun 2015 13:32:01 GMT

Hi,

Yes if you are using CAS/LDAP to handle authentication your need to configure Nuxeo to bind the same LDAP directory to provision user accounts.

https://doc.nuxeo.com/display/ADMINDOC/Using+a+LDAP+Directory

In order to use an LDAP account to log in as an administrator, you will need to configure this extension point:

<extension target="org.nuxeo.ecm.platform.usermanager.UserService" point="userManager">
    <userManager>
      <!-- ldap administrator uid -->
      <defaultAdministratorId>12345</defaultAdministratorId>
      <!-- admin group -->
      <administratorsGroup>ecm-admin</administratorsGroup>
      <defaultGroup>members</defaultGroup>
    </userManager>
</extension>

Re: Nuxeo + Jasig CAS

maxpanteleev_ — Mon, 15 Jun 2015 14:00:10 GMT

Thanks for the reply, but can I use only CAS server and Nuxeo internal user manager to perform authentication?

Re: Nuxeo + Jasig CAS

Antoine_Cordier — Mon, 15 Jun 2015 14:21:16 GMT

What do you want to use CAS for then ? If what you mean is can I mix CAS authentication with other authentication methods the answer is yes, you can chain authentication methods and stack authentication modules as demonstrated in the documentation