cancel
Showing results for 
Search instead for 
Did you mean: 

Alfresco Integration with OpenSSO

daxter123
Champ in-the-making
Champ in-the-making
HI,

How i can integrate alfresco with open sso?

Thanks
27 REPLIES 27

g_fernandes
Champ in-the-making
Champ in-the-making
We at Sourcesense (http://www.sourcesense.com) are maintainers of an opensource project that integrates Alfresco and OpenSSO.

Please check the quick start guide at https://dev.sourcesense.com/svn/alfresco/sso/opensso/tags/alfresco-opensso-0.5/README

Feedbacks and contributions will be most welcome!

Regards,


Gustavo Nalle Fernandes
g.fernandes at sourcesense.com

daxter123
Champ in-the-making
Champ in-the-making
Thanks fernands
This is a great effort.

techian
Champ in-the-making
Champ in-the-making
I followed the readme, however on first access to Alfresco I get a
java.lang.NoClassDefFoundError: Could not initialize class com.iplanet.services.naming.service.NamingService
and on refreshing the page I get another exception
java.lang.NoClassDefFoundError: Could not initialize class com.iplanet.dpro.session.Session

NamingService is not present in the opensso client jar file but the Session class is present in it. Any ideas what might be causing this or which jar files need to be included for the NamingService class?

Also I wasn't sure which AMConfig.properties file needs to be edited. I found one in in <webapps>/opensso/WEB-INF/classes/AMConfig.properties but that did not have a property corresponding to Opensso server home directory

g_fernandes
Champ in-the-making
Champ in-the-making
Hello,

In the Alfresco side, your have to copy three files:

../WEB-INF/lib: 
- openssoclientsdk-8.0.jar
- alfresco-opensso-0.5.jar

../WEB-INF/classes:
- AMConfig.properties

An example of AMConfig can be taken from:

https://dev.sourcesense.com/svn/alfresco/sso/opensso/tags/alfresco-opensso-0.5/src/test/resources/AM...

You have to change the IP, port, and password to reflect your OpenSSO server. Also, in alfresco web.xml, pay attention to the filter property  "opensso.url", that must point to the OpenSSO web application.

No changes are required to OpenSSO web application files since this is a client deployment that will are doing.



Gustavo Nalle Fernandes
g.fernandes at sourcesense.com

daxter123
Champ in-the-making
Champ in-the-making
com.sun.identity.agents.app.username=UrlAccessAgent
com.iplanet.am.service.password=123456789

Fernandes can you please tell me which user and password should be given for these properties and what is the usages of this?


Thanks

g_fernandes
Champ in-the-making
Champ in-the-making
Sure!

The com.sun.identity.agents.app.username and com.iplanet.am.service.password are the credentials of the Default Policy agent. They're used by the opensso client to read OpenSSO data remotely.

http://docs.sun.com/app/docs/doc/820-3748/gfwtp?l=en&a=view

The username "UrlAccessAgent" is suggested by OpenSSO in the moment of the installation, the same time where you must choose a password

Please note that you can specify an encrypted password by using the property com.iplanet.am.service.secret instead of com.iplanet.am.service.password.

For a complete reference of the AMConfig.properties in the client side, please see:

http://docs.sun.com/app/docs/doc/820-3748/gifak?l=en&a=view

Regards,


Gustavo Nalle Fernandes
g.fernandes at sourcesense.com

daxter123
Champ in-the-making
Champ in-the-making
Thanks a lot Fernandes. It was really helpful for me.

techian
Champ in-the-making
Champ in-the-making
Thanks for the pointer on the AMConfig.properties.

I had more errors with this AMConfig.properties and the exception specifically said that I need to check the username and password in AMConfig. As it turns out this exception message is less than helpful. Enabling debug message in AMConfig.properties finally pointed me in the right direction.

In my case, I had tomcat running alfresco and opensso as a non root user in port 8080 and an iptables rule to route connections to the box on 8080 to port 80. The client was using http://localhost:80/opensso to do its SSO token creation and validation and was getting connection refused errors. So I had to add another iptables rule to make the 80->8080 port forwarding within localhost.

techian
Champ in-the-making
Champ in-the-making
Fernandes,

Is there any plan to support Alfresco Share web application and CIFS authentication through OpenSSO?