I have a web application that uses the remote-api.jar and uses AuthenticationUtils.startSession, but I'm moving the authentication system to CAS. I won't have access to the password anymore in the service class in the web app so I cannot pass the password through. Is there another way to start a session without having to provide the password?
The web service start session call simply authenticates the username and password provided and returns a associated ticket that can be used for subsequent web service calls.
If you have an alternative way of authenticating and getting an Alfresco ticket then this ticket can be reused on the web service headers to authenticate the calling user appropriately.