CAS Authentification

[tegyat]

Hi,
I'm using Alfresco 2.0 with liferay, i use cas server .
What can i do to have authentification in Alfresco by CAS server (it's ok with liferay)?
thanks.

[sebastien_marin]

Hi, so there are thousands post about that…

Alfresco with CAS works fine if you add some CAS Filter in the web XML.
The best mean could be to use the CAS chain filter (i think).

In a Liferay portal, the CAS Filter solution that you can find is not ok because the cas filter is called after the alfrescofacesportlet that connect users as guest if no user is register in session. So the problem is that the alfresco team does not have implement a method to connect a user with a username with renderrequest and renderResponse parameter…

They implement a portalGuestAuthentication but no authentication(facesContext, renderRequest, renderResponse, username).

So what Alfresco team could suggest ?

[gratz]

Hi

I work on Alfresco 2.0 integrated by Liferay, and i just implement SSO via CAS authentification and Ldap sync.

It works fine for Liferay, but not with Alfresco (logged in as a guest of course), and i up this topic to find some solutions… if there's 😃

Thanks a lot 😃

[jonas]

Hi,

A solution for Alfresco, LDAP and SSO CAS full integration is ready for you.

First please download an example Alfresco 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Alfresco-LDAP-SSO.war

from (user/password : Activision_guest/guest)
http://projects.cignex.com/Activision/Integration/Testing/CIGNEX_Alfresco-SSO-LDAP.war/ctiresource_v...

rename it as alfresco.war


Then create database (this is cofigurable) MySQL

create database alfresco201dev;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost' identified by 'alfresco201dev' with grant option;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost.localdomain' identified by 'alfresco201dev' with grant option;

Deploy war in your AS: tomcat/webapp

Start your AS

Go to http://localhost:8080/alfresco

In CAS login page, login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Alfresco MyAlfresco page with your login name. No need relogin in Alfresco.

Get it?

Good luck.

[apsara]

Hi all,
I am combining Alfresco, Liferay and CAS.
How to Alfresco 2.1 work with Liferay and CAS (it's Ok with Alfresco 1.4)?

Thanks!

Regards.

[jonas]

A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.0.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Alfresco_201-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine.

2. Then create database (this is cofigurable) MySQL

for Liferay Portal 4.3
create database liferay43dev;
grant all on liferay43dev.* to 'liferay43dev'@'localhost' identified by 'liferay43dev' with grant option;
grant all on liferay43dev.* to 'liferay43dev'@'localhost.localdomain' identified by 'liferay43dev' with grant option;

for Alfresco Portlet
create database alfresco201plet;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost' identified by 'alfresco201plet' with grant option;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost.localdomain' identified by 'alfresco201plet' with grant option;

3. Start your AS from unzipped file
tomcat/bin/startup.bat or sh startup.sh

Go to http://localhost:8080

press sign in

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Liferay Portal with your login name. No need relogin in Liferay Portal.

Add Alfresco Ext Client. You should be in Alfresco Portlet with your login name. No need relogin in Alfresco Portlet.

Get it? 

Good luck.

Jonas Yuan
CIGNEX Technologies, Inc.
Email: jonas@cignex.com

[dgenard]

Hi Jonas,

I managed to setup CAS SSO with your solution, and it works fine for Alfresco web UI. Thanks for sharing your experince.

But is it possible to use CAS SSO with WebDAV, CIFS, and FTP as well ?
If not possible out of the box with your solution, could it be adapted for this ? Is source code available ?

Regards, Denis

[dgenard]

Ok, I've found an answer to my questions in another topic http://forums.alfresco.com/viewtopic.php?t=5107
Cheers, Denis