CAS implementation and LDAP Sync

[beyroot]

Hello,

Configuration:
- Alfresco SVN
- OpenLDAP
- MySQL
- Tomcat 5.5

We have to use a CAS solution (http://issues.alfresco.com/browse/AWC-952), because the ldap solution isn't adapted with our directory organization, we must use "double bind", users entries are in different organizational unit.
So we want to use CAS, we have the login screen of cas server but after successful authentication we obtain this error :

org.alfresco.error.AlfrescoRuntimeException: Not implemented
at org.alfresco.repo.security.authentication.DefaultMutableAuthenticationDao.loadUserByUsername(DefaultMutableAuthenticationDao.java:410)
at org.alfresco.repo.security.authentication.AuthenticationComponentImpl.getUserDetails(AuthenticationComponentImpl.java:98)
at org.alfresco.repo.security.authentication.AbstractAuthenticationComponent.setCurrentUser(AbstractAuthenticationComponent.java:97)
at org.alfresco.web.app.servlet.CASAuthenticationFilter.setAuthenticatedUser(CASAuthenticationFilter.java:202)
at org.alfresco.web.app.servlet.CASAuthenticationFilter.doFilter(CASAuthenticationFilter.java:172)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:401)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:162)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

We have no issues. Anyone have successfully implemented the CAS solution with alfresco release 2.0 or SVN or any suggestions about this error ?

[jonas]

Hi,

A solution for Alfresco, LDAP and SSO CAS full integration is ready for you.

Detailed instructions will be posted later. (Configure Alfresco 2.0.1 for LDAP and SSO CAS).

Here is an example.

First please download an example Alfresco 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Alfresco-LDAP-SSO.war

from (user/password : Activision_guest/guest)
http://projects.cignex.com/Activision/Integration/Testing/CIGNEX_Alfresco-SSO-LDAP.war/ctiresource_v...

rename it as alfresco.war


Then create database (this is cofigurable) MySQL

create database alfresco201dev;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost' identified by 'alfresco201dev' with grant option;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost.localdomain' identified by 'alfresco201dev' with grant option;

Deploy war in your AS: tomcat/webapp

Start your AS

Go to http://localhost:8080/alfresco

In CAS login page, login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Alfresco MyAlfresco page with your login name. No need relogin in Alfresco.

Get it?

Good luck.

[beyroot]

Hello,

I try to connect to http://projects.cignex.com/Activision/Integration/Testing/CIGNEX_Alfresco-SSO-LDAP.war/ctiresource_v...
but with the login you have given I can't download archive, I have the page "insufficient privileges".
Thanks for help.

[jonas]

Hello,

Please use http://liferay.cignex.com

and readme

A solution for Alfresco, LDAP and SSO CAS full integration is ready.

First please download an example Alfresco 2.0.1, LDAP (ADS) and SSO CAS.

Download (save link as …)

CIGNEX_Alfresco-LDAP-SSO.war

rename it as alfresco.war

Then create database (this is cofigurable) MySQL

create database alfresco201dev;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost' identified by 'alfresco201dev' with grant option;
grant all on alfresco201dev.* to 'alfresco201dev'@'localhost.localdomain' identified by 'alfresco201dev' with grant option;

Deploy war in your AS: tomcat/webapp

Start your AS

Go to http://localhost:8080/alfresco

In CAS login page, login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Alfresco MyAlfresco page with your login name. No need relogin in Alfresco.

Get it?

Good luck.

[jonas]

Hi,

As promised, instructions for Do-It-Yourselfers (Liferay 4.3, Alfresco 2.0.2, LDAP and SSO - Full Integration) are ready at

Http://liferay.cignex.com/cignex/Liferay-Full-Integration.doc