CAS SSO with alfresco

[lakmal]

Dear all,

I'm trying to get Alfresco within liferay portal to work in single sign on using CAS. I'm using alfresco 1.4 and liferay 4.2.2. I managed to get liferay working with CAS but need to relogin for alfresco again within liferay portal. Alfresco is currently authenticated against a LDAP server (ApacheDS).

I tried the fix mentioned in http://issues.alfresco.com/browse/AWC-952

The problem is i'm having a hard time trying to compile the CASAuthenticationFilter.java  file. I also tried the solution suggested at this post. http://forums.alfresco.com/viewtopic.php?t=2898&highlight=

Can anyone please point out to me a solution to get this working? I think if i can get the CASAuthenticationFilter.class file or the revised NovellIChainsHTTPRequestAuthenticationFilter.class file, may fix the problem.


It seems like even alfresco 2.0 does not have this issue fixed?

Any help would be highly appreciated.

Thanks..

Regards,

Lakmal

[lakmal]

Hi Luis,

I tried to integrate Alfresco 2.0 on liferay but it's giving a lot of errors and consequently not registered with the portlet.  I downloaded the .war file and added the following files from version 1.4 into \WEB-INF of alfresco 2.0 and recreated the alfresco.war file

portlet.xml
liferay-display.xml
liferay-portlet.xml

org.alfresco.error.AlfrescoRuntimeException: Ensure that the 'dir.root' property is pointing to the correct data location.
   at org.alfresco.repo.admin.ConfigurationChecker.check(ConfigurationChecker.java:313)
   at org.alfresco.repo.admin.ConfigurationChecker.access$000(ConfigurationC‍‍‍‍

Is there any place where I can find how to integrate alfresco 2 into liferay 4.2.2?

I'm looking forward to hear about the CAS integration part too.

Regards,

Lakmal

[lakmal]

I got alfresco 2.0 working with Liferay 4.3 now on MySQL. Liferay is using ldap and i'm trying to get alfresco also to authenticate via the same ldap server.  I followed the last configuration given in the following link to configure LDAP-authencation-context.xml file as well as renamed chaining-authentication-context.xml to chaining-authentication.xml. All these files are in alfresco/extension folder.

http://forums.alfresco.com/viewtopic.php?t=3351

When i try to login with alfresco web client i get the following error:

javax.portlet.PortletException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.FacesException: Error calling action method of component with id loginForm:submit
caused by:
javax.faces.el.EvaluationException: Exception while invoking expression #{LoginBean.login}
caused by:
org.alfresco.error.AlfrescoRuntimeException: Not implemented

I actually got alfresco 1.4 working with ldap on liferay 4.2.2, but the same configuration seems to be not working.

Any ideas?


Regards,

Lakmal

[lakmal]

Additionally I get the following errors from tomcat. Hope this might provide more information.

javax.faces.FacesException: Error calling action method of component with id loginForm:submit
   org.apache.myfaces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:74)
   javax.faces.component.UICommand.broadcast(UICommand.java:106)
   javax.faces.component.UIViewRoot._broadcastForPhase(UIViewRoot.java:90)
   javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:164)
   org.apache.myfaces.lifecycle.LifecycleImpl.invokeApplication(LifecycleImpl.java:316)
   org.apache.myfaces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:86)
   javax.faces.webapp.FacesServlet.service(FacesServlet.java:105)
   org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:94)

‍‍‍‍‍‍‍‍‍‍‍

[jonas]

Hi

A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.0.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Alfresco_201-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine.

2. Then create database (this is cofigurable) MySQL

for Liferay Portal 4.3
create database liferay43dev;
grant all on liferay43dev.* to 'liferay43dev'@'localhost' identified by 'liferay43dev' with grant option;
grant all on liferay43dev.* to 'liferay43dev'@'localhost.localdomain' identified by 'liferay43dev' with grant option;

for Alfresco Portlet
create database alfresco201plet;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost' identified by 'alfresco201plet' with grant option;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost.localdomain' identified by 'alfresco201plet' with grant option;

3. Start your AS from unzipped file
tomcat/bin/startup.bat or sh startup.sh

Go to http://localhost:8080

press sign in

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Liferay Portal with your login name. No need relogin in Liferay Portal.

Add Alfresco Ext Client. You should be in Alfresco Portlet with your login name. No need relogin in Alfresco Portlet.

Get it? 

Good luck.

[lakmal]

Hi Jonas,

I tried the the way you explained, but after validation by CAS i'm getting redirected to a blank page, and get the following error in the logs.

I'm using liferay+alfresco zip file downloaded from cignex. The additional thing i have done is deployed cas in the same server and running LDAP on the same server.  I have also changed the URLs in the CAS configuration web interface in liferay accordingly. Any tips to sort this out?

ERROR [edu.yale.its.tp.cas.client.CASReceipt] edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator
‍‍‍

Regards,

Lakmal

[mamuly]

Hi,

Can you help me in the alfresco-ldap authentication.
I have alfresco2.1 integrated with liferay4.3

Any help is highly appreciated.

Thanks,
Mamuly

[jonas]

Hi lakma,

You can keep CAS server and LDAP Server in one domain, and Alfresco and Alfresco in other domain.

If you only use localhost for all servers, just use casclient.jar from CAS official web site. It should works well.

Hi mamuly,

For more details, you can get instructions for Do-It-Yourselfers (Liferay 4.3, Alfresco 2.1, LDAP and SSO CAS - Full Integration) at http://liferay.cignex.com

possible user account
jonas/jonas

[kulfon]

Is there a solution for the "Unable to validate ProxyTicketValidator" exception? I see a lot of people having this issue but not many recommendations out there. I'm able to see the CAS authentication page. When I authenticate with incorrect user/passwd it verifies and indicates that user/id invalid. But when I use the correct user/passwd it redirects to a blank page and displays the following exception. Any help would be greatly appreciated.

javax.servlet.ServletException: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.y ale.its.tp.cas.client.ServiceTicketValidator casValidateUrl