Change Alfresco to use SSL and 'Share' stops authenticating!
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-11-2013 12:54 PM
Hi,
Sorry to ask a question that has been discussed a few times before, but I cannot find a solution to this issue that works for me!
I have created a new server (CentOS release 6.2) for Alfresco and downloaded and installed the latest released version of Alfresco Community (4.2.c), using the standard installer (from http://www.alfresco.com/products/community).
We would like to use SSL over port 8443, instead of non-SSL over port 8080. I have made LOTS of amendments to the standard configuration files (detailed below).
It was relatively straight forward to get the "Alfresco Explorer" working correctly using SSL, but I have had NO success in changing the configuration to enable Alfresco Share to authenticate.
When I attempt to log on to the Alfresco share (https://alfresco.nbi.ac.uk:8443/share), I see an error message that states: "The remote server may be unavailable or your authentication details have not been recognized." The authentication is working correctly for Alfresco Explorer (https://alfresco.nbi.ac.uk:8443/alfresco), but not for share.
I also see the following message in the (alfresco)/tomcat/logs/catalina.out:
"2013-07-11 17:11:42,098 INFO [web.site.EditionInterceptor] [http-bio-8443-exec-12] Unable to retrieve License information from Alfresco: 500"
Please can someone advice whether it is possible to get Share working over SSL?
I have made the following configuration amendments, but to no avail so far!
———————
In <alfresco>/tomcat/shared/classes/alfresco-global.properties change the following:
alfresco.context=alfresco
alfresco.host=alfresco.nbi.ac.uk
alfresco.port=8443
alfresco.protocol=https
share.context=share
share.host=alfresco.nbi.ac.uk
share.port=8443
share.protocol=https
and add web.application.context.url=https://127.0.0.1:8443/alfresco
———————
Update <alfresco>/tomcat/conf/web.xml
Add the following lines at the end of the file (before the </web-app> )
<!– Added to attempt to stop http and force https instead –>
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Context</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
———————
Update /opt/alfresco/tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml
Change the "endpoint URLs" from
<endpoint-url>http://localhost:8080/alfresco/s</endpoint-url
to
<endpoint-url>https://localhost:8443/alfresco</endpoint-url
(by removing the /s, changing http to https and changing 8080 to 8443)
Add: <repository-url>https://localhost:8443/alfresco</repository-url>
Update the alfresco endpoint to be : <endpoint-url>https://localhost:8443/alfresco/wcs</endpoint-url>
(by adding the "wcs"
And add <external-auth>true</external-auth> to the alfresco endpoint
———————
Update /opt/alfresco-4.2.c/tomcat/webapps/share/WEB-INF/classes/alfresco/share-cmis-config.xml
Change parameter key value from
value="http://localhost:8080/alfresco/cmisatom"
to
value="https://localhost:8443/alfresco/cmisatom'/>
———————
Update /opt/alfresco-4.2.c/tomcat/webapps/share/WEB-INF/classes/alfresco/share-documentlibrary-config.xml
Change <repository-url>http://localhost:8080/alfresco</repository-url>
to <repository-url>https://localhost:8443/alfresco</repository-url>
———————
Update /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/web-client-config.xml
Change <scheme>http</scheme>
to <scheme>https</scheme>
Change <port>8080</port>
to <port>8443</port>
———————
Any advice that anyone can give to help me configure this would be very gratefully received!
Thanks
John
Sorry to ask a question that has been discussed a few times before, but I cannot find a solution to this issue that works for me!
I have created a new server (CentOS release 6.2) for Alfresco and downloaded and installed the latest released version of Alfresco Community (4.2.c), using the standard installer (from http://www.alfresco.com/products/community).
We would like to use SSL over port 8443, instead of non-SSL over port 8080. I have made LOTS of amendments to the standard configuration files (detailed below).
It was relatively straight forward to get the "Alfresco Explorer" working correctly using SSL, but I have had NO success in changing the configuration to enable Alfresco Share to authenticate.
When I attempt to log on to the Alfresco share (https://alfresco.nbi.ac.uk:8443/share), I see an error message that states: "The remote server may be unavailable or your authentication details have not been recognized." The authentication is working correctly for Alfresco Explorer (https://alfresco.nbi.ac.uk:8443/alfresco), but not for share.
I also see the following message in the (alfresco)/tomcat/logs/catalina.out:
"2013-07-11 17:11:42,098 INFO [web.site.EditionInterceptor] [http-bio-8443-exec-12] Unable to retrieve License information from Alfresco: 500"
Please can someone advice whether it is possible to get Share working over SSL?
I have made the following configuration amendments, but to no avail so far!
———————
In <alfresco>/tomcat/shared/classes/alfresco-global.properties change the following:
alfresco.context=alfresco
alfresco.host=alfresco.nbi.ac.uk
alfresco.port=8443
alfresco.protocol=https
share.context=share
share.host=alfresco.nbi.ac.uk
share.port=8443
share.protocol=https
and add web.application.context.url=https://127.0.0.1:8443/alfresco
———————
Update <alfresco>/tomcat/conf/web.xml
Add the following lines at the end of the file (before the </web-app> )
<!– Added to attempt to stop http and force https instead –>
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Context</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
———————
Update /opt/alfresco/tomcat/shared/classes/alfresco/web-extension/share-config-custom.xml
Change the "endpoint URLs" from
<endpoint-url>http://localhost:8080/alfresco/s</endpoint-url
to
<endpoint-url>https://localhost:8443/alfresco</endpoint-url
(by removing the /s, changing http to https and changing 8080 to 8443)
Add: <repository-url>https://localhost:8443/alfresco</repository-url>
Update the alfresco endpoint to be : <endpoint-url>https://localhost:8443/alfresco/wcs</endpoint-url>
(by adding the "wcs"
And add <external-auth>true</external-auth> to the alfresco endpoint
———————
Update /opt/alfresco-4.2.c/tomcat/webapps/share/WEB-INF/classes/alfresco/share-cmis-config.xml
Change parameter key value from
value="http://localhost:8080/alfresco/cmisatom"
to
value="https://localhost:8443/alfresco/cmisatom'/>
———————
Update /opt/alfresco-4.2.c/tomcat/webapps/share/WEB-INF/classes/alfresco/share-documentlibrary-config.xml
Change <repository-url>http://localhost:8080/alfresco</repository-url>
to <repository-url>https://localhost:8443/alfresco</repository-url>
———————
Update /opt/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/web-client-config.xml
Change <scheme>http</scheme>
to <scheme>https</scheme>
Change <port>8080</port>
to <port>8443</port>
———————
Any advice that anyone can give to help me configure this would be very gratefully received!
Thanks
John
Labels:
- Labels:
-
Archive
14 REPLIES 14
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-18-2013 02:18 PM
I have tried following the instructions from HERE
I couldn't get it to work for me so I just did the apache and the mod_jk route. Tackling alfresco's community version for ssl authentication vs just having apache do it was the difference of a couple of weeks vs an hour of my time.
Just something to think about it.
I couldn't get it to work for me so I just did the apache and the mod_jk route. Tackling alfresco's community version for ssl authentication vs just having apache do it was the difference of a couple of weeks vs an hour of my time.
Just something to think about it.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-08-2013 04:42 PM
Hello,
I am having this exact same problem. Alfresco Explorer works completely fine while share is broken. I do not wish to use the apache mod_jk solution. Can someone help and shed some light on why this is happening?
Thanks
I am having this exact same problem. Alfresco Explorer works completely fine while share is broken. I do not wish to use the apache mod_jk solution. Can someone help and shed some light on why this is happening?
Thanks
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-09-2013 12:05 PM
OK I solved my own problem. I had to import more certificates into /java/jre/lib/security/cacerts and also this link helps alot: http://ecmstuff.blogspot.com/2011/06/configuring-alfresco-for-sso-with-cas.html
there is no need to modify the share-config-custom.xml at all
there is no need to modify the share-config-custom.xml at all
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-14-2014 10:44 PM
Hello yuhuayang: How did you solve the problem? I have the same problem right now.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎10-10-2013 07:10 AM
Your share-config-custom.xml file is wrong
You changed from
http://localhost:8080/alfresco/s
to
https://localhost:8443/alfresco
it should have same path with only changes in port number and https ie https://localhost:8443/alfresco/s. Apart from this file and alfresco-global.properties file no other file requires to be changed and so revert changes made in all other core files under share webapps. alfresco-global.properties file looks fine. you might need to change the port in one more file wqsapi-custom.xml file under extension folder if you have enabled webquick start during installation.
You changed from
http://localhost:8080/alfresco/s
to
https://localhost:8443/alfresco
it should have same path with only changes in port number and https ie https://localhost:8443/alfresco/s. Apart from this file and alfresco-global.properties file no other file requires to be changed and so revert changes made in all other core files under share webapps. alfresco-global.properties file looks fine. you might need to change the port in one more file wqsapi-custom.xml file under extension folder if you have enabled webquick start during installation.
