Generating an Alfresco Ticket on Behalf of another User?

[praj]

Hi,

Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?

E.g. proxy user logs in, runs the webscript:
POST /alfresco/s/api/login

And generates a ticket for the target user which can then be used by the target user for authentication purposes?

Thanks

Praj

[mitpatoliya]

No, I do not think so.
And also logically it makes system insecure.
So, I do not think this feature will ever be there in any of the system.

[mrogers]

If you are using external authentication then you can pass in whatever token you want.    Alfresco will simply trust whatever your external authentication system says.

[praj]

If you are using external authentication then you can pass in whatever token you want.    Alfresco will simply trust whatever your external authentication system says.

Thanks for the advice. I've been through the external authentication documentation covered here:
http://wiki.alfresco.com/wiki/Alfresco_Authentication_Subsystems#External

My question relates to setting up same-signon between another system and Alfresco without the use of a 3rd party authentication system (LDAP, CAS, etc). From what I understand of the external authentication functionality, it requires the REMOTE_USER CGI variable to be set to enable pass-thru authentication into Share (looking specifically at same-signon into Share). Would there be a way to do this without doing it at the apache level? E.g. within a PHP script? Any suggestions?

[mrogers]

Any suggestions?

Why are you doing this?  It seems a bit strange.

[rdanner]

Hi,

Is it possible through a combination of external (or appropriate) authentication using a proxyUserName to generate an Alfresco ticket on behalf of another user?

E.g. proxy user logs in, runs the webscript:
POST /alfresco/s/api/login

And generates a ticket for the target user which can then be used by the target user for authentication purposes?

Thanks

Praj

Are you thinking that your third party authentication would have to log in as a super user and then generate ticket for the user it's authenticating?

You should not have to do this.  Take a look at the out of the box subsystems for supporting CAS.  Another example is the CROWD plugin by AppFusion.

[abarisone]

Hi all,
we have a scenario where having Alfresco external authentication coming from a portal (trought CAS), we would need that a Call Center user could "impersonate" another user in order to carry out operations on behalf of another user.
We obtain a TGT for the CC user, but it is there an out-of-the-box function or procedure in order to achieve this impersonation?

Thanks,
Andrea