Liferay + Alfressco without using Single Sign On (SSO)

[vhakkal]

Hi,

I am new to both Lifray and Alfressco.

I am trying to integrate Liferay + Alfresco WITHOUT using SSO (Single Sign On).  I will be using an LDAP to authenticate. I have followed the instructions http://wiki.alfresco.com/wiki/Deploying_2.1WAR_Liferay4.3, but I am having the following concerns/issues.

1. I was wondering if the same instructions would apply to Liferay 4.4.x.
2. Is it possible to not to use the user’s email address but instead use the  username(screen name) from Liferay and pass that off to Alfresco. Looking the following files WEB-INF/portal.xml
            <user-attribute>
                        <name>user.home-info-online.email</name>
            </user-attribute>

            Could I possibility use a sceenName instead of the email? And what would the property value I use? or is there a better why of passing the credential between Liferay and Alfresco, like basic authentication.

This want to have Liferay pass in the username (screen name) with password into alfresco, is it possibly without using SSO?

[chlee]

Aukcell-Your Reliable Liferay Outsourcing Partner !

Aukcell have delivered numerous projects based on Liferay, Alfresco & Pentaho. We know what it takes to build and operate reliable Open Source -based solutions. Our customer list includes the most demanding private companies & public organizations across the globe. We can help you to take benefit from Open Source systems, too. Let's talk about your objectives & requirements today. We are sure that Aukcell can deliver a solution for you quickly and reliably.

Aukcell is based in China and a recognized expert in all aspects of Liferay deployment. There are lots of details that you need to setup correctly in order to make Liferay work your way. Aukcell know them all. Business case? Architecture? Theme? Custom portlets? Performance tuning? Migration from other portals? We have done that. And much more. for more information please visit http://www.aukcell.com

Online Contact : Skype : aukcell                 AIM: eonpeter

[rhoefer]

You can configure Liferay to authenticate with a screen name only. Settings -> Authenticate -> General Tab -> How do users Authenticate Drop down. I'm not sure how you can pass just the screen name to alfresco, but if you have it integrated with LDAP you can use an iframe portlet to post username/password to alfresco and automatically login without messing with some external authentication like CAS.

[dward]

Don't know what you guys are going on about. Alfresco works with Liferay out of the box now, as long as you include the external subsystem in your authentication chain

authentication.chain=alfrescoNtlm1:alfrescoNtlm,external1:external

See http://issues.alfresco.com/jira/browse/ALF-1488

It made it into HEAD in revision 20567.

Change comments:

ALF-202, ALF-1488: Fixed portlets in alfresco.war
- Stop excluding portlet.xml from alfresco.war
- Used JSR 286 ResourceURL solution to get upload iframes to work in portlets
- Removed horrific hacks concerning faces session map resolution in portlets and upload servlet
- WebClientPortletAuthenticator now dispatches to a helper servlet, AuthenticatorServlet, allowing it to use identical servlet mechanisms to authenticate / sign-on the user
- Portlet Authenticated user now set consistently in application-scoped attribute, so web client, web script portlets and client portlet share same notion of user ID
- Application.inPortalServer flag now thread local (and thread safe!)

[rhoefer]

You're referring to authentication with mod_auth_cas? http://wiki.alfresco.com/wiki/Alfresco_With_mod_auth_cas

[dward]

No.

I've created a new Wiki.

See

http://wiki.alfresco.com/wiki/Deploying_3.3WAR_Liferay5

[rhoefer]

Sorry for all the questions, I'm still pretty new to Alfresco and Liferay. Is this assuming a deploy of alfresco.war into the same application server as liferay?

[dward]

Yes