Remote authentication and CMIS

[roodie]

Hello,

I have a quite complicated configuration set up, which involves a Windows Domain server, an Alfresco instance (running on Linux/Tomcat), and a separate web application written in python. All using SSO to authenticate the domain users, and everything is working just fine.

Now I have to access the Alfresco CMIS JSON API (/alfresco/service/cmis) from the web app, and I am unable to authanticate the users this way.

The normal username/password/ticket method obviously does not work for the domain users (since I do not know the password). I tried to set the REMOTE_USER header, but the service simpy disregards it. What I am missing here?

Thanks,
  Istvan

[jpotts]

If you have a session with Alfresco you should be able to get a ticket. You can then pass the ticket when you authenticate with CMIS.

Jeff

[roodie]

I do not have a session unfortunately. The users access the webapp, it authenticates them using the domain server. Then there are some pages where I have to display some folders and items from the Alfresco repo using the restful api - and a system account will not do, since the repo has some access controls which are important.

So it seems I cannot get a ticket without a password or an already established session. 

[jpotts]

Yeah, you need some sort of credential. I thought since you mentioned SSO that you are already able to authenticate with Alfresco. If so, you could call a web script to get the user's ticket, then you could pass that in with your CMIS calls.

Jeff