Share SSO with Yale CAS client

[nikes]

Hello,

We have configured CAS SSO solution for Alfresco WebClient and Share
CAS Client: cas-client.2.0.11.jar
Alfresco: 3.4.3  EE

We implemented it in previous versions like 3.2.r and 3.2.11 and both Alfresco and Share SSO worked fine.

In case of 3.4.3, Alfresco works fine without any code change. But Share SSO fails.
In log it shows following

Unable to find credentials for endpoint alfresco‍

I have enabled debug mode for all the CAS related classes and observed the calling mechanism.

Issue is, When I hit the Share url (eg. http://serverort/share), it shows CAS login page, I provide the credentials,
1.  It hit "/share/" and gets a proxy ticket from CAS and calls a webscript
2. It hiys "/share/site/index-page" and again it gets a proxy ticket not sure why it generates proxy ticket 2 times
3. Then it shows "Unable to find credentials for endpoint alfresco".

Could any one help me how could I debug more in this case.

Please let me know if any code snippet would be useful.

Thanks
Nikesh

[nikes]

Anyone achieved CAS SSO for 3.4.x Share with EDU Yale CAS java client?

I am not utilizing external authentication, but custom authentication with custom authentication component.

Thanks for any help.

[nikes]

I found the solution by setting response header "X-Alfresco-Remote-User'" in our custom Share SSO Filter code before passing login request to alfresco.

Thank you all for reading this post.

[vijith]

Hi,

can you please share the configuration setting for Alfresco Share SSO with CAS, am also using Alfresco 3.4.d and i done Alfresco with CAS

Thank You

[nikes]

Following blog post explains nicely Alfresco and Share SSO configuration steps.

http://ecmstuff.blogspot.in/2011/06/configuring-alfresco-for-sso-with-cas.html

[vijith]

Thank You for Quick reply….

Are you running CAS and Alfresco on same server?

No it's Different System

make sure you have generated certificates and imported it to CAS and Alfresco JRE. Do pay attention to CN name while generatin certificate and configure your tomcat/conf/server.xml SSl port (eg 8443)

yes i imported self signed certificate to Alfresco ( Alfresco Explorer Working with CAS but Share getting error)

After changed all am getting 404 Error in Alfresco Share

i checked this http://ecmstuff.blogspot.in/2011/06/configuring-alfresco-for-sso-with-cas.html link; looking for CONFIGURING CAS SSO FOR ALFRESCO SHARE section
i updated filter as well as filter-mapping section

Doubt about (how to check)
2) Make sure the URL in the org.mycompany.cms.authentication.CasAuthenticationFilter class are correct:

public class CasAuthenticationFilter implements Filter {
private final static String ALFRESCO_WEBAPP_URL = "http://localhost:8080/alfresco";

and also added cas-client jar file ;;after changed all i restart the alfresco it giving Error 404

[nikes]

private final static String ALFRESCO_WEBAPP_URL = "http://localhost:8080/alfresco";

That's the URL of your alfresco server. replace localhost with your server name.

Also check you have configured the webscript in a required folder structure. and have definition for the same in context.xml file

[vijith]

Hi,

Which file i need to edit for this ?? Alfresco Installation i used this file https://process.alfresco.com/ccdl/?file=release/community/build-3370/alfresco-community-3.4.d.zip

private final static String ALFRESCO_WEBAPP_URL = "http://localhost:8080/alfresco";


That's the URL of your alfresco server. replace localhost with your server name.

[nikes]

Seems you have not compiled the Java classes required for the same.

http://akselsarchitecture.blogspot.in/2010/09/cas-sso-for-alfresco-33-and-share.html

For Alfresco:
CasAuthenticationFilter-Alfresco.java
LoginCas.java (Java Webscript)

For Alfresco Share:
CasAuthenticationFilter-Share.java
CasAlfrescoAuthenticator.java

look at this link for full alfresco and share side setup files. (alfresco-cas.zip, share-cas.zip)
http://translate.google.com/translate?u=http://blog.atolcd.com/%3Fp%3D115&sl=fr&tl=en

Generally in your share-config.custom.xml you will have to configure endpoint for alfresco server if it uses port other than 8080.