Hi,
I integrated Siteminder SSO with my application to seamlessly login to alfresco web-client.
It works great but the problem is that when i am logged in from the normal login process from the login page company home folder is shown to the user
But when i am logging in from the following code it is not;
what did i missed here?
my code changes are enclosed in comments
<strong>N.B.</strong> i am using multi tenant alfresco
I integrated Siteminder SSO with my application to seamlessly login to alfresco web-client.
It works great but the problem is that when i am logged in from the normal login process from the login page company home folder is shown to the user
But when i am logging in from the following code it is not;
what did i missed here?
my code changes are enclosed in comments
/*** Customize for myapp SSO***/<strong>N.B.</strong> i am using multi tenant alfresco
/*
* Copyright (C) 2005-2010 Alfresco Software Limited.
*
* This file is part of Alfresco
*
* Alfresco is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* Alfresco is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
*/
package org.alfresco.web.app.servlet;
import java.io.IOException;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import java.util.regex.PatternSyntaxException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.alfresco.repo.security.authentication.AuthenticationComponent;
import org.alfresco.repo.security.authentication.AuthenticationException;
import org.alfresco.service.cmr.security.AuthenticationService;
import org.alfresco.web.app.Application;
import org.alfresco.web.bean.repository.User;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.web.context.WebApplicationContext;
import org.springframework.web.context.support.WebApplicationContextUtils;
import com.mycompay.myapp.util.XorEncoding;
/**
* Generic HTTP request filter for setting the authenticated user when used with authentication systems such as
* SiteMinder, Novell IChains and CAS.
*
* @author Andy Hind
*/
public class HTTPRequestAuthenticationFilter implements Filter
{
private static Log logger = LogFactory.getLog(HTTPRequestAuthenticationFilter.class);
private ServletContext context;
private String loginPage;
private AuthenticationComponent authComponent;
private AuthenticationService authenticationService;
private String httpServletRequestAuthHeaderName;
// By default match everything if this is not set
private String authPatternString = null;
private Pattern authPattern = null;
public void destroy()
{
// Nothing to do
}
/**
* Run the filter
*
* @param sreq
* ServletRequest
* @param sresp
* ServletResponse
* @param chain
* FilterChain
* @exception IOException
* @exception ServletException
*/
public void doFilter(ServletRequest sreq, ServletResponse sresp, FilterChain chain) throws IOException,
ServletException
{
// Get the HTTP request/response/session
HttpServletRequest req = (HttpServletRequest) sreq;
HttpServletResponse resp = (HttpServletResponse) sresp;
// Check for the auth header
/*** Customize for myapp SSO***/
String mode = req.getParameter("mode");
String authHdr = null;
if(mode == null){
chain.doFilter(sreq, sresp);
return;
}else{
authHdr = req.getParameter(httpServletRequestAuthHeaderName);
}
/*** Customize for myapp SSO***/
if (logger.isDebugEnabled())
{
if (authHdr == null)
{
logger.debug("Header not found: " + httpServletRequestAuthHeaderName);
}
else
{
logger.debug("Header is <" + authHdr + ">");
}
}
// Throw an error if we have an unknown authentication
if ((authHdr == null) || (authHdr.length() < 1))
{
resp.sendRedirect(req.getContextPath() + "/jsp/noaccess.jsp");
return;
}
// Get the user
/*** Customize for myapp SSO***/
String dencoded = new XorEncoding().decode(authHdr);
authHdr = dencoded;
/*** Customize for myapp SSO***/
String userName = "";
if (authPattern != null)
{
Matcher matcher = authPattern.matcher(authHdr);
if (matcher.matches())
{
userName = matcher.group();
if ((userName == null) || (userName.length() < 1))
{
if (logger.isDebugEnabled())
{
logger.debug("Extracted null or empty user name from pattern "
+ authPatternString + " against " + authHdr);
}
resp.sendRedirect(req.getContextPath() + "/jsp/noaccess.jsp");
return;
}
}
else
{
if (logger.isDebugEnabled())
{
logger.debug("no pattern match for " + authPatternString + " against " + authHdr);
}
resp.sendRedirect(req.getContextPath() + "/jsp/noaccess.jsp");
return;
}
}
else
{
userName = authHdr;
}
if (logger.isDebugEnabled())
{
logger.debug("User = " + userName);
}
// See if there is a user in the session and test if it matches
/*** Customize for myapp SSO***/
try{
authComponent.clearCurrentSecurityContext();
authComponent.setCurrentUser(authHdr);
}catch(Exception ex){
resp.sendRedirect(req.getContextPath() + "/jsp/noaccess.jsp");
return;
}
/*** Customize for myapp SSO***/
User user = AuthenticationHelper.getUser(this.context, req, resp);
if (user != null)
{
try
{
// Debug
if (logger.isDebugEnabled())
logger.debug("User " + user.getUserName() + " validate ticket");
// Validate the user ticket
if (user.getUserName().equals(userName))
{
// Set the current locale
authComponent.clearCurrentSecurityContext();
authComponent.setCurrentUser(user.getUserName());
AuthenticationHelper.setupThread(this.context, req, resp, true);
chain.doFilter(sreq, sresp);
return;
}
else
{
// No match
setAuthenticatedUser(req, resp, userName);
}
}
catch (AuthenticationException ex)
{
if (logger.isErrorEnabled())
logger.error("Failed to validate user " + user.getUserName(), ex);
}
}
setAuthenticatedUser(req, resp, userName);
// Redirect the login page as it is never seen as we always login by name
if (req.getRequestURI().endsWith(getLoginPage()) == true)
{
if (logger.isDebugEnabled())
logger.debug("Login page requested, chaining …");
resp.sendRedirect(req.getContextPath() + BaseServlet.FACES_SERVLET + FacesHelper.BROWSE_VIEW_ID);
return;
}
else
{
chain.doFilter(sreq, sresp);
return;
}
}
/**
* Set the authenticated user. It does not check that the user exists at the moment.
*
* @param req
* the request
* @param res
* the response
* @param userName
* the user name
*/
private void setAuthenticatedUser(HttpServletRequest req, HttpServletResponse res,
String userName)
{
// Set the authentication
authComponent.clearCurrentSecurityContext();
authComponent.setCurrentUser(userName);
// Set up the user information
AuthenticationHelper.setUser(context, req, userName, authenticationService.getCurrentTicket(), true);
// Set the locale using the session
AuthenticationHelper.setupThread(this.context, req, res, true);
}
public void init(FilterConfig config) throws ServletException
{
// Save the context
this.context = config.getServletContext();
// Setup the authentication context
WebApplicationContext ctx = WebApplicationContextUtils.getRequiredWebApplicationContext(context);
authComponent = (AuthenticationComponent) ctx.getBean("authenticationComponent");
authenticationService = (AuthenticationService) ctx.getBean("AuthenticationService");
httpServletRequestAuthHeaderName = config.getInitParameter("httpServletRequestAuthHeaderName");
if(httpServletRequestAuthHeaderName == null)
{
httpServletRequestAuthHeaderName = "x-user";
}
this.authPatternString = config.getInitParameter("authPatternString");
if (this.authPatternString != null)
{
try
{
authPattern = Pattern.compile(this.authPatternString);
}
catch (PatternSyntaxException e)
{
logger.warn("Invalid pattern: " + this.authPatternString, e);
authPattern = null;
}
}
}
/**
* Return the login page address
*
* @return String
*/
private String getLoginPage()
{
if (loginPage == null)
{
loginPage = Application.getLoginPage(context);
}
return loginPage;
}
}
Thanks for the reply;
I set the home location = Company Home from the profile; but when i did the SSO/Siteminder login/out of the box login; it again (re)set my start location to My Home
any other ideas
I set the home location = Company Home from the profile; but when i did the SSO/Siteminder login/out of the box login; it again (re)set my start location to My Home
any other ideas
uh
actually i was providing username in upper case like 'user1@TENANT1' and alfresco was expecting 'user1@tenant1'
and it worked fine
actually i was providing username in upper case like 'user1@TENANT1' and alfresco was expecting 'user1@tenant1'
and it worked fine
