SSO and CMIS

[jonno70]

I have an issue with Alfresco NTLM SSO and CMIS.

Basically if I enable alfresco Ntlm SSO I can no longer authenticate CMIS

The issue is logged here: https://issues.alfresco.com/jira/browse/ALF-21537

I originally reported the problem here: https://issues.alfresco.com/jira/browse/MNT-14718
Which is marked fixed in Enterprise 5.0.3 - but that hasn't made it to the GA of Community 5.1 (which I find a bit strange)

I have a small customer 30 users running Community and would really like to upgrade to 5.1 soonish

They keep their Windows password and Alfresco password the same - so SSO works for them.

The issue is we need CMIS for a few iPads - and we have a couple of workstations that use CmisSync (http://cmissync.org/)
These workstations do rendering of 3d models - and running from local files - sync'd from Alfresco is a nice solution for them.

Anyway…

I am happy to look at other authentication subsystems - but I want to know what works…

So if someone can tell me a configuration that will give SSO from Windows 7 Workstations (I would love to use the new AOS as well)
And where CMIS works - then I would be extremely grateful.

My environment is
Ubuntu 14.04 LTS and Postgres

thanks, Jon

[afaust]

Hello,

Alfresco Enterprise 5.0.3 has only recently been made available. Alfresco 5.1 GA was already in the QA phase then so any bugfixes for that service pack release naturally aren't automatically included in 5.1 to avoid introducing stability issues that late before a GA release.
I don't think the current GA release will be the last GA of Community 5.1, so any fix for this issue will likely be merged into the 5.1 stream. Then the ALF-21537 would be resolved as well.

Since 5.1 GA is only available since yesterday, I have not had a chance to play with it myself and test it regarding SSO scenarios…

Regards
Axel

[idwright]

Caveat - I haven't tried this with ntlm SSO only with CAS

In 5.0.c you can't access the (not very) new CMIS endpoints via the share proxy (ALF-21129) but this enhancement broke SSO, at least in some cases, in 5.0.d (ALF-21367).
I haven't checked with the later builds but I don't think it's been fixed.
There's a patch available for the SlingshotAlfrescoConnector
There's an example with CAS SSO authentication at https://github.com/wrighting/alfresco-cas

If you want to use the new CMIS endpoints e.g. /share/proxy/alfresco-api/-default-/public/cmis/versions/1.1/browser then you'll need to further update your share-config-custom.xml

[jonno70]

thanks - I will have a look at CAS and see if that helps