Ticket authentication using new OpenCMIS URLs in Alfresco 4
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-03-2012 02:28 AM
Starting with Alfresco 4, the web script based CMIS implementation (http://localhost:8080/alfresco/service/cmis) is deprecated. Where possible, you should use the OpenCMIS implementation instead (http://localhost:8080/alfresco/cmisatom).
In a quick test using curl, I noticed that when a user does not have access to Company Home, the old implementation fails while the new implementation succeeds.
Jeff
Dear Jeff,
How should I authenticate the user to access http://localhost:8080/alfresco/cmisatom ? I've tried sending "alf_ticket" (http://localhost:8080/alfresco/cmisatom?alf_ticket=TICKET_bdbd0697d81a40f782ba8b54615abad21dc663fd) parameter obtained from http://localhost:8080/alfresco/service/api/login?u=username&pw=password. But still cmisatom gives "Authorization Required" error. I'm trying to hit URLs using curl not using any API.
Though HTTP authentication works (curl –user "username

Alfresco version: 4.0.c
Regards
Amit
- Labels:
-
Archive
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-03-2012 03:39 PM
I don't know, to be honest. I just realized this didn't work this week. I'll ask around. This may take some debugging and some source inspection to figure out whether or not ticket authentication is intended to be supported with the OpenCMIS URLs.
Jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-04-2012 02:05 AM
Thanks for your reply. This is not a blocker, I appreciate if you can post an update in future.
Regards
Amit
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2012 03:57 AM
The answer is here : https://issues.alfresco.com/jira/browse/ALF-7074
Ticket can be specified in password, if any of the following are true:
a) username is not specified (i.e. null, or length of zero)
b) username is equal to "ROLE_TICKET" (case insensitive)
Hope it helps

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2012 01:22 AM
>>> client = CmisClient('http://localhost:8080/alfresco/cmisatom', '', 'TICKET_e5ce8e2a36af2188dbda30bee4d0633db4605a6c')>>> repo = client.defaultRepository>>> repo.idu'1b8980cc-1f1b-4ac3-b26f-17aeee0cefc9'>>> repo.nameu'Main Repository'>>> repo.rootFolder.nameu'Company Home'
Thanks, Jean-Marie!Jeff
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-13-2012 05:19 AM
Hello,
The answer is here : https://issues.alfresco.com/jira/browse/ALF-7074Ticket can be specified in password, if any of the following are true:
a) username is not specified (i.e. null, or length of zero)
b) username is equal to "ROLE_TICKET" (case insensitive)
Hope it helps
ah.. finally.
Its working fine. Thanks a lot.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-13-2012 05:20 AM
Works like a charm…Thanks, Jean-Marie!>>> client = CmisClient('http://localhost:8080/alfresco/cmisatom', '', 'TICKET_e5ce8e2a36af2188dbda30bee4d0633db4605a6c')>>> repo = client.defaultRepository>>> repo.idu'1b8980cc-1f1b-4ac3-b26f-17aeee0cefc9'>>> repo.nameu'Main Repository'>>> repo.rootFolder.nameu'Company Home'
Jeff
Jeff,
Thanks a lot for your help.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-26-2014 10:37 AM
Is there any cmis-pure way?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-26-2014 11:10 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-17-2015 12:28 PM
http://localhost:8080/alfresco/api/-default-/public/cmis/versions/1.1/atom/ from http://docs.alfresco.com/community/pra/1/concepts/cmis-request-url-format-onpremise.html
Not sure whether this is related but the "old" URL has a pattern /cmisatom that's being intercepted by a "CMIS security context cleaning filter" in web.xml.
