using custom authenticationmanager/processingfilter

[timv]

Hi,

I am trying to implement SSO with Sun Access Manager. I wrote a custom processFilter which checks for a valid Access Manager cookie. I also added my custom authentication manager to the list of the providermanager.

I added the following to authentication-service-context.html:
   <bean id="amProcessingFilter" class="be.acait.cms.alfresco.auth.ui.am.AMProcessingFilter">
        <property name="authenticationManager"><ref bean="authenticationManager"/></property>
   </bean>

    <bean id="AMAuthenticationProvider" class="be.acait.cms.alfresco.auth.provider.am.AMAuthenticationProvider" />


    <bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref bean="AMAuthenticationProvider" />
                <ref bean="authenticatedAuthenticationPassthroughProvider" />
                <ref bean="daoAuthenticationProvider" />
            </list>
        </property>
    </bean>



But now, how do I know Alfresco picks it up? I tried remote debugging in my code, but it seems that my code doesn't run.

Oh yes, I'm using 1.3 community edition..

Greets,
timv

[saulius23]

Hi,

I am trying to implement SSO with Sun Access Manager. I wrote a custom processFilter which checks for a valid Access Manager cookie. I also added my custom authentication manager to the list of the providermanager.

I added the following to authentication-service-context.html:
   <bean id="amProcessingFilter" class="be.acait.cms.alfresco.auth.ui.am.AMProcessingFilter">
        <property name="authenticationManager"><ref bean="authenticationManager"/></property>
   </bean>

    <bean id="AMAuthenticationProvider" class="be.acait.cms.alfresco.auth.provider.am.AMAuthenticationProvider" />


    <bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
        <property name="providers">
            <list>
                <ref bean="AMAuthenticationProvider" />
                <ref bean="authenticatedAuthenticationPassthroughProvider" />
                <ref bean="daoAuthenticationProvider" />
            </list>
        </property>
    </bean>



But now, how do I know Alfresco picks it up? I tried remote debugging in my code, but it seems that my code doesn't run.

Oh yes, I'm using 1.3 community edition..

Greets,
timv

Tim,

Have you had luck in finishing setting up SSO with Sun Access Manager? If you could share experiences that would be awesome.

Saul

[andy]

Hi

AuthenticationComponentImpl should use the acegi authentication manager bean. Check that you have wired the correct authentication manager bean into the authentication component impl bean as you have defined your own authentication manager bean.

In authentication-services-context.xml

 <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDao" />
        </property>
        <property name="authenticationManager">
            <ref bean="*****authenticationManager*****" />
        </property>
        <property name="allowGuestLogin">
            <value>true</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍

You should probably wire in a DAO that does not support password changes etc.

SSO is best done with a web filter and to disable normal login.

Regards

Andy