(Alfresco 5.1.1 -> 5.1.2 Upgrade) Continuous 'Authentication Required' popup in Share

[mwatkins]

After recently Upgrading from Alfresco 5.1.1 to 5.1.2, An 'Authentication Required' popup appears after logging onto the share dashboard.

This Popup continuously reappears, and if if dismissed, the page reloads and the the popup appears again.

In addition to this, there is a banner displaying 'Alfresco is running without Share Services. See your System Administrator for more details.'

This popup only appears in /share, /alfresco appears to function normally.

This error has been replicated in a native ubuntu 14.04 environment and a virtualized docker container running ubuntu 14.04.

We believe this to be an issue with the Share services amp, however the JMX dump lists the amp as being installed correctly.

[
            Attribute Name          Attribute Value
            ----------------------- ------------------------------------------------------------------------
            module.description      Module to be applied to alfresco.war, containing APIs for Alfresco Share
            module.id               alfresco-share-services
            module.installDate      2017-03-05T21:23:26.015Z
            module.installState     INSTALLED
            module.repo.version.max 999
            module.repo.version.min 5.1
            module.title            Alfresco Share Services AMP
            module.version          5.1.2
 ]

The latest startup catalina.out  & JMX dump are provided as attachments as necessary.

Any assistance in resolving this issue would be greatly appreciated.

[afaust]

Are you running Share on the same Tomcat instance as the Repository? (If you use the default installer you are)

If you have enabled SSO, did you correctly update all the "Remote" endpoints in share-config-custom.xml to use the /wcs endpoint? Even the new endpoint (not listed in any documentation) that is provided by the alfresco-share-services module called "alfresco-api"?

[mwatkins]

Thank you for your assistance provided earlier.

After investigating our endpoint configurations & updating them to include the latest alfresco-api  endpoint & updating the connector classes to org.alfresco.web.site.servlet.SlingshotAlfrescoConnector from org.springframework.extensions.webscripts.connector.AlfrescoConnector, the continuous 'Authentication required' popup is no longer occurring, however our SSO via CAS is still incorrectly functioning. What appears to happen now is upon entering the URL of the site's share services one is redirected to CAS, and must enter username/password as normal. upon successful verification by CAS  an 'Authentication Required' Popup shows up once, and if dismissed, the user is redirected to the internal Share Login page. Reentering the username/password allows access to share services as normal.

We believe this current error to be related to CAS Configuration. We are using the cas-client-core-3.3.3.jar, and while we are aware that is isn't the officially recommended method to use CAS, we'd rather not have to change to a different cas client implementation at this time if we don't have to, as we have used it without issue with version 5.1.1. Providing the latest JMX dump & catalina.out, as well as the share-config-custom.xml and web.xml files from alfresco & share for investigation should they prove helpful.

Once again, any assistance in resolving this issue would be greatly appreciated.

[afaust]

Did you file a ticket with Alfresco Support about this? I know that various people in the community have had issues with CAS support in 5.1/5.2, but I personally have not used any CAS solution in ages with Alfresco...

[mwatkins]

No, we haven’t done this since we are using the Jasig CAS client and Alfresco do not officially support this method. The documentation describes the use of Apache mod_cas at http://docs.alfresco.com/5.1/concepts/auth-basics.html.

Since the CAS client has worked very well for us up until 5.1.1 we wish to continue using it.

However, since you mention that others are also having problems, we will do this. The problem is only occurring with Alfresco 5.1.2 and so is unlikely to be related to the CAS client.

[idwright]

I don't have access to the enterprise versions but GitHub - wrighting/alfresco-cas: A project designed to show how to integrate Alfresco with CAS singl...  provides AMPs that will work with all the 5.1 community versions.

See Not working with 5.2 · Issue #3 · wrighting/alfresco-cas · GitHub  for 5.2