Permanent links don't work with CAS Authentication ?

[manuek_]

Hi,

We trying to use permanent link like this one "http://localhost/nuxeo/nxdoc/default/5e84c7a3-e40c-4152-9497-b0cfdb916a6a/view_documents" to access document on a "nuxeo-cap-5.6-tomcat" server, with HF15 and DM add-on.

We first test this possibility with a default authentification: it works as expected (direct access).

But, we need use CAS authentication and in this case, the permanent link doesn't work anymore ... It's for us an important issue because we need direct acces on task (workflow context) send via email to our users.

Is it a known problem ?

We've done tests on two differents "Centos (5.9 and 6.4)" servers:

• In both case:

  • a first direct access doesn't work. The return URL from CAS is wrong: the path to the document is missing.

• On one server (Centos 6.4, nuxeo-5.6-HF10), after a first connection and deconnection (without removing JSESSION cookie) to the plateform, the direct access on a document works even with a CAS access for authentication (the return URL is correct). No error message are seen (with a default log4j configuration).

• On the other one (Centos 5.9, nuxeo-5.6-HF15), an access after a first connection and deconnection (without removing JSESSION cookie) doesn't work and an error message is sent in the log:

   2013-04-25 14:26:49,819 ERROR [org.nuxeo.ecm.core.api.CoreSession] Permission 'Read' is not granted to 'invite' on document /default-domain/workspaces/niv2/dd (5e84c7a3-e40c-4152-9497-b0cfdb916a6a - Folder)
   2013-04-25 14:26:49,821 ERROR [org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/nuxeo]] L'écouteur d'évènement de session (session event listener) a généré une exception java.lang.IllegalStateException: Please end the HttpSession via org.jboss.seam.web.Session.instance().invalidate()
   at org.jboss.seam.contexts.Lifecycle.endSession(Lifecycle.java:221)
   ....
  

Thanks for your help

[manuek_]

We just try nuxeo5.6-HF15 on a Ubuntu 11.10 machine and we got the same result

[Anahide_Tchertc]

Hi,

[manuek_]

Hi,

[Anahide_Tchertc]

No, it's http

[manuek_]

I thought about the nuxeo server.

[manuek_]

I think it's more a nuxeo problem as the URL used to go to the CAS server for authentication, is a truncated URL.

[#8]

I've tested this and it works correctly, the URL does not get truncated and after logging in on CAS I'm redirected to the correct page.

[manuek_]

First, thank you for your help.

[#10]

Yes, the second redirect is wrong, the service isn't encoded correctly, I'll try to give you a fix next week.