cancel
Showing results for 
Search instead for 
Did you mean: 

SSO issues in Clustered Environment

nikhilesh_s1vak
Confirmed Champ
Confirmed Champ

Hi Guys,

I am facing an issue with SSO in our application. The app is showing login prompt though it is SSO enabled. It is a clustered environment and it is asking for username and password to the user sometimes. We couldn't able to reproduce the same issue and we couldn't get any errors in the logs as well. All the config looks clean. But this issue has been reported by few users. We are using Alfresco 4.1.9 EE hosted in JBoss and in Linux environment. Below is the config for reference. 

Really appreciate if any body can come up with suggestions.

alfresco-global.properties file : 

authentication.chain=external1:external,alfrescoNtlm1:alfrescoNtlm
external.authentication.enabled=true
external.authentication.proxyUserName=
external.authentication.proxyHeader=userid

share-config-custom.xml

<config evaluator="string-compare" condition="Remote">
<remote>
<keystore>
<path>alfresco/web-extension/alfresco-system.p12</path>
<type>pkcs12</type>
<password>alfresco-system</password>
</keystore>

<connector>
<id>alfrescoCookie</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
</connector>

<connector>
<id>alfrescoHeader</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using header and cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
<userHeader>userid</userHeader>
</connector>

<endpoint>
<id>alfresco</id>
<name>Alfresco - user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfrescoHeader</connector-id>
<endpoint-url>https://alfresco.penske.com/alfresco/wcs</endpoint-url>
<identity>user</identity>
<external-auth>true</external-auth>
</endpoint>
</remote>
</config>

1 REPLY 1

jpotts
World-Class Innovator
World-Class Innovator

Are Alfresco and Share running in the same Tomcat on each of the cluster members? If so, have you tried changing those endpoint-urls to be http://localhost:8080/alfresco instead of pointing at the load-balancer?