nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Change HTTP Basic Authentication realm

fast3r

Hi everybody, I'm using Alfresco Labs 3 Stable.

When I access to a RSS feed content in Share (ex. for the webscript doclist.get.rss), I get these HTTP headers, related to the HTTP Basic Auth login:

HTTP/1.x 401 Unauthorized
Server: Apache-Coyote/1.1
WWW-Authenticate: Basic realm="Alfresco"
Content-Type: text/html;charset=utf-8
Content-Length: 954
Date: …

How can I change the realm value "Alfresco"? Where is the configuration file for Basic HTTP Authentication?
I've found the LDAP and JAAS ones, but I don't think they're what I'm looking for.

Thank you very much in advance…

Find more posts tagged with

Comments

steffen

looks like the realm is hard-coded in the org.alfresco.web.scripts.BasicHttpAuthenticatorFactory:

            // request credentials if not authorized
            if (!authorized)
            {
                if (logger.isDebugEnabled())
                    logger.debug("Requesting authorization credentials");
                
                res.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                res.setHeader("WWW-Authenticate", "Basic realm=\"Alfresco\"");
            }
‍‍‍‍‍‍‍‍‍‍‍

you could define a new impelementaion of the "webscripts.authenticator.delegatingbasic" bean in the web-framework-config-custom.xml.

HTH

steffen

fast3r

Thanks a lot!
I had found it in several classes but not this one!

you could define a new impelementaion of the "webscripts.authenticator.delegatingbasic" bean in the web-framework-config-custom.xml.

I really don't know how to do that, I'm sorry… any suggestions?
Could I simply modify the class and re-compile the package from the source?

Thanks again.

steffen

Sorry, I should have described it more in detail… Yes, you can simply modify the class and re-compile. I just thought it would be nicer to change the feed authentication without modifying the share.war.

The file web-framework-application-context.xml defines the basic authenticaion factory bean:

&nbsp;&nbsp; <!– HTTP Basic Delegating Authenticator (Servlet based) –>
&nbsp;&nbsp; <bean id="webscripts.authenticator.delegatingbasic" class="org.alfresco.web.scripts.BasicHttpAuthenticatorFactory">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="connectorService" ref="connector.service" />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="endpointId" value="alfresco-feed" />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="delegate" value="true" />
&nbsp;&nbsp; </bean>
‍‍‍‍‍‍‍‍

so thats the bean you want to change the impelmentaion for. to do so it should be enough to add the same snippled in tomcat/shared/classes/alfresco/web-extension/web-framework-config-custom.xml and then change the class attribute to point to your class (with the modified realm section):

&nbsp;&nbsp; <!– HTTP Basic Delegating Authenticator (Servlet based) –>
&nbsp;&nbsp; <bean id="webscripts.authenticator.delegatingbasic" class="my.package.MyBasicHttpAuthenticatorFactory">
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="connectorService" ref="connector.service" />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="endpointId" value="alfresco-feed" />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <property name="delegate" value="true" />
&nbsp;&nbsp; </bean>
‍‍‍‍‍‍‍‍

Your class can then also be placed in tomcat/shared/classes/ . This would make it easier for you to update the share.war in the future … but quit a hassle just to change the realm

Regards

Steffen

fast3r

It works! Thank you very much!

By the way, I had to modify directly the web-framework-application-context.xml file, because settings from web-framework-config-custom.xml seems not to be read… maybe I did something wrong?
I've put my class in /alfresco/tomcat/webapps/share/WEB-INF/classes, because in tomcat/shared/classes it couldn't be found from Alfresco.

This is the web-framework-config-custom.xml content:

<alfresco-config>   

   <!–                           –>
   <!– Web Script Authenticators (KVA)) –>
   <!–                           –>

   <!– HTTP Basic Authenticator (Servlet based) –>
   <bean id="webscripts.authenticator.basic" class="org.alfresco.web.scripts.BasicHttpAuthenticatorFactoryKVA">
      <property name="connectorService" ref="connector.service" />
      <property name="endpointId" value="alfresco-feed" />
   </bean>

   <!– HTTP Basic Delegating Authenticator (Servlet based) –>
   <bean id="webscripts.authenticator.delegatingbasic" class="org.alfresco.web.scripts.BasicHttpAuthenticatorFactoryKVA">
      <property name="connectorService" ref="connector.service" />
      <property name="endpointId" value="alfresco-feed" />
      <property name="delegate" value="true" />
   </bean>
</alfresco-config>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍