nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco portlets

unknown-user

I have deployed alfresco in liferay. When i try to use my spaces portelt i get the following error:

java.lang.IllegalArgumentException - All user details are mandatory!

org.alfresco.web.bean.repository.User.(User.java:70)
org.alfresco.web.scripts.portlet.WebClientPortletAuthenticator.createWebClientUser(WebClientPortletAuthenticator.java:140)
org.alfresco.web.scripts.portlet.WebClientPortletAuthenticator.authenticate(WebClientPortletAuthenticator.java:114)
org.alfresco.web.scripts.portlet.WebScriptPortlet$WebScriptPortalRuntime.authenticate(WebScriptPortlet.java:263)
org.alfresco.web.scripts.WebScriptRuntime.authenticatedExecute(WebScriptRuntime.java:294)

I have taken alfresco from svn one mont ago and i have implemented ldap sso with cas between liferay and alfresco.
Any help would be appreciated

Find more posts tagged with

Comments

jonas

Hi

Try this solution.

A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.0.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.0.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Alfresco_201-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine.

download portal-mysql-43.sql at http://liferay.cignex.com/portal-mysql-43.sql

2. Then create database (this is cofigurable) MySQL

for Liferay Portal 4.3
create database liferay43dev;
grant all on liferay43dev.* to 'liferay43dev'@'localhost' identified by 'liferay43dev' with grant option;
grant all on liferay43dev.* to 'liferay43dev'@'localhost.localdomain' identified by 'liferay43dev' with grant option;

input data
mysql -u liferay43dev -pliferay43dev liferay43dev < portal-mysql-43.sql

for Alfresco Portlet
create database alfresco201plet;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost' identified by 'alfresco201plet' with grant option;
grant all on alfresco201plet.* to 'alfresco201plet'@'localhost.localdomain' identified by 'alfresco201plet' with grant option;

3. Start your AS from unzipped file
tomcat/bin/startup.bat or sh startup.sh

Go to http://localhost:8080/c/portal/login

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

After login in CAS, you should be in Liferay Portal with your login name. No need relogin in Liferay Portal.

Add Alfresco Ext Client. You should be in Alfresco Portlet with your login name. No need relogin in Alfresco Portlet.

Get it?

Good luck.

Jonas Yuan
CIGNEX Technologies, Inc.
Email: jonas@cignex.com

unknown-user

Yes but i want to use webscript portlet which is only avalaible in alfresco 2.1
thanks

mikeh

We have applied some fixes to the authentication code behind the portlets since the 2.1RC1 release to fix these problems with Liferay.

Testing is ongoing, but you are welcome to try the RC2-dev packages from the nightly build server.

Thanks,
Mike

jonas

Hi

The solution is generic. It would be useful for Alfresco Web Script Portlet, Alfresco Web Service portlet, or any other Alfresco-related Portlets (either thick or thin).

Good Luck.

bugg_tb

Hi Jonas,

i've tried your package above but when its installed I have the same problem as when I tried it manually, the content portlet is visible but the client one isn't am i missing something?

Cheers

Tom

jonas

Hi Tom,

I just tested the following one. It works well in my local machine.

——————————————————————————

A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Tomcat60-Alfresco_21-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine. (It should be tomcat60/*)

download portal-mysql-43.sql at http://liferay.cignex.com/portal-mysql-43.sql

Note: It is tomcat 6.0.13, jdk 1.6.* is required.

2. Then create database (this is configurable) MySQL

for Liferay Portal 4.3
create database liferay43plet;
grant all on liferay43plet.* to 'liferay43plet'@'localhost' identified by 'liferay43plet' with grant option;
grant all on liferay43plet.* to 'liferay43plet'@'localhost.localdomain' identified by 'liferay43plet' with grant option;

input data
mysql -u liferay43plet -pliferay43plet liferay43plet < portal-mysql-43.sql

for Alfresco Portlet
create database alfresco21plet;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost' identified by 'alfresco21plet' with grant option;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost.localdomain' identified by 'alfresco21plet' with grant option;

3. Start your AS from unzipped file
tomcat60/bin/startup.bat or sh startup.sh

Go to http://localhost:8080/c/portal/login

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

For the first time you login, you are required to sign on for agreement in Liferay Portal.
Furthermore, just add content "Alfresco Ext 2.1 Client";

using email/password

jonas@liferay.com / jonas
jane@liferay.com / jane

….

After login in CAS, you should be in Liferay Portal with your login name. No need relogin in Liferay Portal.

Add Alfresco Ext 2.1 Client. You should be in Alfresco Portlet with your login name. No need relogin in Alfresco Portlet.

Get it?

Good luck.

Jonas Yuan
CIGNEX Technologies, Inc.
Email: jonas@cignex.com

July 17, 2007

bugg_tb

Cheers for the reply jonas,

At work I'm sat behind a huge firewall so I can't authenticate with your system which doesn't help, but when I've logged on as test on yours and checked the Add Content -> CMS -> Alfresco box there is only ever alfresco content, I have also set up a version myself with alfresco and liferay on the same server but this still ends up with the same effect, Im utterly confused, i know SSO doesn't work but I thought it would at least allow you to see the portlet with a sign on or something.

Cheers

Tom

jonas

Hi Tom,

It should not work well with huge firewall, as well as in your local machine. Since SSO server and LDAP server are all at docs.cignex.com. And Alfresco Portlet also accesses LDAP server (docs.cignex.com) for authentication. If you can not access LDAP server, alfresco portlet may not be initialized in right way, and you should not see it anyway. In order to do so, your firewall should allow you to access this server (with different ports) first.

By the way, I just logged on as jonas/jonas at liferay.cignex.com. It worked well. Portlet "Alfresco Ext Client" appears with "Logout(jonas)". test/test is no a unique account in LDAP server. It is better to use jonas/jonas, jane/jane, joebloggs/joe, etc for testing for real demo in liferay.cignex.com.

Please let me know if you have any questions or comments.

Good luck!

tobias_amon

I tried your solution with Liferay / Alfresco and SSO.

But your solution is not working for me 😞

When I unzip the complete package (and create database with correct rights) I cannot use the Alfresco Ext Client.

In Liferay Portal (4.3.0 on JBoss 4.0.5) the solution was not to Hot-Deploy the portlet. Just use the plugin installer. But this solution does not work for this package.

I have currently set up Liferay 4.3 with JBoss and CAS for SSO. SSO works fine for Liferay (using tickets). But how can I achieve that Alfresco Portlet authenticates with this ticket too?

Thanks

jonas

Hi,

The package in liferay.cignex.com is Liferay Enterprise Portal 4.3.0 (Bundled with Tomcat 6.0), not JBoss Bundle. Thus the package includes a standalone application.

If you want to test it locally, please follow read-me as follows.

at http://liferay.cignex.com/CIGNEX_Liferay_43-Tomcat60-Alfresco_21-SSO-LDAP-readme.txt

——————
A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Tomcat60-Alfresco_21-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine. (It should be tomcat60/*)

download portal-mysql-43.sql at http://liferay.cignex.com/portal-mysql-43.sql

Note: It is tomcat 6.0.13, jdk 1.6.* is required.

2. Then create database (this is configurable) MySQL

for Liferay Portal 4.3
create database liferay43plet;
grant all on liferay43plet.* to 'liferay43plet'@'localhost' identified by 'liferay43plet' with grant option;
grant all on liferay43plet.* to 'liferay43plet'@'localhost.localdomain' identified by 'liferay43plet' with grant option;

input data
mysql -u liferay43plet -pliferay43plet liferay43plet < portal-mysql-43.sql

for Alfresco Portlet
create database alfresco21plet;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost' identified by 'alfresco21plet' with grant option;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost.localdomain' identified by 'alfresco21plet' with grant option;

3. Start your AS from unzipped file
tomcat60/bin/startup.bat or sh startup.sh

Go to http://localhost:8080/c/portal/login

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

For the first time you login, you are required to sign on for agreement in Liferay Portal.

Furthermore, just add content "Alfresco Ext 2.1 Client";

using email/password

jonas@liferay.com / jonas
jane@liferay.com / jane

….

After login in CAS, you should be in Liferay Portal with your login name. No need re-login in Liferay Portal.

Add Alfresco Ext 2.1 Client. You should be in Alfresco Portlet with your login name. No need re-login in Alfresco Portlet.

Get it?

Good luck.

—————————-

tobias_amon

Hi,

Yes I know that its bundled wit Tomcat. But it didn't work for me. As I need an EJB-container I have to work with JBoss.

The message I get from Alfresco (log):
com.cignex.portal.web.app.portlet.ExtAlfrescoFacesPortlet - Auto Login User ID = null

Why is the User ID null?
Is it because the user I entered is not available inside Alfresco? (->jonas/jonas)
Or is it because I use my own CAS-Server?

jonas

Hi

I just tested the above one. It works well in my local machine.

By the way, the above one is also tested successfully by a lot of forums' users.

There are instructions for Do-It-Yourselfers at liferay.cignex.com (for tomcat bundle only).

You should use CAS SSO server at docs.cignex.com, where CAS SSO server associating with an LDAP directory, not from CAS official web site.

Good luck!

tobias_amon

Hi,

I managed authentication with my own CAS. Therefore I modified some classes.

As I need a custom cas-server (to be able to use card/certificate-based authentication) your cas is not working for me.

But thanks for your help

apoorvdurga

Hi Jonas,

Thanks for an excellent solution.

However, i want to run it with my own CAS and OpenLDAP. DO you have any tips on where all to make changes for both alfresco and liferay?

ALso is it necessary to use an LDAP? Can't i just use CAS + database with liferay and alfresco?

thanks for your help,
/a

jonas

Hi,

The solution is generic for any LDAP Server. You can use ADS (Active Directory Server), ADS (Apache Directory Server), OpenLDAP, ect. For using OpenLDAP, you just replace ADS configuration in SSO CAS, Liferay and Alfresco with OpenLDAP configuration, pointing LDAP connection to your OpenLDAP server and setting parameters according to your OpenLDAP server context.

Surely, SSO CAS server, Alfresco and Liferay can be configured with JDBC source (database) separately. In this case, we need at least three databases (by MySQL, for example). Since these three databases are separated (physically or logically) - they have different database schema, the same userÃ¢â‚¬â„¢ info has to be duplicated in these three databases. For example, if there was a user account Ã¢â‚¬Å“jonas/jonasÃ¢â‚¬

apoorvdurga

Hi,

The solution is generic for any LDAP Server. You can use ADS (Active Directory Server), ADS (Apache Directory Server), OpenLDAP, ect. For using OpenLDAP, you just replace ADS configuration in SSO CAS, Liferay and Alfresco with OpenLDAP configuration, pointing LDAP connection to your OpenLDAP server and setting parameters according to your OpenLDAP server context.

Jonas thanks for your inputs. Much appreciated.

However, i have tried all the downloads from liferay.cignex.com and none of them seem to work for me. I have managed to configure LAP + CAS with Liferay (SSO1) and LDAP + CAS with Alfresco (SSO2) separately. But, i am unable to do sso1 + sso2. Basically i can login to liferay via CAS but when i click on alfresco, it again throws the CAS login page. I guess this is because you are using a couple of filters and jars and i'm not clear about them.

Thanks for any inputs.

Best regards,
Apoorv

jonas

Hi Apoorv,

I just tested the following one. It works well in my local machine.

——————————
A solution of SSO plus LDAP for Liferay Portal 4.3 and Alfresco Portlet 2.1.

1. First please download an example Liferay Portal 4.3, Alfresco Portlet 2.1, LDAP (ADS) and SSO CAS.

CIGNEX_Liferay_43-Tomcat60-Alfresco_21-SSO-LDAP.zip

Download from (save link as …)

http://liferay.cignex.com

unzip it in your local machine. (It should be tomcat60/*)

download portal-mysql-43.sql at http://liferay.cignex.com/portal-mysql-43.sql

Note: It is tomcat 6.0.13, jdk 1.6.* is required.

2. Then create database (this is configurable) MySQL

for Liferay Portal 4.3
create database liferay43plet;
grant all on liferay43plet.* to 'liferay43plet'@'localhost' identified by 'liferay43plet' with grant option;
grant all on liferay43plet.* to 'liferay43plet'@'localhost.localdomain' identified by 'liferay43plet' with grant option;

input data
mysql -u liferay43plet -pliferay43plet liferay43plet < portal-mysql-43.sql

for Alfresco Portlet
create database alfresco21plet;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost' identified by 'alfresco21plet' with grant option;
grant all on alfresco21plet.* to 'alfresco21plet'@'localhost.localdomain' identified by 'alfresco21plet' with grant option;

3. Start your AS from unzipped file
tomcat60/bin/startup.bat or sh startup.sh

Go to http://localhost:8080/c/portal/login

4. In CAS login page (https://docs.cignex.com/cas-web), login

possible users in LDAP server (docs.cignex.com) (configurable)
jonas/jonas
jane/jane

…

For the first time you login, you are required to sign on for agreement in Liferay Portal.
Furthermore, just add content "Alfresco Ext 2.1 Client";

using email/password

jonas@liferay.com / jonas
jane@liferay.com / jane

….

After login in CAS, you should be in Liferay Portal with your login name. No need re-login in Liferay Portal.

Add Alfresco Ext 2.1 Client. You should be in Alfresco Portlet with your login name. No need re-login in Alfresco Portlet.

Get it?

Good luck.

——————————————-

For more details, please refer to instructions for Do-It-Yourselfers. Or just test Real Demo at

http://liferay.cignex.com

After you can get it running in your local machine, you can replace LDAP with yours carefully, as well as CAS SSO server.

zazation

hi

I have put in place a simple "CAS SSO" for the "Liferay" portal and it works very well.
now I'm trying to extend this solution to put in place a proxy cas sso that accesses to a portlet that, itself,

accesses to "Alfresco" via web services.

What are the configurations to add in the class "com.liferay.portal.servlet.filters.sso.cas.CASFilter"
to use the proxies and get the pgtiou I'd use to ask for proxy tickets???

otherwise, I've tried to illustrate the mecanisme directly in a browser like this:
- my server cas accessible on the port :8483
- my server tomcat for liferay on : 8090
- I also have the liferay's ssl port: 8445

So
- I put in the url "https://localhost:8443/cas/login" for the authentication on the "CAS"
- then the url "https://localhost:8443/cas/login?service=localhost:8090/c/portal" to get the st for liferay
- validation of the service, ticket recovered on

https://localhost:8443/cas/serviceValidateticket=XXX&service=localhost:8090/c/portal&pgtUrl=https://localhost:8445
/c/cas/proxyCallBack

this is where I get the login but I have this exception:

2007-09-13 14:23:12,026 INFO [org.jasig.cas.ticket.registry.support.DefaultTicke
tRegistryCleaner] - <Starting cleaning of expired tickets from ticket registry a
t [Thu Sep 13 14:23:12 CEST 2007]>
2007-09-13 14:23:12,036 INFO [org.jasig.cas.ticket.registry.support.DefaultTicke
tRegistryCleaner] - <0 found to be removed.  Removing now.>
2007-09-13 14:23:12,046 INFO [org.jasig.cas.ticket.registry.support.DefaultTicke
tRegistryCleaner] - <Finished cleaning of expired tickets from ticket registry a
t [Thu Sep 13 14:23:12 CEST 2007]>
2007-09-13 14:38:32,650 INFO [org.jasig.cas.web.flow.InitialFlowSetupAction] - <
Setting ContextPath for cookies to: /cas>
2007-09-13 14:39:14,991 INFO [org.jasig.cas.authentication.AuthenticationManager
Impl] - <AuthenticationHandler: org.jasig.cas.authentication.handler.support.Sim
pleTestUsernamePasswordAuthenticationHandler successfully authenticated the user
 which provided the following credentials: joebloggs>
2007-09-13 14:39:15,011 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] -
<Granted service ticket [ST-1-o33NgonIFq7uJTQCTfy5f66I4OJJLJftVaQ-20] for servic
e [http://localhost:9000/liferay] for user [joebloggs]>
2007-09-13 14:40:07,106 INFO [org.jasig.cas.authentication.AuthenticationManager
Impl] - <AuthenticationHandler: org.jasig.cas.authentication.handler.support.Htt
pBasedServiceCredentialsAuthenticationHandler failed to authenticate the user wh
ich provided the following credentials: https://localhost:8443/cas/proxyCallBack
>
2007-09-13 14:40:07,106 ERROR [org.jasig.cas.web.ServiceValidateController] - <T
icketException generating ticket for: https://localhost:8443/cas/proxyCallBack>
org.jasig.cas.ticket.TicketCreationException: error.authentication.credentials.b
ad
        at org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGranting
Ticket(CentralAuthenticationServiceImpl.java:271)
        at org.jasig.cas.web.ServiceValidateController.handleRequestInternal(Ser
viceValidateController.java:124)
        at org.springframework.web.servlet.mvc.AbstractController.handleRequest(
AbstractController.java:153)
        at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.ha
ndle(SimpleControllerHandlerAdapter.java:48)
        at org.springframework.web.servlet.DispatcherServlet.doDispatch(Dispatch
erServlet.java:857)
        at org.springframework.web.servlet.DispatcherServlet.doService(Dispatche
rServlet.java:792)
        at org.springframework.web.servlet.FrameworkServlet.processRequest(Frame
workServlet.java:475)
        at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServl
et.java:430)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
        at org.jasig.cas.web.init.SafeDispatcherServlet.service(SafeDispatcherSe
rvlet.java:115)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Appl
icationFilterChain.java:269)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationF
ilterChain.java:188)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperV
alve.java:210)

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

for information, I've generated the certificate with the following commands:


keytool -genkey -alias tomcat -keypass changeit -keyalg RSA
keytool -export -alias tomcat -keypass changeit -file server.cert 
keytool -import -alias tomcat -file server.cert -keypass changeit -keystore %JAVA_HOME%/jre/lib/security/cacerts

‍‍‍‍‍‍‍

Thanks for your help