Nuxeo and PROXY_AUTH

Hi, I want to use Nuxeo with openam (access management solution). So i use PROXY_AUTH plugin. If i modify index.jsp and add out.print(request.getHeader(“ssouser”)), i can see my user id. But after redirection to nxstartup.faces, i have this message :

“If you can read this in your browser, this probably because of a configuration problem of your nuxeo.war/WEB-INF/pages.xml. To change this, edit the OSGI-INF/deployment-fragment.xml of your project at extension pages#PAGES.”

This is my proxy-auth-config.xml

*<extension

  target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
  point="authenticators">
  <authenticationPlugin
          name="PROXY_AUTH"
          enabled="true"
          class="org.nuxeo.ecm.platform.ui.web.auth.proxy.ProxyAuthenticator">
   <loginModulePlugin>Trusting_LM</loginModulePlugin>
   <parameters>
     <parameter name="ssoHeaderName">SSOUSER</parameter>
  <parameter name="usernameUnwantedPartExpression">@</parameter>
   </parameters>
  </authenticationPlugin>

<authenticationChain>
  <plugins>
    <!--  Keep basic Auth at top of Auth chain to support RSS access via BasicAuth -->
    <plugin>BASIC_AUTH</plugin>
    <plugin>PROXY_AUTH</plugin>
  </plugins>
</authenticationChain>

*

I don't know why nuxeo can get my http header attribute.

Thanks David

1 votes

2 answers

3058 views

ANSWER



Finally find a solution using frontal apache (mod_ajp) and openam web agent.

0 votes



And my Nuxeo DEBUG File DEBUG [http-bio-0.0.0.0-8081-exec-13] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Exit Nuxeo Authentication filter

2014-02-03 22:32:15,600 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Entering Nuxeo Authentication Filter

2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Principal not found inside Request via getUserPrincipal

2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Try getting authentication from cache

2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Trying to retrieve userIdentification using plugin BASIC_AUTH

2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] Trying to retrieve userIdentification using plugin PROXY_AUTH

2014-02-03 22:32:15,601 DEBUG [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] user/password not found in request, try into identity cache

2014-02-03 22:32:15,601 WARN [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter] No auth plugin can be found to do the Login Prompt

2014-02-03 22:32:15,609 ERROR [http-bio-0.0.0.0-8081-exec-20] [org.nuxeo.ecm.webapp.helpers.StartupHelper] error while initializing the Seam context with a CoreSession instance:

0 votes