Can I configure nuxeo mobile for CAS2 auth

I have an nuxeo fasttrack 5.7.3 with CAS2 auth and ldap. I have installed nuxeo-mobile-dm (and sc) and when i connect a mobile to my nuxeo server, I get basic authentification screen login. How can i configure my nuxeo server to my CAS2 authentification ? Merci

0 votes

1 answers

1981 views

ANSWER



Maybe the url pattern used by nuxeo-mobile is not chained to CAS_AUTH ? it seems a specific authentication chain is used for

CAS_AUTH should be stacked in the specific chain

0 votes



Thank you for this response. I find this file : nxserver/web/root.war/modules/nuxeo-web-mobile-dm/OSGI-INF/web-mobile-authentification-chain-contrib.xml without CAS2_AUTH chaining. How do I add this chain (in my custom section) ?
11/05/2013

Hello, you should not edit this file and use a bundle instead … do you use $NUXEO_HOME/templates/custom to update your configuration ?
11/05/2013

Yes, i use the template custom.
11/06/2013

Maybe you can try adding this contrib in $NUXEO_HOME/templates/custom/config folder

(Assumed your CAS authentication plugin is called CAS2_AUTH)

<component name="org.nuxeo.platform.mobile.cas.custom.authentication.chain.contrib">

  <require>org.nuxeo.platform.mobile.authentication.chain.contrib</require> 

  <extension target="org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenticationService"
      point="specificChains">
    <specificAuthenticationChain name="mobile-app">
      <urlPatterns>
        <url>/.+/site/mobile[./]*</url>
      </urlPatterns>

      <replacementChain>
        <plugin>CAS2_AUTH/plugin>
        <plugin>BASIC_AUTH_STATEFUL</plugin>
        <plugin>FORM_WEBENGINE_APPLICATION_AUTH</plugin>
        <plugin>FORM_AUTH</plugin>
        <plugin>ANONYMOUS_AUTH</plugin>
        <plugin>WEBSERVICES_AUTH</plugin>
      </replacementChain>
    </specificAuthenticationChain>
  </extension>
</component>

Bonne journée,

Antoine

11/06/2013

Merci Antoine, I can connect now with my login/password set in the mobile config server. I don't see my auth cas login dialog .. I think i pass through the basic auth ? It's a fisrt step. I ca see my documents but can't upload. I am lookink for log information.
11/06/2013

Using a browser from a desktop, CAS login doesn't work anymore. We fall back to basic auth ( http://localhost:8080/nuxeo/login.jsp?nxtimeout=true&forceAnonymousLogin=true ) with "Inactive session" error message.
01/27/2014