[
https://jira.nuxeo.org/browse/NXP-5584?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Thierry Martins resolved NXP-5584.
----------------------------------
Resolution: Fixed
Assignee: Thierry Martins
Fixed by: http://hg.nuxeo.org/addons/nuxeo-platform-login/rev/638bfcef5190
A new parameter is available when registering a CAS Authenticator plugin: you
can set the target error page the system will display if the ticket provided by
CAS is not valid in Nuxeo
<authenticationPlugin
name="CAS2_AUTH">
<loginModulePlugin>Trusting_LM</loginModulePlugin>
<parameters>
...
<parameter name="errorPage">/nuxeo/error401.jsp</parameter>
</parameters>
</authenticationPlugin>
If errorPage is not set, redirection is done to the default unauthorized error
page.
> Provide a mechanism to redirect to an error page after CAS authentication
> failure
> ---------------------------------------------------------------------------------
>
> Key: NXP-5584
> URL: https://jira.nuxeo.org/browse/NXP-5584
> Project: Nuxeo Enterprise Platform
> Issue Type: Improvement
> Components: Security / Rights
> Affects Versions: 5.3.2
> Reporter: Thierry Martins
> Assignee: Thierry Martins
> Fix For: 5.4
>
>
> In some cases, the users database used by CAS Authentication and Nuxeo
> differs: some users won't be in Nuxeo and as a consequence, there will be an
> infinite loop between CAS which redirects to Nuxeo providing an authenticated
> ticket and Nuxeo redirecting to CAS because the user in the ticket is not
> valid.
> It will be better to handle this error and provide a new parameter to use a
> custom error page.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
