Sorry, my mail address is valid but i forgot to activate it ;), it is done
now...
The requirements are simple:
1) to be able to define the execution order of the filters through the
deployment fragments mechanism. %{FIRST-FILTER}% is a bit too coarse grain
as the order inside it is not definable.
2) to be able to get rid of container managed security as you suggested. For
my NTLM integration, the whole authentication is performed through an auth
filter.
3) to be able to map group names collected (through LDAP, NTLM, etc.) to the
Nuxeo group names ('administrators', 'members') or to modify theses nuxeo
group names. For example, in the active directory a user could belong, among
others things, to groups 'nuxeo-administrators' and 'nuxeo-members' and
these groups could be mapped in nuxeo to 'administrators' and 'members'.
That's all i can think about for the moment...
Regards,
Frédéric
"Tiry" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
Hi,
We are in process of integrating several SSO and authentication system.
One of the possible solution is to drop container managed security and
handle everything inside a pluggable auth filter :
- easier integration of custom SSO
- possible to run several authentication system in parallele (like form
and basic for example).
Frédéric, it would be great if :
- you provide your exact requirement to have a clean plug into nuxeo5
( and may be also a test package)
- you use a real email adress to post in this list
Thx,
Tiry
Le mardi 17 avril 2007 à 12:11 +0200, Frédéric Thise a écrit :
> Hello,
>
> i have updated my Nuxeo sources with this morning last revision and have
> adapted my NTLM module to use the %{FIRST-FILTER}% marker in the web.xml
> template.
> But some Nuxeo filters are still placed before mine and one of them
> performs
> a getUserPrincipal in UserManagerActionBean before my filter had the
> chance
> to populate it...
> So id had to do what i did before and modify the web.xml template filte to
> put my filter & filter-mapping before everything else. With this
> modification, it works perfectly well...
>
> Is there a way, using the %{FIRST-FILTER}%marker, to be sure that my
> filter
> will be the first to be processed ?
>
>
>
> _______________________________________________
> ECM mailing list
> [email protected]
> http://lists.nuxeo.com/mailman/listinfo/ecm
>
_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm
