Hi, Did you have the possiblity to test the new NTLM authentication Plugin.
Now that we migrated to filter based authentication, I created a simple plugin for NTLM authentication. This plugin is based on the directions provided by Frédéric, but I have no NT Domain to test it : it would be great to have your feedback. http://svn.nuxeo.org/trac/nuxeo/browser/org.nuxeo.ecm.platform/trunk/nuxeo-platform-login-ntlm Thx, Tiry Le mercredi 09 mai 2007 à 16:14 +0200, Vincent Dutat a écrit : > My mistake, I forgot to define a dependency to org.nuxeo.ecm.webapp.core. > > Regards. > > Vincent Dutat wrote: > > Hi, > > > > I tried to put the following in a deployment-fragment but it seems that > > the replace mode does not work. > > <extension target="web#LOGIN-CONFIG" mode="replace"> > > <auth-method>NTLM</auth-method> > > <realm-name>nuxeo.ecm</realm-name> > > </extension> > > > > here is the content of the generated web.xml : > > <login-config> > > <auth-method>NTLM</auth-method> > > <realm-name>nuxeo.ecm</realm-name> > > </login-config> > > <login-config> > > <auth-method>FORM</auth-method> > > <realm-name>nuxeo.ecm</realm-name> > > <form-login-config> > > <form-login-page>/login.jsp</form-login-page> > > <form-error-page>/login.jsp?loginFailed=true</form-error-page> > > </form-login-config> > > </login-config> > > > > > > > > Bogdan Stefanescu wrote: > >> It's weird because this marker exists on my Nuxeo5 installation (it is > >> also in svn trunk) > >> Are you using the last sources? May be you have a deployment problem > >> and you web.xml was not updated by ant when you deployed nuxeo5 > >> Try to get last sources and remove nuxeo.ear and then redeploy it. > >> The LOGIN_CONFIG marker should be in web.xml template by default > >> > >> To replace the existing LOGIN_CONFIG contribution you should deploy > >> you jar after (by using <require> to control the order) > >> after the jar that contribute the default LOGIN_CONFIG > >> > >> And also you must use mode="replace". Like this: > >> > >> <extension target="web#LOGIN-CONFIG" mode="replace"> > >> .... > >> </extension> > >> > >> This should normally replace any previous contribution. > >> > >> Bogdan > >> > >> Frédéric Thise wrote: > >>> What i would like is to replace the default behaviour (defined in the > >>> template web.xml file): > >>> <login-config> > >>> <auth-method>FORM</auth-method> > >>> <realm-name>nuxeo.ecm</realm-name> > >>> <form-login-config> > >>> <form-login-page>/login.jsp</form-login-page> > >>> <form-error-page>/login.jsp?loginFailed=true</form-error-page> > >>> </form-login-config> > >>> </login-config> > >>> > >>> by: > >>> <login-config> > >>> <auth-method>NTLM</auth-method> > >>> <realm-name>nuxeo.ecm</realm-name> > >>> </login-config> > >>> > >>> withour modifying the template file... > >>> > >>> If i had a %LOGIN-CONFIG% marker, my deployment fragment will only > >>> add the second <login-config> without replacing the default one. > >>> Besides, i guess it will generate a deployment error (having 2 > >>> <login-config> tags)... > >>> But maybe the only way out is to manually replace the default > >>> <login-config> by my own and repackage the > >>> "org.nuxeo.runtime.jboss-extensions" project? > >>> > >>> PS: i thought %LOGIN-CONFIG% was a standard nuxeo marker like > >>> %FILTER% and %FILTER_MAPPING%... > >>> > >>> > >>> "Bogdan Stefanescu" > >>> <[EMAIL PROTECTED] > >>> <mailto:[EMAIL PROTECTED]>> wrote > >>> in message news:[EMAIL PROTECTED] > >>> > >>> You should add it to that file or otherwise use another marker to add > >>> your login config. > >>> > >>> Bogdan > >>> > >>> Frédéric Thise wrote: > >>> > yep all three in the same fragment but the markers FILTER-MAPPING > >>> and FILTER > >>> > are present in the > >>> > > >>> "org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml" > >>> > >>> > >>> > file but not LOGIN-CONFIG > >>> > > >>> > "Tiry" <[EMAIL PROTECTED] > >>> <mailto:[EMAIL PROTECTED]>> wrote in > >>> message > >>> > news:[EMAIL PROTECTED] > >>> > Le lundi 26 mars 2007 à 13:50 +0200, Frédéric Thise a écrit : > >>> > >> My mistake, the message "TODO>>>>>>>>>>>>>> could not finnd marker > >>> >> LOGIN-CONFIG" is still there... > >>> >> > You have that message only for LOGIn-CONFIG, and not for > >>> FILTER or > >>> > FILTER-MAPPING ? > >>> > All your contributions are in the same fragment ? > >>> > > >>> > >> "Frdric Thise" > >>> <[EMAIL PROTECTED] > >>> <mailto:[EMAIL PROTECTED]>> wrote > >>> >> in message news:[EMAIL PROTECTED] > >>> >> >>> The <require>nuxeoweb.jar</require> was missing, now i > >>> don't have the > >>> >>> "TODO>>>>>>>>>>>>>> could not finnd marker LOGIN-CONFIG" message > >>> anymore > >>> >>> but the web.xml is still not patched > >>> >>> according to my "web#LOGIN-CONFIG" extension. > >>> >>> I have not modified any nuxeo project so the web.xml inside > >>> >>> > >>> "org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml" > >>> > >>> > >>> >>> contains the default <login-config>... > >>> >>> > >>> >>> > >>> >>> "Tiry" <[EMAIL PROTECTED] > >>> <mailto:[EMAIL PROTECTED]>> wrote in > >>> >>> message > >>> >>> news:[EMAIL PROTECTED] > >>> >>> Le lundi 26 mars 2007 12:15 +0200, Frdric Thise a crit : > >>> >>> >>>> hi, > >>> >>>> >>> Hi, > >>> >>> > >>> >>> Do you have the good requirement in your deployment fragment ? > >>> >>> ... > >>> >>> <require>nuxeoweb.jar</require> > >>> >>> <require>nuxeo.jar</require> > >>> >>> ... > >>> >>> > >>> >>> Does your web.xml file inside > >>> >>> > >>> org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml > >>> > >>> > >>> >>> contains this pattern ? > >>> >>> > >>> >>> Tiry > >>> >>> > >>> >>> >>>> i am trying to intgrate NTLM. I am using JCIFS and have > >>> added the > >>> >>>> following filter extensions to my deployment-fragment.xml: > >>> >>>> > >>> >>>> <extension target="web#FILTER"> > >>> >>>> <filter> > >>> >>>> <filter-name>NtlmHttpFilter</filter-name> > >>> >>>> <filter-class>jcifs.http.NtlmHttpFilter</filter-class> > >>> >>>> <init-param> > >>> >>>> <param-name>jcifs.netbios.wins</param-name> > >>> >>>> <param-value>microsrv10</param-value> > >>> >>>> </init-param> > >>> >>>> <init-param> > >>> >>>> <param-name>jcifs.smb.client.domain</param-name> > >>> >>>> <param-value>UNIVERS</param-value> > >>> >>>> </init-param> > >>> >>>> </filter> > >>> >>>> </extension> > >>> >>>> > >>> >>>> <extension target="web#FILTER-MAPPING"> > >>> >>>> > >>> >>>> <filter-mapping> > >>> >>>> <filter-name>NtlmHttpFilter</filter-name> > >>> >>>> <url-pattern>/*</url-pattern> > >>> >>>> </filter-mapping> > >>> >>>> > >>> >>>> </extension> > >>> >>>> > >>> >>>> I also deployed jcifs-1.2.13.jar into the /lib folder > >>> >>>> > >>> >>>> Now i would like to bypass my former login.jsp page to log > >>> directly to > >>> >>>> the application; i tried to add something like: > >>> >>>> > >>> >>>> <extension target="web#LOGIN-CONFIG"> > >>> >>>> > >>> >>>> <login-config> > >>> >>>> <auth-method>NTLM</auth-method> > >>> >>>> <realm-name>nuxeo.ecm</realm-name> > >>> >>>> </login-config> > >>> >>>> > >>> >>>> </extension> > >>> >>>> > >>> >>>> but at deployment time, i saw the following message in my > >>> console:TODO > >>> >>>> >>>>>>>>>>>>>>>>> could not finnd marker LOGIN-CONFIG > >>> >>>>>>>>>>>>>>>>> >>>> Is there > >>> another way to specify the NTLM authentication method? Am i > >>> >>>> doing things correctly? > >>> >>>> > >>> >>>> Frdric Thise > >>> >>>> _______________________________________________ > >>> >>>> ECM mailing list > >>> >>>> [email protected] > >>> <mailto:[email protected]> > >>> >>>> http://lists.nuxeo.com/mailman/listinfo/ecm > >>> >>>> >> > >>> >> _______________________________________________ > >>> >> ECM mailing list > >>> >> [email protected] > >>> <mailto:[email protected]> > >>> >> http://lists.nuxeo.com/mailman/listinfo/ecm > >>> >> > >>> >> > > >>> > > >>> > > >>> > _______________________________________________ > >>> > ECM mailing list > >>> > [email protected] > >>> <mailto:[email protected]> > >>> > http://lists.nuxeo.com/mailman/listinfo/ecm > >>> > > >>> > > >>> ------------------------------------------------------------------------ > >>> > >>> _______________________________________________ > >>> ECM mailing list > >>> [email protected] > >>> http://lists.nuxeo.com/mailman/listinfo/ecm > >>> > > _______________________________________________ > ECM mailing list > [email protected] > http://lists.nuxeo.com/mailman/listinfo/ecm > _______________________________________________ ECM mailing list [email protected] http://lists.nuxeo.com/mailman/listinfo/ecm
