[Ecm] Re: NTLM integration

Tue, 05 Jun 2007 01:23:05 -0700 

Hi,
there's another typo in MANIFEST.MF, the Nuxeo-Component should be OSGI-INF/NTLM-authentication-contrib.xml and not OSGI-INF/ntlm-authentication-contrib.xml, or the contrib file can be renamed. 

Regards.

Tiry wrote:

Le lundi 04 juin 2007 à 20:52 +0200, Vincent Dutat a écrit :

I am taking a look at the config files and there might be a typo in 
OSGI-INF/NTLM-authentication-contrib.xml of nuxeo-platform-ntlm, the 
class specified for plugin NTLM_AUTH, shouldn't be 
org.nuxeo.ecm.platform.ui.web.auth.ntlm.NTLMAuthenticator instead of 
org.nuxeo.ecm.platform.ui.web.auth.proxy.NTLMAuthenticator ?

Yes, this is clearly a typo :) sorry


Tiry wrote:

Le lundi 04 juin 2007 à 19:59 +0200, Vincent Dutat a écrit :

Hi,


I did not have the time to try ur plugin yet, but it's in my plans for a 
week. I plan to test it tomorrow.

Great, thx.
I hope it will work :)


Regards.

Tiry wrote:

Hi,

Did you have the possiblity to test the new NTLM authentication Plugin.

Now that we migrated to filter based authentication, I created a simple
plugin for NTLM authentication.
This plugin is based on the directions provided by Frédéric, but I have
no NT Domain to test it : it would be great to have your feedback.
http://svn.nuxeo.org/trac/nuxeo/browser/org.nuxeo.ecm.platform/trunk/nuxeo-platform-login-ntlm


Thx,

Tiry


Le mercredi 09 mai 2007 à 16:14 +0200, Vincent Dutat a écrit :

My mistake, I forgot to define a dependency to org.nuxeo.ecm.webapp.core.

Regards.

Vincent Dutat wrote:

Hi,


I tried to put the following in a deployment-fragment but it seems that 
the replace mode does not work.

<extension target="web#LOGIN-CONFIG" mode="replace">
<auth-method>NTLM</auth-method>
    <realm-name>nuxeo.ecm</realm-name>
</extension>

here is the content of the generated web.xml :
  <login-config>
    <auth-method>NTLM</auth-method>
    <realm-name>nuxeo.ecm</realm-name>
</login-config>
<login-config>
    <auth-method>FORM</auth-method>
    <realm-name>nuxeo.ecm</realm-name>
    <form-login-config>
        <form-login-page>/login.jsp</form-login-page>
        <form-error-page>/login.jsp?loginFailed=true</form-error-page>
    </form-login-config>
</login-config>



Bogdan Stefanescu wrote:

It's weird because this marker exists on my Nuxeo5 installation (it is 
also in svn trunk)
Are you using the last sources? May be you have a deployment problem 
and you web.xml was not updated by ant when you deployed nuxeo5

Try to get last sources and remove nuxeo.ear and then redeploy it.
The LOGIN_CONFIG marker should be in web.xml template by default


To replace the existing LOGIN_CONFIG contribution you should deploy 
you jar after (by using <require> to control the order)

after the jar that contribute the default LOGIN_CONFIG

And also you must use mode="replace". Like this:

<extension target="web#LOGIN-CONFIG" mode="replace">
....
</extension>

This should normally replace any previous contribution.

Bogdan

Frédéric Thise wrote:

What i would like is to replace the default behaviour (defined in the 
template web.xml file):

<login-config>
<auth-method>FORM</auth-method>
<realm-name>nuxeo.ecm</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/login.jsp?loginFailed=true</form-error-page>
</form-login-config>
</login-config>

 
by:

<login-config>
<auth-method>NTLM</auth-method>
<realm-name>nuxeo.ecm</realm-name>
</login-config>

 
withour modifying the template file...
 
If i had a %LOGIN-CONFIG% marker, my deployment fragment will only 
add the second <login-config> without replacing the default one. 
Besides, i guess it will generate a deployment error (having 2 
<login-config> tags)...
But maybe the only way out is to manually replace the default 
<login-config> by my own and repackage the 
"org.nuxeo.runtime.jboss-extensions" project?
 
PS: i thought %LOGIN-CONFIG% was a standard nuxeo marker like 
%FILTER% and %FILTER_MAPPING%...
 
 
"Bogdan Stefanescu" 
<[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>> wrote 
in message news:[EMAIL PROTECTED]


You should add it to that file or otherwise use another marker to add
your login config.

Bogdan

Frédéric Thise wrote:

yep all three in the same fragment but the markers FILTER-MAPPING 

and FILTER

are present in the


"org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml" 


file but not LOGIN-CONFIG


"Tiry" <[EMAIL PROTECTED] 

<mailto:[EMAIL PROTECTED]>> wrote in 
message

news:[EMAIL PROTECTED]
Le lundi 26 mars 2007 à 13:50 +0200, Frédéric Thise a écrit :
 >> My mistake, the message "TODO>>>>>>>>>>>>>> could not finnd marker

LOGIN-CONFIG" is still there...

   > You have that message only for LOGIn-CONFIG, and not for 

FILTER  or

FILTER-MAPPING ?
All your contributions are in the same fragment ?


 >> "Frdric Thise" 

<[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>> wrote

in message news:[EMAIL PROTECTED]

   >>> The <require>nuxeoweb.jar</require> was missing, now i 

don't have the

"TODO>>>>>>>>>>>>>> could not finnd marker LOGIN-CONFIG" message 

anymore

but the web.xml is still not patched
according to my "web#LOGIN-CONFIG" extension.
I have not modified any nuxeo project so the web.xml inside


"org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml" 


contains the default <login-config>...



"Tiry" <[EMAIL PROTECTED] 

<mailto:[EMAIL PROTECTED]>> wrote in

message
news:[EMAIL PROTECTED]
Le lundi 26 mars 2007  12:15 +0200, Frdric Thise a crit :
     >>>> hi,

       >>> Hi,

Do you have the good requirement in your deployment fragment ?
 ...
 <require>nuxeoweb.jar</require>
 <require>nuxeo.jar</require>
 ...

Does your web.xml file inside


org.nuxeo.runtime.jboss-extensions/resources/ear-template/OSGI-INF/templates/web.xml 


contains this pattern ?

Tiry


     >>>> i am trying to intgrate NTLM. I am using JCIFS and have 

added the

following filter extensions to my deployment-fragment.xml:

<extension target="web#FILTER">
<filter>
<filter-name>NtlmHttpFilter</filter-name>
<filter-class>jcifs.http.NtlmHttpFilter</filter-class>
<init-param>
<param-name>jcifs.netbios.wins</param-name>
<param-value>microsrv10</param-value>
</init-param>
<init-param>
<param-name>jcifs.smb.client.domain</param-name>
<param-value>UNIVERS</param-value>
</init-param>
</filter>
</extension>

<extension target="web#FILTER-MAPPING">

<filter-mapping>
<filter-name>NtlmHttpFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

</extension>

I also deployed jcifs-1.2.13.jar into the /lib folder


Now i would like to bypass my former login.jsp page to log 

directly to

the application; i tried to add something like:

<extension target="web#LOGIN-CONFIG">

<login-config>
<auth-method>NTLM</auth-method>
<realm-name>nuxeo.ecm</realm-name>
</login-config>

</extension>


but at deployment time, i saw the following message in my 

console:TODO

       >>>>>>>>>>>>>>>>> could not finnd marker LOGIN-CONFIG

                                 >>>> Is there 

another way to specify the NTLM authentication method? Am i

doing things correctly?

Frdric Thise
_______________________________________________
ECM mailing list

[email protected] 

<mailto:[email protected]>

http://lists.nuxeo.com/mailman/listinfo/ecm
       >>

_______________________________________________
ECM mailing list

[email protected] 

<mailto:[email protected]>

http://lists.nuxeo.com/mailman/listinfo/ecm

   >

_______________________________________________
ECM mailing list

[email protected] 

<mailto:[email protected]>

http://lists.nuxeo.com/mailman/listinfo/ecm



------------------------------------------------------------------------

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm

  

_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm


_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm


_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm



_______________________________________________
ECM mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm





























					Reply via email to