AnsweredAssumed Answered

SSO issues in Clustered Environment

Question asked by nikhilesh_s1vakot1 on Mar 6, 2017
Latest reply on Mar 11, 2017 by jpotts

Hi Guys,

I am facing an issue with SSO in our application. The app is showing login prompt though it is SSO enabled. It is a clustered environment and it is asking for username and password to the user sometimes. We couldn't able to reproduce the same issue and we couldn't get any errors in the logs as well. All the config looks clean. But this issue has been reported by few users. We are using Alfresco 4.1.9 EE hosted in JBoss and in Linux environment. Below is the config for reference. 

Really appreciate if any body can come up with suggestions.

 

alfresco-global.properties file : 

authentication.chain=external1:external,alfrescoNtlm1:alfrescoNtlm
external.authentication.enabled=true
external.authentication.proxyUserName=
external.authentication.proxyHeader=userid

 

share-config-custom.xml

<config evaluator="string-compare" condition="Remote">
<remote>
<keystore>
<path>alfresco/web-extension/alfresco-system.p12</path>
<type>pkcs12</type>
<password>alfresco-system</password>
</keystore>

<connector>
<id>alfrescoCookie</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
</connector>

<connector>
<id>alfrescoHeader</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using header and cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
<userHeader>userid</userHeader>
</connector>

<endpoint>
<id>alfresco</id>
<name>Alfresco - user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfrescoHeader</connector-id>
<endpoint-url>https://alfresco.penske.com/alfresco/wcs</endpoint-url>
<identity>user</identity>
<external-auth>true</external-auth>
</endpoint>
</remote>
</config>

Outcomes