External Authentication with Alfresco Community Edition
I need any help I can get by setting up an external authentication with alfresco share. This will be a longer post explaining what I have tried up until now and what my target setup should look like.
First I read the Alfresco documentation about authentication subsystems and the following chapters to get a grasp how it is configured.
Then I tried to follow this Tutorial as close as I could
Current Test Setup ------------------------
httpd (http on port 80)
Reverse Proxy to keycloak and alfresco
httpd.conf with CAS configuration from resource 2.
Keycloak (http on port 8080)
Application Server (Linux)
Alfresco 5.2 Tomcat (http on port 8080)
share-config-custom.xml configuration from resource 2. and disabled CSRF Token Filter
alfresco-global.properties configuration from resource 2.
After beeing redirected to Keycloak and logged in there is a 504 Gateway Time-out
Nothing in the Alfresco Tomcat Logs
Instead of Keycloak I also tried using a HTTP Basic Auth in the httpd webserver The results have been similar dissapointing:
After the Basic Auth dialog of the httpd, where I could authenticate another Basic Auth Popup from Alfresco pops up. This time the credentials are not accepted. When I cancel it I get redirected to the Login Page of "share"
I'd be grateful for any hint in the right direction, alternative working setups e.g. with shibboleth instead of keycloak or nginx instead of httpd
My current config files for reference ---------------------
Re: External Authentication with Alfresco Community Edition
Before working on the full stack, I suggest you to try access directly to alfresco share in order to make sure the externalAuth configuration is working. You can do that by using a Chrome header extension like ModHeader (or similar for Firefox). Open ModHeader settings and put this:
and go to http://alfresco_host:8080/share ...you should see the share dashboard page without login. To log more info append this on alfresco log4j.properties: