SSO issues in Clustered Environment

cancel
Showing results for 
Search instead for 
Did you mean: 
nikhilesh_s1vak
Active Member II

SSO issues in Clustered Environment

Hi Guys,

I am facing an issue with SSO in our application. The app is showing login prompt though it is SSO enabled. It is a clustered environment and it is asking for username and password to the user sometimes. We couldn't able to reproduce the same issue and we couldn't get any errors in the logs as well. All the config looks clean. But this issue has been reported by few users. We are using Alfresco 4.1.9 EE hosted in JBoss and in Linux environment. Below is the config for reference. 

Really appreciate if any body can come up with suggestions.

alfresco-global.properties file : 

authentication.chain=external1:external,alfrescoNtlm1:alfrescoNtlm
external.authentication.enabled=true
external.authentication.proxyUserName=
external.authentication.proxyHeader=userid

share-config-custom.xml

<config evaluator="string-compare" condition="Remote">
<remote>
<keystore>
<path>alfresco/web-extension/alfresco-system.p12</path>
<type>pkcs12</type>
<password>alfresco-system</password>
</keystore>

<connector>
<id>alfrescoCookie</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
</connector>

<connector>
<id>alfrescoHeader</id>
<name>Alfresco Connector</name>
<description>Connects to an Alfresco instance using header and cookie-based authentication</description>
<class>org.alfresco.web.site.servlet.SlingshotAlfrescoConnector</class>
<userHeader>userid</userHeader>
</connector>

<endpoint>
<id>alfresco</id>
<name>Alfresco - user access</name>
<description>Access to Alfresco Repository WebScripts that require user authentication</description>
<connector-id>alfrescoHeader</connector-id>
<endpoint-url>https://alfresco.penske.com/alfresco/wcs</endpoint-url>
<identity>user</identity>
<external-auth>true</external-auth>
</endpoint>
</remote>
</config>

1 Reply
jpotts
Professional

Re: SSO issues in Clustered Environment

Are Alfresco and Share running in the same Tomcat on each of the cluster members? If so, have you tried changing those endpoint-urls to be http://localhost:8080/alfresco instead of pointing at the load-balancer?