[Hypercontent-users] Re: HyperContent2

[Alex V. <av...@co...>]

Hi,
	Authentication implementations in HyperContent 2 are plugged in as 
JAAS LoginModules.  These are configured in the jaas.properties file.  
LoginModules can get access to parameters such as username, password, 
or CAS ticket by using callbacks.  HyperContent currently supports 
three Callbacks (all part of the standard JDK):

NameCallback:
	The value of the "prompt" should be set to the name of the desired 
request parameter (e.g. "user").  The value of the parameter will be 
set using the setName method on the NameCallback

TextCallback:
	same as name callback, except the value is set using the setText() 
method of the TextCallback.  You can use this to access username, 
password, or ticket as plain text

PasswordCallback
	Does not passthrough the raw password, but rather provides an SHA-1 
hash of the password.  This hash is converted to a char[] and set using 
the setPassword method of the callback.

The default implementation is 
org.hypercontent.security.UserFileLoginModule, which compares the 
password hash to a hash stored in the user xml file.  I have an 
implementation as well to support Columbia's WIND, a CAS-like central 
authentication service.  It should be pretty easy to customize; if you 
are authenticating against LDAP, you can use the default login screen.  
You can also customize the login and logout pipelines with redirects to 
integrate with an external authentication service like CAS.

There may be some existing implementations worth looking at; a search 
on LDAPLoginModule does yield some hits.  These may or may not work 
without modification.  If you would like to take the lead on coming up 
with a solution, I would be happy to include an LDAPLoginModule in the 
distribution.

Alex

On Feb 23, 2005, at 8:32 AM, ke...@la... wrote:

> Hello!
>
> Do you plan to use LDAP to authenticate users? Can we help you somehow 
> in this
> direction?
>
> Best Regards,
> Aleksejs Kirillovs
> The University of Latvia
>
>
> Citēju Alex Vigdor <av...@co...>:
>
>> I am working on the workflow code right now!  I should have something
>> in CVS within a week, and I hope workflow will be relatively stable
>> within a month.
>>
>> Cheers,	
>> 	Alex
>>
>> On Jan 27, 2005, at 10:16 AM, ke...@la... wrote:
>>
>>> Hello!
>>>
>>> Can we get somehow org.hypercontent.workflow classes for
>>> HyperContent2? :)
>>>
>>> Best Regards,
>>> Aleksejs Kirillovs
>>> The University of Latvia
>>>
>>>
>>
>>
>>
>
>