Re: [Hypercontent-users] HC2.0b4 integration with uPortal

[Alex V. <av...@co...>]

Hi Juris,
	A google search on "ldaploginmodule" shows there are quite a few 
implementations out there.  These will allow you to perform 
authentication in HC2, but  won't address single sign-on.  To 
accomplish that, I would encourage you to consider authenticating both 
uPortal and HC2 to CAS (which can in turn use LDAP), because this will 
keep your users from having to authenticate twice.

Good luck!

Alex

On Sep 21, 2005, at 10:42 AM, sd...@la... wrote:

> Hello, Alex!
> I use LDAP for logon. So I see that It's not possible to use proxy 
> channel alone
> to authentificate to Hyper Content 2.0. As I see proxy channel 
> parameters can
> supply only UID not the password. When read the post "HyperContent 
> 2.0b4 now
>  available" it seemed that using proxy channel gives an apportunity to 
> perform
> authentication with means of proxy channel configuration. So I am 
> going to add
> LDAP logon directly to Hyper Content2.0.
> Thank you very much for advice!
> Juris Treibahs
> University of Latvia
>
>
> Citēju Alex Vigdor <av...@co...>:
>
> -> Hi Juris,
> -> 	Since HC2 is now a separate application from uPortal, it requires 
> you
> -> to login as well.  HC2 uses the JAAS authentication architecture to
> -> support logins; the default implementation uses a username and 
> MD5-hash
> -> password stored in an XML file.  The link I sent before provides a 
> JAAS
> -> LoginModule that uses CAS for login.  You could write a custom
> -> LoginModule that would login to HyperContent by evaluating the "uid"
> -> parameter of the request, but I must caution that this is highly
> -> insecure; it would allow anyone to login to HC2 pretending to be
> -> someone else by simply passing their UID directly to HC2.
> ->
> -> The LocalConnectionContext is a uPortal API that lets you plug in
> -> secure single-sign-on methods like CAS.
> ->
> -> Are you using CAS?  If not, what are you using for logins?
> ->
> -> -Alex
> ->
> -> On Sep 21, 2005, at 9:32 AM, sd...@la... wrote:
> ->
> -> > Hello, Alex!
> -> > Thanks for your answer!
> -> > I am not clear what does it mean to use LocalConnectionContext to 
> pass
> -> > authentication credentials to HyperContent. Will it be enough to 
> fill
> -> > in the
> -> > right values in the field "Default IPerson Attributes to Pass" of 
> the
> -> > channel
> -> > adding form of uPortal? I tried to fill in with value "uid" which 
> as
> -> > far as I
> -> > am concerned contains username but the channel did no succeed to
> -> > perform an
> -> > authorization.
> -> >
> -> > Best regards,
> -> > Juris Treibahs
> -> > University of Latvia
> -> >
> -> >
> -> >
> -> >
> -> >
> -> >
> -> > -------------------------------------------------------
> -> > SF.Net email is sponsored by:
> -> > Tame your development challenges with Apache's Geronimo App 
> Server.
> -> > Download
> -> > it for free - -and be entered to win a 42" plasma tv or your very 
> own
> -> > Sony(tm)PSP.  Click here to play: 
> http://sourceforge.net/geronimo.php
> -> > _______________________________________________
> -> > Hypercontent-users mailing list
> -> > Hyp...@li...
> -> > https://lists.sourceforge.net/lists/listinfo/hypercontent-users
> -> >
> ->
> ->
> ->
>
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. 
> Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Hypercontent-users mailing list
> Hyp...@li...
> https://lists.sourceforge.net/lists/listinfo/hypercontent-users
>