Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

kerberos sso brakes ticket auth on REST-API #1187

Open
hi-ko opened this issue Jun 29, 2022 · 1 comment
Open

kerberos sso brakes ticket auth on REST-API #1187

hi-ko opened this issue Jun 29, 2022 · 1 comment

Comments

@hi-ko
Copy link

hi-ko commented Jun 29, 2022

In a kerberos enabled Alfresco (tested in CE 6.1, 7.1) login ticket based authentication (either by header or url parameter) works if sso is disabled and no longer works on the REST-API endpoint (/alfresco/api/) if sso is enabled. The webscript enpoint (/alfresco/service/) still works as expected appending url parameter alf_ticket:

Once sso is enabled ticket authentication fails on REST-API and I don't see any code in the stacktrace trying to login by ticket. Instead I only see attempts to use the ticket as username.

kerberos.authentication.sso.enabled=true
kerberos.authentication.browser.ticketLogons=true

Full stacktrace (username is heiko, Ticket starts with TI*:
catalina.out.txt

testcase is enable kerberos sso and access REST-API with ticket as described in the docs: Using the ticket

@jjehl
Copy link

jjehl commented Apr 27, 2023

+1 Already present in 7.3

This is a bug in the alfresco code. Is there some plan to correct this ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants