Re: [xwiki-users] XWiki and Jasig CAS integration

Hi, Sorry I forgot to talk about the most important thing, I don't know what I was thinking about when I wrote my first answer :-P About XWiki part, you need to tell your wiki to accept any user that will be given by Apache front-end, which will authenticate the users with * libapache2-mod-auth-cas*. To do this, you need to use a different authenticator, like this one : https://github.com/xwiki-contrib/xwiki-authenticator-trusted-ldap Build it and place it in you webapp (xwiki/WEB-INF/lib directory).

In *xwiki.cfg*, add this line: xwiki.authentication.authclass=com.xwiki.authentication.trustedldap.TrustedLDAPAuthServiceImpl Then, modify your Servlet Container application to leave the authentication alone. If you're using tomcat, it's in you *server.xml*, you need to add in each "Connector" block, the following option: tomcatAuthentication="false" Finally, configure your apache server. Here's a minimal conf you can use: CASLoginURL https://sso.xwikisas.com/cas/login CASValidateURL https://sso.xwikisas.com/cas/serviceValidate CASValidateServer Off CASTimeout 28800 CASIdleTimeout 14400 <Location "/xwiki/"> AuthType CAS AuthName "CAS Server Auth" CasScope /xwiki Order allow,deny require valid-user Allow from 127.0.0.1 Satisfy Any </Location> This should work, after you restart everything (apache and tomcat) This authenticator is good to use if you're already using CAS with LDAP authentication (most of cases). To resume, in this case, you're first authenticating the user through Apache HTTPd to CAS (you get the login page if you don't have any session/cookie), then the mod_auth_cas gives tomcat some data (which are not altered because of tomcatAuthentication="false"), then XWiki use them to retrieve the info (email, phone number... as you configured it in the LDAP section of xwiki.cfg) from the LDAP server. It's not something very trivial, but I tried to make it clear and short, and I hope you'll understand. Guillaume Fenollar 2013/7/3 Krejci Rudolf Ing. &lt;krejci.r(a)chemosvit.sk&gt; _______________________________________________ users mailing list users(a)xwiki.org http://lists.xwiki.org/mailman/listinfo/users