Ver el código de «Pentaho 1.7 - CAS Integration»

= Configuración =
== Configuración del filtro ==
 /opt/jdk1.5/bin/keytool -import -keystore /opt/jdk1.5/jre/lib/security/cacerts -file sslCASTesting.crt -alias sslCAS

;Agregar en /opt/tomcat/webapps/pentaho/WEB-INF/web.xml

<pre><nowiki>
<filter>
        <filter-name>CASFilter</filter-name>
        <filter-class>
                edu.yale.its.tp.cas.client.filter.ValidateTicketsCASFilter
        </filter-class>
        <init-param>
                <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
                <param-value>https://cas.customer.com.ar/cas/login</param-value>
        </init-param>
        <init-param>
                <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
                <param-value>
                        https://cas.customer.com.ar/cas/proxyValidate
                </param-value>
        </init-param>
        <init-param>
                <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
                <param-value>
                       pentaho.customer.com.ar/pentaho/
                </param-value>
        </init-param>
        <init-param>
                <param-name>
                        edu.yale.its.tp.cas.client.filter.authorizedProxy
                </param-name>
                <param-value>https://cas.customer.com.ar/cas/</param-value>
        </init-param>
        <init-param>
                <param-name>
                        edu.yale.its.tp.cas.client.filter.wrapRequest
                </param-name>
                <param-value>true</param-value>
        </init-param>
        <init-param>
                <param-name>edu.yale.its.tp.cas.proxyUrl</param-name>
                <param-value>
                        https://cas.customer.com.ar/cas/proxy
                </param-value>
        </init-param>
        <init-param>
                <param-name>edu.yale.its.tp.cas.client.filter.casCase</param-name>
                <param-value>false</param-value>
        </init-param>
        <init-param>
                <param-name>
                        edu.yale.its.tp.cas.client.filter.aplicationLoginUrl
                </param-name>
                <param-value>
                        https://cas.customer.com.ar/cas/aplicationLogin
                </param-value>
        </init-param>
</filter>

  <filter-mapping>
        <filter-name>CASFilter</filter-name>
        <url-pattern>/*</url-pattern>
</filter-mapping>

</nowiki></pre>


;Cambiar
<pre><nowiki>
  <filter>
    <filter-name>Acegi Filter Chain Proxy</filter-name>
    <filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>
    <init-param>
      <param-name>targetClass</param-name>
      <param-value>org.acegisecurity.ui.cas.CasProcessingFilter</param-value>
    <!--
      <param-name>targetBean</param-name>
      <param-value>filterChainProxy</param-value>
    -->
    </init-param>
  </filter>
</nowiki></pre>

;Agregar
<pre><nowiki>
<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>
/WEB-INF/spring-acegi.xml
</param-value>
</context-param>
</nowiki></pre>

;Crear /opt/tomcat/webapps/pentaho/WEB-INF/spring-acegi.xml
<pre><nowiki>
#Pegar
</nowiki></pre>

== Configuración del Pentaho ==
ATENCION: The SSO enable script is a feature of Management Services, included in a Pentaho subscription. http://forums.pentaho.org/showthread.php?t=57983



= Referencias =
== CAS ==
* [http://www.ja-sig.org/products/cas/ JA-SIG Central Authentication Service]
** [http://www.ja-sig.org/wiki/display/CASUM/Home CAS User Manual]
** [http://www.ja-sig.org/products/cas/pdf-site/server/index.pdf Server Deployment]
** [http://www.ja-sig.org/wiki/display/CAS/Proxy+CAS+Walkthrough Proxy CAS Walkthrough]
* [http://static.springframework.org/spring-security/site/ Spring Security]

== Pentaho ==
* [http://wiki.pentaho.com/display/PentahoDoc/Security Pentaho Security]
* [http://wiki.pentaho.com/display/PentahoDoc/Authentication+from+Third-Party+Applications  Authentication from Third-Party Applications]
* [http://wiki.pentaho.com/display/PentahoDoc/05.+Security+FAQs What does the login process look like? On the servlet side? On the portlet side?]

* [http://wiki.pentaho.com/display/PentahoDoc/Single+Sign-On  Single Sign-On]
* [http://wiki.pentaho.com/display/PentahoDoc/Security Security Wiki page]
* [http://wiki.pentaho.com/display/PentahoDoc/Running+Single+Sign-on+enable+script+for+tomcat-liferay+bundle Running Single Sign-on enable script for tomcat-liferay bundle]

== Tomcat / CAS ==
;Forum
* [http://forums.pentaho.org/showthread.php?p=178804 Single sign on help?]
* [http://forums.pentaho.org/showthread.php?t=61735 Enabling Single Sign On with CAS and ACEGI Feature Requests]



== Misc ==
;Howto para hacerlo con portal
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-first-step/ Enabling Single Sign On with CAS and JBoss Portal (first step)]
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-second-step/ Enabling Single Sign On with CAS and JBoss Portal (second step)]
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-last-step/ Enabling Single Sign On with CAS and JBoss Portal (last step)]