Gacq: /* Documentación interna */

2009-09-13T13:52:57Z

‎Documentación interna

Gacq: Página nueva: = Configuración = == Configuración del filtro == /opt/jdk1.5/bin/keytool -import -keystore /opt/jdk1.5/jre/lib/security/cacerts -file sslCASTesting.crt -alias sslCAS ;Agregar en /...

2009-09-13T13:51:19Z

Página nueva: = Configuración = == Configuración del filtro == /opt/jdk1.5/bin/keytool -import -keystore /opt/jdk1.5/jre/lib/security/cacerts -file sslCASTesting.crt -alias sslCAS ;Agregar en /...

Página nueva

= Configuración =
== Configuración del filtro ==
/opt/jdk1.5/bin/keytool -import -keystore /opt/jdk1.5/jre/lib/security/cacerts -file sslCASTesting.crt -alias sslCAS

;Agregar en /opt/tomcat/webapps/pentaho/WEB-INF/web.xml

<pre><nowiki>
<filter>
<filter-name>CASFilter</filter-name>
<filter-class>
edu.yale.its.tp.cas.client.filter.ValidateTicketsCASFilter
</filter-class>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
<param-value>https://cas.customer.com.ar/cas/login</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
<param-value>
https://cas.customer.com.ar/cas/proxyValidate
</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
<param-value>
pentaho.customer.com.ar/pentaho/
</param-value>
</init-param>
<init-param>
<param-name>
edu.yale.its.tp.cas.client.filter.authorizedProxy
</param-name>
<param-value>https://cas.customer.com.ar/cas/</param-value>
</init-param>
<init-param>
<param-name>
edu.yale.its.tp.cas.client.filter.wrapRequest
</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.proxyUrl</param-name>
<param-value>
https://cas.customer.com.ar/cas/proxy
</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.casCase</param-name>
<param-value>false</param-value>
</init-param>
<init-param>
<param-name>
edu.yale.its.tp.cas.client.filter.aplicationLoginUrl
</param-name>
<param-value>
https://cas.customer.com.ar/cas/aplicationLogin
</param-value>
</init-param>
</filter>

<filter-mapping>
<filter-name>CASFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

</nowiki></pre>

;Cambiar
<pre><nowiki>
<filter>
<filter-name>Acegi Filter Chain Proxy</filter-name>
<filter-class>org.acegisecurity.util.FilterToBeanProxy</filter-class>
<init-param>
<param-name>targetClass</param-name>
<param-value>org.acegisecurity.ui.cas.CasProcessingFilter</param-value>

</init-param>
</filter>
</nowiki></pre>

;Agregar
<pre><nowiki>
<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>
/WEB-INF/spring-acegi.xml
</param-value>
</context-param>
</nowiki></pre>

;Crear /opt/tomcat/webapps/pentaho/WEB-INF/spring-acegi.xml
<pre><nowiki>
#Pegar
</nowiki></pre>

== Configuración del Pentaho ==
ATENCION: The SSO enable script is a feature of Management Services, included in a Pentaho subscription. http://forums.pentaho.org/showthread.php?t=57983

= Referencias =
== CAS ==
* [http://www.ja-sig.org/products/cas/ JA-SIG Central Authentication Service]
** [http://www.ja-sig.org/wiki/display/CASUM/Home CAS User Manual]
** [http://www.ja-sig.org/products/cas/pdf-site/server/index.pdf Server Deployment]
** [http://www.ja-sig.org/wiki/display/CAS/Proxy+CAS+Walkthrough Proxy CAS Walkthrough]
* [http://static.springframework.org/spring-security/site/ Spring Security]

== Pentaho ==
* [http://wiki.pentaho.com/display/PentahoDoc/Security Pentaho Security]
* [http://wiki.pentaho.com/display/PentahoDoc/Authentication+from+Third-Party+Applications Authentication from Third-Party Applications]
* [http://wiki.pentaho.com/display/PentahoDoc/05.+Security+FAQs What does the login process look like? On the servlet side? On the portlet side?]

* [http://wiki.pentaho.com/display/PentahoDoc/Single+Sign-On Single Sign-On]
* [http://wiki.pentaho.com/display/PentahoDoc/Security Security Wiki page]
* [http://wiki.pentaho.com/display/PentahoDoc/Running+Single+Sign-on+enable+script+for+tomcat-liferay+bundle Running Single Sign-on enable script for tomcat-liferay bundle]

== Tomcat / CAS ==
;Forum
* [http://forums.pentaho.org/showthread.php?p=178804 Single sign on help?]
* [http://forums.pentaho.org/showthread.php?t=61735 Enabling Single Sign On with CAS and ACEGI Feature Requests]

== Documentación interna ==
* Configuración del filtro de CAS para utilización de Single Sign On (de ahora en más SSO) en aplicaciones web - Ariel Bullor, Versión: 1.6, Fecha de modificación: 17/07/2008

== Misc ==
;Howto para hacerlo con portal
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-first-step/ Enabling Single Sign On with CAS and JBoss Portal (first step)]
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-second-step/ Enabling Single Sign On with CAS and JBoss Portal (second step)]
* [http://uskassat.wordpress.com/2008/07/31/pentahos-secretsenabling-single-sign-on-with-cas-and-jboss-portal-last-step/ Enabling Single Sign On with CAS and JBoss Portal (last step)]

@@ Línea 125: / Línea 125: @@
 * [http://forums.pentaho.org/showthread.php?t=61735 Enabling Single Sign On with CAS and ACEGI Feature Requests]
-== Documentación interna ==
 == Misc ==

Pentaho 1.7 - CAS Integration - Historial de revisiones

Gacq: /* Documentación interna */

Gacq: Página nueva: = Configuración = == Configuración del filtro == /opt/jdk1.5/bin/keytool -import -keystore /opt/jdk1.5/jre/lib/security/cacerts -file sslCASTesting.crt -alias sslCAS ;Agregar en /...