Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-19933

My Activities dashlet avatar render failure in Share Dashboard when using Kerberos SSO

    Details

    • Bug Priority:
      Category 2
    • ACT Numbers:

      00971093, 00970928, 00971028, 00969744,00972215, 00974536, 00972395, 00974566, 00976351, 00974567, 00974568, 00976101, 00981333, 00981845, 00982934, 00983911

    • Regression Since:
    • Sprint:
      Handel, John Ireland, John Jenkins
    • Work Funnel End:
      2018-11
    • Story Points:
      5

      Description

      When accessing Alfresco Share Dashboard the dashlet "My Activities" lists the documents recently accessed by the user. The user's avatar (either the default user icon or a custom icon) is displayed next to each recently accessed document listed in the dashlet.

      When Kerberos SSO is used to access Share from a browser the user lands directly on the Share dashboard. In this case the user's avatar is not rendered. Depending on the browser used to access Share, either a a broken image icon or cross is displayed.

      Steps To Reproduce
      1. Install Alfresco 5.2.4 out of the box. Configure LDAP-AD and Kerberos Authentication. Ensure an external user (e.g. testuser1) is imported into Alfresco from LDAP-AD.
      2. Important: ensure the <alfresco_home>/tomcat/shared/classes/web-extension/share-config-custom.xml is configured with reference to the documentation in
      https://docs.alfresco.com/5.2/tasks/auth-kerberos-shareSSO.html
      3. From a PC client joined to the AD domain, login as testuser1, run the IE browser and connect to http://<hostname>:<port>/share
      4. Verify that you land directly on the testuser1 Share dashboard. This confirms Kerberos SSO is used for authentication.
      5. Upload some documents to the repository, then preview them to create some Share activity.
      6. Connect again to Share from IE and check the Share Dashboard My Activities dashlet.
      Expectation
      The My Activities dashlet displays the user avatar next to the documents previewed in step 5.
      Observation
      The user avatar is not displayed. Also, if f testuser1 is made a member of ALFRESO_ADMINISTRATORS then Admin Tools > Node Browser is available from Share. In this case when running the Chrome browser > Admin Tools > Tools > Node Browser returns the error pop up
      *Failure
      Failed to get store list
      *
      Debug Info
      The avatar request GET /share/proxy/alfresco/slingshot/profile/avatar/testuser returns an HTTP 500 which can be observed in a Fiddler trace run on the PC client. See the attached screenshot. There is no exception logged by Alfresco. The complete Fiddler trace file 524_Kerberos_SSO_Share_Avatar_Fail.saz is also attached.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                closedbugs Closed Bugs
                Reporter:
                gcussen Gerald Cussen
              • Votes:
                6 Vote for this issue
                Watchers:
                20 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: