Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-9857

Impossible to use CMIS AtomPub binding when Kerberos is enable

    Details

    • Type: Service Pack Request
    • Status: Closed (View Workflow)
    • Resolution: Won't Fix
    • Affects Version/s: 4.1.4, 4.1.5
    • Fix Version/s: None
    • Labels:
      None
    • Environment:
      Tomcat, MySQL, Ubuntu 12.04, Active Directory 2003
    • Bug Priority:
      Category 3
    • ACT Numbers:

      137670

    • Regression Since:

      Description

      Description

      When a Kerberos subsystem is defined in the authentication chain it is not possible any more to retrieve the CMIS AtomPub Binding.

      Steps to reproduce

      1- Install Alfresco 4.1.4 (or 4.1.5) with Kerberos authentication enabled in the authentication chain
      2- Start Alfresco
      3- With Curl request the CMIS AtomPub bindings :
      curl -v --user admin:admin http://localhost:8080/alfresco/cmisatom

      Expected Behaviour
      CMIS AtomPub bindings are retrieved as the result stream of the request

      Observed Behaviour
      A status code 200 is sent back but the result stream does not contain CMIS AtomPub bindings.
      When using an Apache Chemistry Client the following exception is sent when the repository is retrieved : "CmisConnectionException: Unexpected document! Received: something unknown"

      Analysis to date
      Same issue is happening when alfresco.authentication.allowGuestLogin is set to false.
      /cmisatom/* Urls are mapped to 2 different authentication filters ("Authentication Filter" and "Global Authentication Filter").
      This filter is redirecting the request to Alfresco login page.

      A workaround is to use the same web.xml as the one in 4.1.6 (e.g Add a mapping between the "WebDAV Authentication Filter" to the /cmisatom/* URLs and remove all filters that was mapped previously to these URLs)

      This issue can't be reproduced in 4.1.6 as the /cmisatom/* urls are now mapped to the "WebDAV Authentication Filter".

        Attachments

          Issue Links

            Structure

              Activity

                People

                • Assignee:
                  closedissues Closed Issues
                  Reporter:
                  croux Corentin Roux [X] (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Structure Helper Panel