Author: jaredmorgs Date: 2013-03-26 00:19:46 -0400 (Tue, 26 Mar 2013) New Revision: 9225 Added: epp/docs/JPP/trunk/Development_Guide/en-US/AccessingUserProfile.xml epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationAuthorizationOverview.xml epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationTokenConfiguration.xml epp/docs/JPP/trunk/Development_Guide/en-US/BackendConfiguration.xml epp/docs/JPP/trunk/Development_Guide/en-US/CoreOrganizationInitializer.xml epp/docs/JPP/trunk/Development_Guide/en-US/LDAP.xml epp/docs/JPP/trunk/Development_Guide/en-US/OrganizationAPI.xml epp/docs/JPP/trunk/Development_Guide/en-US/PasswordEncryption.xml epp/docs/JPP/trunk/Development_Guide/en-US/PredefinedUserConfiguration.xml epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml~ epp/docs/JPP/trunk/Development_Guide/en-US/SAML2.xml epp/docs/JPP/trunk/Development_Guide/en-US/SAML2_Salesforce_and_Google_Integration.xml epp/docs/JPP/trunk/Development_Guide/en-US/SSO.xml epp/docs/JPP/trunk/Development_Guide/en-US/The_eXo_Kernel.xml~ epp/docs/JPP/trunk/Development_Guide/en-US/extras/ExampleCodec.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/configuration.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default-ldap.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default100.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default101.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default102.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default103.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default104.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default105.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default106.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default107.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default108.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default109.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default110.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default111.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default112.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default113.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default114.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default115.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default116.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default117.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default118.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default119.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default120.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default121.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default122.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default123.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default124.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default125.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default126.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default127.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default128.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default129.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default130.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default131.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default91.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default92.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default93.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default94.java epp/docs/JPP/trunk/Development_Guide/en-US/extras/default95.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default96.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default97.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default98.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/default99.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-msad.xml epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-opends.xml epp/docs/JPP/trunk/Development_Guide/en-US/images/OrganizationServiceClassDiagram.png epp/docs/JPP/trunk/Development_Guide/en-US/images/cas.png epp/docs/JPP/trunk/Development_Guide/en-US/images/josso.png epp/docs/JPP/trunk/Development_Guide/en-US/images/loginScreen.png epp/docs/JPP/trunk/Development_Guide/en-US/images/openam.png epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-idp.png epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-sp.png epp/docs/JPP/trunk/Development_Guide/en-US/images/saml-sso.png Removed: epp/docs/JPP/trunk/Development_Guide/en-US/images/7372876/ epp/docs/JPP/trunk/Development_Guide/en-US/images/7372952/ epp/docs/JPP/trunk/Development_Guide/en-US/images/7372962/ Modified: epp/docs/JPP/trunk/Development_Guide/en-US/Development_Guide.xml epp/docs/JPP/trunk/Development_Guide/en-US/JavaScript_in_JBoss_Portal_Platform.xml epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml epp/docs/JPP/trunk/Development_Guide/en-US/The_eXo_Kernel.xml epp/docs/JPP/trunk/Development_Guide/en-US/images/complexinfra.png Log: Added all the Authentication and Authorization XML, code samples, and images Added: epp/docs/JPP/trunk/Development_Guide/en-US/AccessingUserProfile.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/AccessingUserProfile.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationAuthorizationOverview.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationAuthorizationOverview.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationTokenConfiguration.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/AuthenticationTokenConfiguration.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/BackendConfiguration.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/BackendConfiguration.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/CoreOrganizationInitializer.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/CoreOrganizationInitializer.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Modified: epp/docs/JPP/trunk/Development_Guide/en-US/Development_Guide.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/Development_Guide.xml 2013-03-24 23:55:53 UTC (rev 9224) +++ epp/docs/JPP/trunk/Development_Guide/en-US/Development_Guide.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -32,8 +32,8 @@ <part> <title>Application Development</title> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Gadget_Development.xml" encoding="UTF-8"/> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Portlet_Development_Resources.xml" encoding="UTF-8"/> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Portlet_Development.xml" encoding="UTF-8"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Portlet_Development_Resources.xml" encoding="UTF-8"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Portlet_Development.xml" encoding="UTF-8"/> </part> <part> <title>JavaScript Development</title> @@ -49,9 +49,23 @@ <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Scripts_In_JBoss_Portal_Platform.xml" encoding="UTF-8"/> </part> <part> + <title>Authentication and Authorization</title> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="AuthenticationAuthorizationOverview.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="PasswordEncryption.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="PredefinedUserConfiguration.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="AuthenticationTokenConfiguration.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="BackendConfiguration.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="OrganizationAPI.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="AccessingUserProfile.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="CoreOrganizationInitializer.xml" encoding="UTF-8"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="SSO.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="LDAP.xml"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="SAML2.xml" encoding="UTF-8"/> + </part> + <part> <title>JavaScript Code Examples</title> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Module_Cookbook.xml" encoding="UTF-8"/> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Script_Cookbook.xml" encoding="UTF-8"/> + <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Script_Cookbook.xml" encoding="UTF-8"/> </part> <part> <title>Advanced Development Concepts</title> Modified: epp/docs/JPP/trunk/Development_Guide/en-US/JavaScript_in_JBoss_Portal_Platform.xml =================================================================== (Binary files differ) Added: epp/docs/JPP/trunk/Development_Guide/en-US/LDAP.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/LDAP.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/OrganizationAPI.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/OrganizationAPI.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/PasswordEncryption.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/PasswordEncryption.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/PredefinedUserConfiguration.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/PredefinedUserConfiguration.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Modified: epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml 2013-03-24 23:55:53 UTC (rev 9224) +++ epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -1,11 +1,79 @@ <?xml version='1.0' encoding='UTF-8'?> -<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" []> -<preface id="pref-Developer_Guide-Preface"> +<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [ +<!ENTITY VY '6.0'>]> +<preface id="pref-Development_Guide-Preface"> <title>Preface</title> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Common_Content/Conventions.xml"/> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Common_Content/Feedback.xml"/> - <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Feedback.xml"> - <xi:fallback xmlns:xi="http://www.w3.org/2001/XInclude"> <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="Common_Content/Feedback.xml"/> - </xi:fallback> - </xi:include> + <section id="File_Name_Conventions"> + <title>File Name Conventions</title> + <para>The following naming conventions are used in file paths to improve their readability. Each convention is styled so that it stands out from the rest of the text: + </para> + <variablelist id="vari-Reference_Guide-Introduction-Devices"> + <varlistentry> + <term> + <replaceable>CAS_DIR</replaceable> + </term> + <listitem> + <para> + The installation root of the Central Authentication Service (CAS) single sign-on framework. This directory is an arbitrary location chosen when CAS is downloaded and installed. + </para> + <para> + This convention is mainly used in <xref linkend="Central_Authentication_Service_CAS"/>. + </para> + </listitem> + </varlistentry> + <varlistentry> + <term> + <replaceable>ID_HOME</replaceable> + </term> + <listitem> + <para> + The <filename>JPP_HOME/gatein/gatein.ear/portal.war/WEB-INF/conf/organization/</filename> directory, which contains identity-related configuration resources. + </para> + <para> + This convention is mainly used in <xref linkend="LDAP_Integration"/>. + </para> + </listitem> + </varlistentry> + <varlistentry> + <term> + <replaceable>JPP_DIST</replaceable> + </term> + <listitem> + <para> + The installation root of the JBoss Portal Platform instance. For example, if the JBoss Portal Platform distribution archive is extracted to the <filename>/opt/jboss/JPP/</filename> directory, the <replaceable>JPP_DIST</replaceable> directory is <filename>/opt/jboss/JPP</filename>. + </para> + <para> + This directory contains the <filename>jboss-jpp-&VY;</filename>, <filename>gatein-management</filename> and <filename>gatein-sso</filename> directories, and is used extensively in sections that contain configuration stored in these directories. </para> + </listitem> + </varlistentry> + <varlistentry> + <term> + <replaceable>JPP_HOME</replaceable> + </term> + <listitem> + <para> + The <filename>JPP_DIST/jboss-jpp-&VY;</filename> directory, which contains the application server and the configuration files necessary to run JBoss Portal Platform. + </para> + <para> + This directory contains the <filename>gatein</filename>, <filename>modules</filename> and <filename>standalone</filename> directories. + </para> + </listitem> + </varlistentry> + <varlistentry> + <term> + <replaceable>TOMCAT_HOME</replaceable> + </term> + <listitem> + <para> + The installation root of the Apache Tomcat server. Apache Tomcat is a simple Java-based web server that can host servlets or JSP applications. It is not a part of JBoss Portal Platform, however, it is used in various examples in this guide to host single sign-on authentication services. + </para> + <para> + This convention is mainly used in <xref linkend="Single_Sign_On_SSO"/>. + </para> + </listitem> + </varlistentry> + </variablelist> + </section> </preface> Added: epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml~ =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/Preface.xml~ ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/SAML2.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/SAML2.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/SAML2_Salesforce_and_Google_Integration.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/SAML2_Salesforce_and_Google_Integration.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/SSO.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/SSO.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Modified: epp/docs/JPP/trunk/Development_Guide/en-US/The_eXo_Kernel.xml =================================================================== (Binary files differ) Added: epp/docs/JPP/trunk/Development_Guide/en-US/The_eXo_Kernel.xml~ =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/The_eXo_Kernel.xml~ ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/ExampleCodec.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/ExampleCodec.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/ExampleCodec.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,43 @@ +package org.example.codec; + +import org.exoplatform.container.xml.InitParams; +import org.exoplatform.web.security.security.AbstractCodec; +import org.exoplatform.web.security.security.CookieTokenService; +import org.picocontainer.Startable; + +public class ExampleCodec extends AbstractCodec implements Startable +{ + private String simpleParam; + private CookieTokenService cookieTokenService; + + public ExampleCodec(InitParams params, CookieTokenService cookieTokenService) + { + simpleParam = params.getValueParam("encodingParam").getValue(); + this.cookieTokenService = cookieTokenService; + } + + public void start() + { + cookieTokenService.setupCodec(this); + } + + public void stop() + { + } + + /** + * Very simple encoding algorithm used only for demonstration purposes. + * You should use stronger algorithm in real production environment. + */ + public String encode(String plainInput) + { + return plainInput + simpleParam; + } + + public String decode(String encodedInput) + { + return encodedInput.substring(0, encodedInput.length() - simpleParam.length()); + } + +} + Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/configuration.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/extras/configuration.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default-ldap.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default-ldap.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default-ldap.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,32 @@ +<repository> + <id>PortalRepository</id> + <class>org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + <identity-store-mappings> + <identity-store-mapping> + <identity-store-id>PortalLDAPStore</identity-store-id> + <!-- Comment #1 --> + <identity-object-types> + <identity-object-type>USER</identity-object-type> + <identity-object-type>platform_type</identity-object-type> + <identity-object-type>organization_type</identity-object-type> + </identity-object-types> + <options/> + </identity-store-mapping> + </identity-store-mappings> + <options> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + </options> + </repository> + <repository> + <id>DefaultPortalRepository</id> + <class>org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + </repository> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default100.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default100.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default100.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,25 @@ +<field name="user"> + <collection type="java.util.ArrayList"> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$User"> + <field name="userName"><string>root</string></field> + <field name="password"><string>exo</string></field> + <field name="firstName"><string>root</string></field> + <field name="lastName"><string>root</string></field> + <field name="email"><string>exoadmin@localhost</string></field> + <field name="groups"><string>member:/admin,member:/user,owner:/portal/admin</string></field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$User"> + <field name="userName"><string>exo</string></field> + <field name="password"><string>exo</string></field> + <field name="firstName"><string>site</string></field> + <field name="lastName"><string>site</string></field> + <field name="email"><string>exo@localhost</string></field> + <field name="groups"><string>member:/user</string></field> + </object> + </value> + ... + </collection> +</field> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default101.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default101.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default101.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,32 @@ +<component-plugin> + <name>new.user.event.listener</name> + <set-method>addListenerPlugin</set-method> + <type>org.exoplatform.services.organization.impl.NewUserEventListener</type> + <description>this listener assign group and membership to a new created user</description> + <init-params> + <object-param> + <name>configuration</name> + <description>description</description> + <object type="org.exoplatform.services.organization.impl.NewUserConfig"> + <field name="group"> + <collection type="java.util.ArrayList"> + <value> + <object type="org.exoplatform.services.organization.impl.NewUserConfig$JoinGroup"> + <field name="groupId"><string>/platform/users</string></field> + <field name="membership"><string>member</string></field> + </object> + </value> + </collection> + </field> + <field name="ignoredUser"> + <collection type="java.util.HashSet"> + <value><string>root</string></value> + <value><string>john</string></value> + <value><string>mary</string></value> + <value><string>demo</string></value> + </collection> + </field> + </object> + </object-param> + </init-params> + </component-plugin> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default102.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default102.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default102.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,24 @@ +<!-- + | Whereas CredentialsToPrincipalResolvers identify who it is some Credentials might authenticate, + | AuthenticationHandlers actually authenticate credentials. Here e declare the AuthenticationHandlers that + | authenticate the Principals that the CredentialsToPrincipalResolvers identified. CAS will try these handlers in turn + | until it finds one that both supports the Credentials presented and succeeds in authenticating. + +--> + <property name="authenticationHandlers"> + <list> + <!-- + | This is the authentication handler that authenticates services by means of callback via SSL, thereby validating + | a server side SSL certificate. + +--> + <bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler" + p:httpClient-ref="httpClient" /> + <!-- + | This is the authentication handler declaration that every CAS deployer will need to change before deploying CAS + | into production. The default SimpleTestUsernamePasswordAuthenticationHandler authenticates UsernamePasswordCredentials + | where the username equals the password. You will need to replace this with an AuthenticationHandler that implements your + | local authentication strategy. You might accomplish this by coding a new such handler and declaring + | edu.someschool.its.cas.MySpecialHandler here, or you might use one of the handlers provided in the adaptors modules. + +--> + <bean class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler" /> + </list> + </property> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default103.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default103.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default103.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,33 @@ +<!-- + | Whereas CredentialsToPrincipalResolvers identify who it is some Credentials might authenticate, + | AuthenticationHandlers actually authenticate credentials. Here we declare the AuthenticationHandlers that + | authenticate the Principals that the CredentialsToPrincipalResolvers identified. CAS will try these handlers in turn + | until it finds one that both supports the Credentials presented and succeeds in authenticating. + +--> + <property name="authenticationHandlers"> + <list> + <!-- + | This is the authentication handler that authenticates services by means of callback via SSL, thereby validating + | a server side SSL certificate. + +--> + <bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler" + p:httpClient-ref="httpClient" /> + <!-- + | This is the authentication handler declaration that every CAS deployer will need to change before deploying CAS + | into production. The default SimpleTestUsernamePasswordAuthenticationHandler authenticates UsernamePasswordCredentials + | where the username equals the password. You will need to replace this with an AuthenticationHandler that implements your + | local authentication strategy. You might accomplish this by coding a new such handler and declaring + | edu.someschool.its.cas.MySpecialHandler here, or you might use one of the handlers provided in the adaptors modules. + +--> + <!-- Integrates with the Gatein Authentication Service to perform authentication --> + <!-- + | Note: Modify the Plugin Configuration based on the actual information of a GateIn instance. + | The instance can be anywhere on the internet...Not necessarily on localhost where CAS is running + +--> + <bean class="org.gatein.sso.cas.plugin.AuthenticationPlugin"> + <property name="gateInHost"><value>localhost</value></property> + <property name="gateInPort"><value>8080</value></property> + <property name="gateInContext"><value>portal</value></property> + </bean> + </list> + </property> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default104.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default104.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default104.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1 @@ +mvn install Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default105.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default105.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default105.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,10 @@ +<authentication> + <login-module code="org.gatein.sso.agent.login.SSOLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + <login-module code="org.exoplatform.services.security.j2ee.JbossLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> +</authentication> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default106.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default106.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default106.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a class="Login" onclick="$signInAction"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> +--> +<a class="Login" href="/portal/sso"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default107.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default107.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default107.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a onclick="$signInAction"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> +--> +<a href="/portal/sso"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default108.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default108.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default108.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,9 @@ +<html> + <head> + <script type="text/javascript"> + window.location = '/portal/sso'; + </script> + </head> + <body> + </body> +</html> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default109.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default109.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default109.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,57 @@ +<filter> + <filter-name>LoginRedirectFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.LoginRedirectFilter</filter-class> + <init-param> + <!-- This should point to your SSO authentication server --> + <param-name>LOGIN_URL</param-name> + <!-- If casRenewTicket param value of InitiateLoginServlet is: not specified or false --> + <param-value>http://localhost:8888/cas/login?service=http://localhost:8080/portal/initiatessologin</param-value> + <!-- If casRenewTicket param value of InitiateLoginServlet is : true --> + <!-- <param-value>http://localhost:8888/cas/login? + service=http://localhost:8080/portal/initiatessologin&amp;renew=true</param-value> + --> + </init-param> + </filter> + <filter> + <filter-name>CASLogoutFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.CASLogoutFilter</filter-class> + <init-param> + <!-- This should point to your JOSSO authentication server --> + <param-name>LOGOUT_URL</param-name> + <param-value>http://localhost:8888/cas/logout</param-value> + </init-param> + </filter> + <filter> + <filter-name>InitiateLoginFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.InitiateLoginFilter</filter-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/cas</param-value> + </init-param> + <init-param> + <param-name>casRenewTicket</param-name> + <param-value>false</param-value> + </init-param> + <init-param> + <param-name>casServiceUrl</param-name> + <param-value>http://localhost:8080/portal/initiatessologin</param-value> + </init-param> + <init-param> + <param-name>loginUrl</param-name> + <param-value>http://localhost:8080/portal/dologin</param-value> + </init-param> + </filter> + + <!-- Mapping the filters at the very top of the filter chain --> + <filter-mapping> + <filter-name>LoginRedirectFilter</filter-name> + <url-pattern>/*</url-pattern> + </filter-mapping> + <filter-mapping> + <filter-name>CASLogoutFilter</filter-name> + <url-pattern>/*</url-pattern> + </filter-mapping> + <filter-mapping> + <filter-name>InitiateLoginFilter</filter-name> + <url-pattern>/initiatessologin</url-pattern> + </filter-mapping> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default110.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default110.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default110.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,12 @@ +<servlet> + <servlet-name>InitiateLoginServlet</servlet-name> + <servlet-class>org.gatein.sso.agent.GenericSSOAgent</servlet-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/cas</param-value> + </init-param> + <init-param> + <param-name>casRenewTicket</param-name> + <param-value>false</param-value> + </init-param> +</servlet> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default111.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default111.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default111.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,10 @@ +<authentication> + <login-module code="org.gatein.sso.agent.login.SSOLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + <login-module code="org.exoplatform.services.security.j2ee.JbossLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> +</authentication> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default112.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default112.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default112.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a class="Login" onclick="$signInAction"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> +--> +<a class="Login" href="/portal/sso"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default113.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default113.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default113.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a onclick="$signInAction"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> +--> +<a href="/portal/sso"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default114.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default114.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default114.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,9 @@ +<html> + <head> + <script type="text/javascript"> + window.location = '/portal/sso'; + </script> + </head> + <body> + </body> +</html> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default115.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default115.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default115.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,44 @@ +<filter> + <filter-name>LoginRedirectFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.LoginRedirectFilter</filter-class> + <init-param> + <!-- This should point to your SSO authentication server --> + <param-name>LOGIN_URL</param-name> + <param-value>http://localhost:8888/josso/signon/login.do?josso_back_to=http://localhost:8080/portal/initiatessologin</param-value> + </init-param> +</filter> +<filter> + <filter-name>JOSSOLogoutFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.JOSSOLogoutFilter</filter-class> + <init-param> + <!-- This should point to your JOSSO authentication server --> + <param-name>LOGOUT_URL</param-name> + <param-value>http://localhost:8888/josso/signon/logout.do</param-value> + </init-param> +</filter> +<filter> + <filter-name>InitiateLoginFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.InitiateLoginFilter</filter-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/josso/signon/login.do</param-value> + </init-param> + <init-param> + <param-name>loginUrl</param-name> + <param-value>http://localhost:8080/portal/dologin</param-value> + </init-param> +</filter> + +<!-- Mapping the filters at the very top of the filter chain --> +<filter-mapping> + <filter-name>LoginRedirectFilter</filter-name> + <url-pattern>/*</url-pattern> +</filter-mapping> +<filter-mapping> + <filter-name>JOSSOLogoutFilter</filter-name> + <url-pattern>/*</url-pattern> +</filter-mapping> +<filter-mapping> + <filter-name>InitiateLoginFilter</filter-name> + <url-pattern>/initiatessologin</url-pattern> +</filter-mapping> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default116.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default116.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default116.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,8 @@ +<servlet> + <servlet-name>InitiateLoginServlet</servlet-name> + <servlet-class>org.gatein.sso.agent.GenericSSOAgent</servlet-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/josso/signon/login.do</param-value> + </init-param> +</servlet> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default117.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default117.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default118.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default118.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default118.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,10 @@ +<authentication> + <login-module code="org.gatein.sso.agent.login.SSOLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + <login-module code="org.exoplatform.services.security.j2ee.JbossLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> +</authentication> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default119.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default119.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default119.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a class="Login" onclick="$signInAction"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> +--> +<a class="Login" href="/portal/sso"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default120.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default120.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default120.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a onclick="$signInAction"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> +--> +<a href="/portal/sso"><%=_ctx.appRes("UILogoPortlet.action.signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default121.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default121.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default121.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,9 @@ +<html> + <head> + <script type="text/javascript"> + window.location = '/portal/sso'; + </script> + </head> + <body> + </body> +</html> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default122.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default122.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default122.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,48 @@ +<filter> + <filter-name>LoginRedirectFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.LoginRedirectFilter</filter-class> + <init-param> + <!-- This should point to your SSO authentication server --> + <param-name>LOGIN_URL</param-name> + <param-value>http://localhost:8888/opensso/UI/Login?realm=gatein&amp;goto=http://localhost:8080/portal/initiatessologin</param-value> + </init-param> +</filter> +<filter> + <filter-name>OpenSSOLogoutFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.OpenSSOLogoutFilter</filter-class> + <init-param> + <!-- This should point to your SSO authentication server --> + <param-name>LOGOUT_URL</param-name> + <param-value>http://localhost:8888/opensso/UI/Logout</param-value> + </init-param> +</filter> +<filter> + <filter-name>InitiateLoginFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.InitiateLoginFilter</filter-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/opensso</param-value> + </init-param> + <init-param> + <param-name>loginUrl</param-name> + <param-value>http://localhost:8080/portal/dologin</param-value> + </init-param> + <init-param> + <param-name>ssoCookieName</param-name> + <param-value>iPlanetDirectoryPro</param-value> + </init-param> +</filter> + +<!-- Mapping the filters at the very top of the filter chain --> +<filter-mapping> + <filter-name>LoginRedirectFilter</filter-name> + <url-pattern>/*</url-pattern> +</filter-mapping> +<filter-mapping> + <filter-name>OpenSSOLogoutFilter</filter-name> + <url-pattern>/*</url-pattern> +</filter-mapping> +<filter-mapping> + <filter-name>InitiateLoginFilter</filter-name> + <url-pattern>/initiatessologin</url-pattern> +</filter-mapping> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default123.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default123.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default123.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,12 @@ +<servlet> + <servlet-name>InitiateLoginServlet</servlet-name> + <servlet-class>org.gatein.sso.agent.GenericSSOAgent</servlet-class> + <init-param> + <param-name>ssoServerUrl</param-name> + <param-value>http://localhost:8888/opensso</param-value> + </init-param> + <init-param> + <param-name>ssoCookieName</param-name> + <param-value>iPlanetDirectoryPro</param-value> + </init-param> +</servlet> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default124.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default124.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default124.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,10 @@ +# SSO +gatein.sso.enabled=true +gatein.sso.callback.enabled=false +gatein.sso.skip.jsp.redirection=false +gatein.sso.login.module.enabled=false +gatein.sso.filter.login.sso.url=/@@portal.container.name@(a)/dologin +gatein.sso.filter.logout.enabled=false +gatein.sso.filter.initiatelogin.enabled=false +gatein.sso.valve.enabled=true +gatein.sso.valve.class=org.gatein.sso.spnego.GateInNegotiationAuthenticator \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default125.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default125.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default125.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,44 @@ +<security-domain name="gatein-form-auth-domain" cache-type="default"> + <authentication> + <login-module code="org.gatein.sso.integration.SSODelegateLoginModule" flag="required"> + <module-option name="enabled" value="${gatein.sso.login.module.enabled}" /> + <module-option name="delegateClassName" value="${gatein.sso.login.module.class}" /> + <module-option name="portalContainerName" value="portal" /> + <module-option name="realmName" value="gatein-domain" /> + <module-option name="password-stacking" value="useFirstPass" /> + </login-module> + <login-module code="org.exoplatform.services.security.j2ee.JBossAS7LoginModule" flag="required"> + <module-option name="portalContainerName" value="portal"/> + <module-option name="realmName" value="gatein-domain"/> + </login-module> + </authentication> +</security-domain> + +<security-domain name="gatein-domain" cache-type="default"> + <authentication> + <login-module code="org.gatein.sso.spnego.SPNEGOLoginModule" flag="requisite"> + <module-option name="password-stacking" value="useFirstPass"/> + <module-option name="serverSecurityDomain" value="host"/> + <module-option name="removeRealmFromPrincipal" value="true"/> + <module-option name="usernamePasswordDomain" value="gatein-form-auth-domain"/> + </login-module> + <login-module code="org.gatein.sso.agent.login.SPNEGORolesModule" flag="required"> + <module-option name="password-stacking" value="useFirstPass"/> + <module-option name="portalContainerName" value="portal"/> + <module-option name="realmName" value="gatein-domain"/> + </login-module> + </authentication> +</security-domain> + +<security-domain name="host"> + <authentication> + <login-module code="com.sun.security.auth.module.Krb5LoginModule" flag="required"> + <module-option name="storeKey" value="true" /> + <module-option name="useKeyTab" value="true" /> + <module-option name="principal" value=&quot;HTTP/server.local.network(a)LOCAL.NETWORK&quot; /> + <module-option name="keyTab" value="/etc/krb5.keytab" /> + <module-option name="doNotPrompt" value="true" /> + <module-option name="debug" value="true" /> + </login-module> + </authentication> +</security-domain> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default126.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default126.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default126.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,54 @@ +<deployment xmlns="urn:jboss:bean-deployer:2.0"> + + <application-policy xmlns="urn:jboss:security-beans:1.0" name="gatein-form-auth-domain"> + <authentication> + <login-module code="org.gatein.wci.security.WCILoginModule" flag="optional"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + <login-module code="org.exoplatform.services.security.jaas.SharedStateLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + + <!-- Uncomment this part to check on each login if user is member of "/platform/users" group and if not + create such membership --> + <!-- + <login-module code="org.exoplatform.services.organization.idm.CustomMembershipLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + <module-option name="membershipType">member</module-option> + <module-option name="groupId">/platform/users</module-option> + </login-module> + --> + + <login-module code="org.exoplatform.services.security.j2ee.JbossLoginModule" flag="required"> + <module-option name="portalContainerName">portal</module-option> +<!-- logout needs to be performed from 'gatein-domain' as it is used for JaasSecurityManager. --> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + </authentication> + </application-policy> + + + <application-policy xmlns="urn:jboss:security-beans:1.0" name="gatein-domain"> + <authentication> + <login-module + code="org.gatein.sso.spnego.SPNEGOLoginModule" + flag="requisite"> + <module-option name="password-stacking">useFirstPass</module-option> + <module-option name="serverSecurityDomain">host</module-option> + <module-option name="removeRealmFromPrincipal">true</module-option> + <module-option name="usernamePasswordDomain">gatein-form-auth-domain</module-option> + </login-module> + <login-module + code="org.gatein.sso.agent.login.SPNEGORolesModule" + flag="required"> + <module-option name="password-stacking">useFirstPass</module-option> + <module-option name="portalContainerName">portal</module-option> + <module-option name="realmName">gatein-domain</module-option> + </login-module> + </authentication> + </application-policy> + +</deployment> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default127.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default127.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default127.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,17 @@ +<!-- <login-config> + <auth-method>FORM</auth-method> + <realm-name>gatein-domain</realm-name> + <form-login-config> + <form-login-page>/initiatelogin</form-login-page> + <form-error-page>/errorlogin</form-error-page> + </form-login-config> + </login-config> +--> + <login-config> + <auth-method>SPNEGO</auth-method> + <realm-name>SPNEGO</realm-name> + <form-login-config> + <form-login-page>/initiatelogin</form-login-page> + <form-error-page>/errorlogin</form-error-page> + </form-login-config> + </login-config> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default128.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default128.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default128.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,24 @@ +<filter> + <filter-name>LoginRedirectFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.LoginRedirectFilter</filter-class> + <init-param> + <!-- This should point to your SSO authentication server --> + <param-name>LOGIN_URL</param-name> + <param-value>/portal/private/classic</param-value> + </init-param> +</filter> + +<filter> + <filter-name>SPNEGOFilter</filter-name> + <filter-class>org.gatein.sso.agent.filter.SPNEGOFilter</filter-class> +</filter> + +<filter-mapping> + <filter-name>LoginRedirectFilter</filter-name> + <url-pattern>/*</url-pattern> +</filter-mapping> + +<filter-mapping> + <filter-name>SPNEGOFilter</filter-name> + <url-pattern>/login</url-pattern> +</filter-mapping> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default129.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default129.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default129.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,4 @@ +<!-- +<a class="Login" onclick="$signInAction"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> +--> +<a class="Login" href="/portal/sso"><%=_ctx.appRes("UILoginForm.label.Signin")%></a> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default130.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default130.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default130.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1 @@ +sudo ./run.sh -Djava.security.krb5.realm=LOCAL.NETWORK -Djava.security.krb5.kdc=server.local.network -c PROFILE -b server.local.network \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default131.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default131.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default131.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1 @@ +kinit -A demo Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default91.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default91.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default91.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,19 @@ +// Alternative context: WebuiRequestContext context = WebuiRequestContext.getCurrentInstance() ; +PortalRequestContext context = PortalRequestContext.getCurrentInstance() ; +// Get the id of the user logged +String userId = context.getRemoteUser(); + +// Retrieve OrganizationService but it works only from WebUI code. See variants below in documentation +OrganizationService orgService = getApplicationComponent(OrganizationService.class) ; + +// Request the information from OrganizationService: +if (userId != null) + { + User user = orgService.getUserHandler().findUserByName(userId) ; + if (user != null) + { + String firstName = user.getFirstName(); + String lastName = user.getLastName(); + String email = user.getEmail(); + } +} Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default92.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default92.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default92.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,2 @@ +OrganizationService service = (OrganizationService) + ExoContainerContext.getCurrentContainer().getComponentInstanceOfType(OrganizationService.class); Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default93.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default93.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default93.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,2 @@ +OrganizationService service = (OrganizationService) + PortalContainer.getInstance().getComponentInstanceOfType(OrganizationService.class); Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default94.java =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default94.java (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default94.java 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,6 @@ +public Token getToken(String id) throws PathNotFoundException, RepositoryException; +public Token deleteToken(String id) throws PathNotFoundException, RepositoryException; +public String[] getAllTokens(); +public long getNumberTokens() throws Exception; +public String createToken(Credentials credentials) throws IllegalArgumentException,NullPointerException; +public Credentials validateToken(String tokenKey, boolean remove) throws NullPointerException; \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default95.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default95.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default95.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,16 @@ +<component> + <key>org.exoplatform.web.security.security.CookieTokenService</key> + <type>org.exoplatform.web.security.security.CookieTokenService</type> + <init-params> + <values-param> + <name>service.configuration</name> + <!-- Service name --> + <value>jcr-token</value> + <!-- Amount of time --> + <value>7</value> + <!-- Unit of time --> + <value>DAY</value> + <value>autologin</value> + </values-param> + </init-params> + </component> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default96.xml =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default96.xml ___________________________________________________________________ Added: svn:mime-type + application/xml Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default97.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default97.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default97.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,89 @@ +<jboss-identity xmlns="urn:picketlink:idm:config:v1_0_0_ga" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" + xsi:schemaLocation="urn:picketlink:idm:config:v1_0_0_ga identity-config.xsd"> + <realms> + <realm> + <id>idm_realm</id> + <repository-id-ref>DefaultPortalRepository</repository-id-ref> + <identity-type-mappings> + <user-mapping>USER</user-mapping> + </identity-type-mappings> + <options> + <option> + <name>template</name> + <value>true</value> + </option> + <option> + <name>cache.providerRegistryName</name> + <value>apiCacheProvider</value> + </option> + </options> + </realm> + </realms> + <repositories> + <repository> + <id>DefaultPortalRepository</id> + <class>org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + </repository> + </repositories> + <stores> + <attribute-stores/> + <identity-stores> + <identity-store> + <id>HibernateStore</id> + <class>org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl</class> + <external-config/> + <supported-relationship-types> + <relationship-type>JBOSS_IDENTITY_MEMBERSHIP</relationship-type> + <relationship-type>JBOSS_IDENTITY_ROLE</relationship-type> + </supported-relationship-types> + <supported-identity-object-types> + <identity-object-type> + <name>USER</name> + <relationships/> + <credentials> + <credential-type>PASSWORD</credential-type> + </credentials> + <attributes/> + <options/> + </identity-object-type> + </supported-identity-object-types> + <options> + <option> + <name>hibernateSessionFactoryRegistryName</name> + <value>hibernateSessionFactory</value> + </option> + <option> + <name>populateRelationshipTypes</name> + <value>true</value> + </option> + <option> + <name>populateIdentityObjectTypes</name> + <value>true</value> + </option> + <option> + <name>allowNotDefinedIdentityObjectTypes</name> + <value>true</value> + </option> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + <option> + <name>isRealmAware</name> + <value>true</value> + </option> + </options> + </identity-store> + </identity-stores> + </stores> + <options> + <option> + <name>defaultTemplate</name> + <value>idm_realm</value> + </option> + </options> +</jboss-identity> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default98.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default98.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default98.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,34 @@ +<field name="membershipType"> + <collection type="java.util.ArrayList"> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$MembershipType"> + <field name="type"> + <string>member</string> + </field> + <field name="description"> + <string>member membership type</string> + </field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$MembershipType"> + <field name="type"> + <string>owner</string> + </field> + <field name="description"> + <string>owner membership type</string> + </field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$MembershipType"> + <field name="type"> + <string>validator</string> + </field> + <field name="description"> + <string>validator membership type</string> + </field> + </object> + </value> + </collection> +</field> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/default99.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/default99.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/default99.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,37 @@ +<field name="group"> + <collection type="java.util.ArrayList"> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$Group"> + <field name="name"><string>platform</string></field> + <field name="parentId"><string></string></field> + <field name="description"><string>the /platform group</string></field> + <field name="label"><string>Platform</string></field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$Group"> + <field name="name"><string>administrators</string></field> + <field name="parentId"><string>/platform</string></field> + <field name="description"><string>the /platform/administrators group</string></field> + <field name="label"><string>Administrators</string></field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$Group"> + <field name="name"><string>users</string></field> + <field name="parentId"><string>/platform</string></field> + <field name="description"><string>the /platform/users group</string></field> + <field name="label"><string>Users</string></field> + </object> + </value> + <value> + <object type="org.exoplatform.services.organization.OrganizationConfig$Group"> + <field name="name"><string>guests</string></field> + <field name="parentId"><string>/platform</string></field> + <field name="description"><string>the /platform/guests group</string></field> + <field name="label"><string>Guests</string></field> + </object> + </value> + ... + </collection> +</field> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-msad.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-msad.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-msad.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,5 @@ + <identity-store-id>PortalLDAPStore</identity-store-id> + <identity-object-types> + <identity-object-type>USER</identity-object-type> + <identity-object-type>msad_roles_type</identity-object-type> + </identity-object-types> Added: epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-opends.xml =================================================================== --- epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-opends.xml (rev 0) +++ epp/docs/JPP/trunk/Development_Guide/en-US/extras/readonly-opends.xml 2013-03-26 04:19:46 UTC (rev 9225) @@ -0,0 +1,31 @@ +<repository> + <id>PortalRepository</id> + <class>org.picketlink.idm.impl.repository.FallbackIdentityStoreRepository</class> + <external-config/> + <default-identity-store-id>HibernateStore</default-identity-store-id> + <default-attribute-store-id>HibernateStore</default-attribute-store-id> + <identity-store-mappings> + <identity-store-mapping> + <identity-store-id>PortalLDAPStore</identity-store-id> + <!-- Comment #1 --> + <identity-object-types> + <identity-object-type>USER</identity-object-type> + <identity-object-type>acme_roles_type</identity-object-type> + <identity-object-type>acme_ou_type</identity-object-type> + </identity-object-types> + <!-- Comment #2 --> + <options> + <option> + <name>readOnly</name> + <value>true</value> + </option> + </options> + </identity-store-mapping> + </identity-store-mappings> + <options> + <option> + <name>allowNotDefinedAttributes</name> + <value>true</value> + </option> + </options> + </repository> \ No newline at end of file Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/OrganizationServiceClassDiagram.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/OrganizationServiceClassDiagram.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/cas.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/cas.png ___________________________________________________________________ Added: svn:mime-type + image/png Modified: epp/docs/JPP/trunk/Development_Guide/en-US/images/complexinfra.png =================================================================== (Binary files differ) Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/josso.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/josso.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/loginScreen.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/loginScreen.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/openam.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/openam.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-idp.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-idp.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-sp.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/salesforce-sp.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: epp/docs/JPP/trunk/Development_Guide/en-US/images/saml-sso.png =================================================================== (Binary files differ) Property changes on: epp/docs/JPP/trunk/Development_Guide/en-US/images/saml-sso.png ___________________________________________________________________ Added: svn:mime-type + image/png