Tribune

Home » Liferay Portal » English » 2. Using Liferay » General

Vista Combinata Vista Piatta Vista ad Albero
Discussioni [ Precedente | Successivo ]
toggle
Mauro Almeida
Liferay openAM integration + LDAP
14 maggio 2012 10.47
Risposta

Mauro Almeida

Punteggio: Junior Member

Messaggi: 28

Data di Iscrizione: 15 marzo 2012

Messaggi recenti

Hi all.

need a little help here. I want users to be authenticated using openAM (openSSO). I’ve configured openAM by creating a new data store that uses LDAP. At this point I’m being able to login into openAM using one of the users present in the LDAP that I’ve configured in openAM. Additionally, if I go to Access Control -> Subjects (as openAM administrator) I’m able to see the LDAP users.

I now want to configure liferay so that users are authenticated using openAM. I’ve added the following configuration parameters to my portal-ext.properties:

 1open.sso.auth.enabled=true
 2open.sso.login.url=http://<host>:<port>/openam_10.0.0/UI/Login?&goto=http://<host>:<port>/c/portal/login
 3open.sso.logout.url=http://<host>:<port>/openam_10.0.0/UI/Logout?goto=http://<host>:<port>/web/guest/home
 4open.sso.service.url=https://<host>:<port>/openam_10.0.0
 5open.sso.screen.name.attr=uid
 6open.sso.email.address.attr=mail
 7open.sso.first.name.attr=givenname
 8open.sso.last.name.attr=sn
 9open.sso.logout.on.session.expiration=false



Unfortunately, when I login into Liferay, which redirects me to login url configured above, an I use valid credentials everything freezes when using IE8 and when using chrome the following message is displayed:

The webpage at http://<host>:<port>/c/portal/login?redirect=%2Fc has resulted in too many redirects. Clearing your cookies for this site or allowing third-party cookies may fix the problem. If not, it is possibly a server configuration issue and not a problem with your computer


What am I doing wrong here?

I'm using Liferay 6.1 CE and OpenAM 10.

Thanks in advanced for the help,
Mauro Almeida
Mauro Almeida
RE: Liferay openAM integration + LDAP
15 maggio 2012 2.34
Risposta

Mauro Almeida

Punteggio: Junior Member

Messaggi: 28

Data di Iscrizione: 15 marzo 2012

Messaggi recenti

Anyone with similar problems? As anyone overcome similar issues?

Best regards,
MJA
Pablo Cabo
RE: Liferay openAM integration + LDAP
28 giugno 2012 9.35
Risposta

Pablo Cabo

Punteggio: New Member

Messaggi: 15

Data di Iscrizione: 23 giugno 2008

Messaggi recenti

Usually when redirects too many times, is caused because the agent host(apache server in my case) has a fqdn conflict. I have the same problem and I hope to solve early.

When I confirm this, I will put details here.

Good luck! emoticon
Sachin Mane
RE: Liferay openAM integration + LDAP
11 luglio 2012 21.25
Risposta

Sachin Mane

Punteggio: Junior Member

Messaggi: 76

Data di Iscrizione: 9 aprile 2012

Messaggi recenti

This problem will come if you are using different domain names for openAM and liferay. OpenSSOFilter can be used only for same domain setup. If you have a cross domain setup then you need OpenAM agent to be installed on liferay.
Neil Redway
RE: Liferay openAM integration + LDAP
17 settembre 2012 3.18
Risposta

Neil Redway

Punteggio: New Member

Messaggi: 2

Data di Iscrizione: 26 agosto 2011

Messaggi recenti

Totally agree, just had the exact same problem.
Looking at the request and responses from OpenAM and LIferay, I could see that the cookies weren't being set correctly for the liferay site.
I verified this also by looking at the OpenSSOFilter to see how it was processing the cookies.

The simple fix is to make your OpenAM server, and your liferay site to have the same domain name.
rehan khan
RE: Liferay openAM integration + LDAP
11 febbraio 2013 3.34
Risposta

rehan khan

Punteggio: New Member

Messaggi: 6

Data di Iscrizione: 30 gennaio 2013

Messaggi recenti

Hey mauro...
I want to configure openam and ldap. So i want to access ldap users into openam.
so please so step by step process.please tell me how to configure.