ofbiz cas单点登录

Scenes Supported

 OFBiz-CAS-LDAP component supports the following scenes: OFBiz-CAS-OpenLDAP, OFBiz-CAS-ActiveDirectory, OFBiz-OpenLDAP and OFBiz-ActiveDirectory.

 OFBiz-CAS-LDAP Login Procedure

 The new OFBiz login procedure as following: 

OFBiz-CAS Logout Procedure

 The new OFBiz logout procedure as following:

 

Deploy OFBiz-CAS-LDAP Component in OFBiz 4.0

Here are the steps on deploying OFBiz-CAS-LDAP Component in OFBiz 4.0:

1. Use Eclipse SVN plugin download OFBiz-LDAP component from http://www.langhua.cn/langhua/ofbiz-components/OFBiz-LDAP/branch/ofbiz4.0-cas3.2.1.1-openldap2.4.8/ as a new Java project(SVN username: anon, password: anon).
2. Edit build.xml of the new project,  change ofbiz.home property to the path where your OFBiz is.
3. Run ofbiz.copy of build.xml, OFBiz-LDAP component will be deployed to $(ofbiz.home)/specialpurpose/ldap/.
4. Edit $(ofbiz.home)/specialpurpose/build.xml, add ldap/build.xml:
   specialpurpose/build.xml

   <filelist id= "application-builds"  dir= "."  files= "pos/build.xml, hhfacility/build.xml, assetmaint/build.xml, ldap/build.xml" />

5. Edit $(ofbiz.home)/specialpurpose/component-load.xml, add:
   specialpurpose/build.xml

   <load-component  component-location= "${ofbiz.home}/specialpurpose/ldap" />

6. If nessecery, change getPartyId and getSecurityGroup in /cn/langhua/ofbiz/ldap/commons/A_OFBizAuthenticationHandler.java.
7. Run build of $(ofbiz.home)/build.xml.
8. If CAS is deployed in tomcat in the same computer with OFBiz, change tomcat's ssl port to another value such as 8444 and restart tomcat.
9. Edit the configurations in $(ofbiz.home)/specialpurpose/ldap/config/ldap.xml, see Configuration for details.
10. Change checkLogin, login and logout in every WEB-INF/controller.xml:

specialpurpose/build.xml

<!--     Security Mappings -->
<request-map uri= "checkLogin"  edit= "false" >
<description>Verify a user is logged in.</description>
<security https= "true"  auth= "false" />
<event type= "java"  path= "cn.langhua.ofbiz.ldap.LdapLoginWorker"  invoke= "checkLogin"  />
<response name= "success"  type= "view"  value= "main"  />
<response name= "error"  type= "view"  value= "login"  />
</request-map>
<request-map uri= "login" >
<security https= "true"  auth= "false" />
<event type= "java"  path= "cn.langhua.ofbiz.ldap.LdapLoginWorker"  invoke= "login" />
<response name= "success"  type= "view"  value= "main" />
<response name= "error"  type= "view"  value= "login" />
</request-map>
<request-map uri= "logout" >
<security https= "true"  auth= "true" />
<event type= "java"  path= "cn.langhua.ofbiz.ldap.LdapLoginWorker"  invoke= "logout" />
<response name= "success"  type= "request"  value= "checkLogin" />
<response name= "error"  type= "view"  value= "main" />
</request-map>
<!-- End of Security Mappings -->

1. Run OFBiz. Try to login OFBiz, you'll be redirect to CAS login page. Input a correct username and password, you'll be able to login OFBiz.
2. Click Logout in OFBiz, you'll be redirect to CAS logout page.

Configuration

The component can be configed by  $(ofbiz.home)/specialpurpose/ldap/config/ldap.xml. Here is a sample of its content:

specialpurpose/build.xml

<?xml version= "1.0"  encoding= "UTF-8" ?>

<ldap>
    <!-- common configuration -->
    <Attribute>uid=%u</Attribute>
    <AuthenType>simple</AuthenType>
    <AuthenticationHandler>cn.langhua.ofbiz.ldap.cas.OFBizCasAuthenticationHandler</AuthenticationHandler>
    <AutoPartyId>admin</AutoPartyId>
    <AutoSecurityGroupId>FULLADMIN</AutoSecurityGroupId>
    <BaseDN>o=chinare,o=org,c=cn</BaseDN>
    <Filter>(objectclass=*)</Filter>
    <Scope>sub</Scope>
    <URL>ldap: //localhost:389</URL>
    <UseOFBizLoginWhenLDAPFail> true </UseOFBizLoginWhenLDAPFail>

    <!--  for  CAS-LDAP -->
    <CasLoginUri>/login</CasLoginUri>
    <CasLogoutUri>/logout</CasLogoutUri>
    <CasUrl>https: //cms.chinare.org.cn:8444/cas</CasUrl>
    <CasValidateUri>/validate</CasValidateUri>
    <CasLdapHandler>cn.langhua.ofbiz.ldap.openldap.OFBizLdapAuthenticationHandler</CasLdapHandler>

    <!--  for  MS Active Directory -->
    <SearchType/>
    <UserDNForSearch/>
    <PasswordForSearch/>
</ldap>

 Currently, there are 3 AuthenticationHandlers:

• cn.langhua.ofbiz.ldap.cas.OFBizCasAuthenticationHandler: CAS authentication handler.
• cn.langhua.ofbiz.ldap.openldap.OFBizLdapAuthenticationHandler: OpenLDAP authentication handler.
• cn.langhua.ofbiz.ldap.activedirectory.OFBizActiveDirectoryAuthenticationHandler: Active Directory authentication handler.

Enjoy it.
原文：https://wiki.jasig.org/display/CASC/CASifying+Apache+OFBiz