{"id":5038,"date":"2015-07-07T05:00:00","date_gmt":"2015-07-07T03:00:00","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/"},"modified":"2015-07-07T05:00:00","modified_gmt":"2015-07-07T03:00:00","slug":"kerberos-sso-with-liferay-61-v2","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/","title":{"rendered":"Kerberos SSO with Liferay 6.1 v2"},"content":{"rendered":"<p>A little bit less than one year ago, I wrote a blog about how to setup the <a href=\"http:\/\/dbi-services.com\/blog\/kerberos-sso-with-liferay-61\/\">Kerberos SSO on Liferay<\/a> using Apache httpd as a front-end, Tomcat as a back-end and with auth_mod_kerb and mod_jk to transfer the information between these two components. Unfortunately, after some months, it seems that something changed either on the Liferay side or in the Apache side because the exact same configuration wasn&#8217;t working anymore. I solved this issue (or at least applied a workaround) two or three months ago because I needed a working environment for some tests but until now, I didn&#8217;t have the time to share my findings.<\/p>\n<p>That&#8217;s why in this blog I will try to explain what was needed in my case to avoid an issue with the configuration I shared in my previous blog. I decided not to update my previous blog but rather to create a new one because my previous blog may still be working as expected with certain versions of Liferay!<\/p>\n<p>&nbsp;<\/p>\n<h3>I. The issue<\/h3>\n<p>In my case, after some months where everything was fine, the SSO suddenly wasn&#8217;t working anymore. The access to the Liferay welcome page took a looooooong time or even never ended (or rejected by Apache httpd depending on the configuration).<\/p>\n<p>With the proper logging information or debugging steps, if you face the same issue, you should be able to see that in fact Liferay doesn&#8217;t understand anymore the information that Apache httpd provides and the result of that is an almost infinite loop in the login process.<\/p>\n<p>From a debugging point of view, my previous blog post prevented an administrator to access Liferay without a valid Kerberos ticket. That&#8217;s why in this solution I also incorporated some lines of code to prevent such cases and to allow any users to still access Liferay even without a valid ticket. This can be easily removed for strict access requirements. Please be aware that this guess access is, by default, only valid for requests directly addresses to Tomcat (not the ones coming from Apache httpd)!<\/p>\n<p>&nbsp;<\/p>\n<h3>II. A possible solution<\/h3>\n<p>So the first thing that changed is the &#8220;KerberosAutoLogin&#8221; itself. I changed a few lines to get something cleaner and I added some others to handle the &#8220;guest&#8221; access in case a valid Kerberos ticket wasn&#8217;t found (line 64 to 77). The result is the following:<\/p>\n<p><a class=\"easyblog-thumb-preview\" title=\"KerberosAutoLogin1.png\" href=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png\"><img decoding=\"async\" style=\"border-width: 1px; border-style: solid; display: block; margin-left: auto; margin-right: auto;\" title=\"KerberosAutoLogin1.png\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png\" alt=\"KerberosAutoLogin1.png\" \/><\/a><a class=\"easyblog-thumb-preview\" title=\"KerberosAutoLogin2.png\" href=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin2.png\"><img decoding=\"async\" style=\"display: block; margin-left: auto; margin-right: auto; border-width: 1px; border-style: solid;\" title=\"KerberosAutoLogin2.png\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin2.png\" alt=\"KerberosAutoLogin2.png\" \/><\/a><\/p>\n<p>Please find at the end of this blog the squeleton of the HOOK I built for my dev environment. This is basically the same that in my previous blog except that I changed the code for you.<\/p>\n<p>In this Java Class, I used the &#8220;LogFactoryUtil&#8221; for the logging to get something more standard but that requires you to configure the log level that you want. If you just want these logs for the debug phase, then you may want to replace all &#8220;logger.debug&#8221; or &#8220;logger.warn&#8221; with a simple &#8220;System.out.println&#8221;. That should redirect all elements that you want to log to the default catalina.out log file.<\/p>\n<p>The second thing to do it to modify the Java Class named &#8220;AutoLoginFilter&#8221;. This Class is a kind of dispatcher for the login requests that are coming to Liferay. From what I saw, there is a little issue with this class that prevent our KerberosAutoLogin code to be executed properly or at all&#8230; Indeed in our case, the &#8220;REMOTE_USER&#8221; is set by Apache and when this method is executed, our KerberosAutoLogin which is one of the &#8220;_autoLogins&#8221; (see the code below) isn&#8217;t called because the &#8220;remoteUser&#8221; variable isn&#8217;t null!<\/p>\n<p>To enable our KerberosAutoLogin to be executed even if the remoteUser isn&#8217;t null, you can modify the default code. You can find the Java Class at the following URL: <a href=\"http:\/\/grepcode.com\/file\/repo1.maven.org\/maven2\/com.liferay.portal\/portal-impl\/6.1.1\/com\/liferay\/portal\/servlet\/filters\/autologin\/AutoLoginFilter.java\/\">the code is on grepcode<\/a>. Please be aware that the code of this Java Class is version dependent, which means that the code for Liferay 6.0 may not exactly be the same that for Liferay 6.1&#8230; So be careful ;).<\/p>\n<p>I highlighted the lines I added for this specific case. If you take a look at the code, I also added a variable &#8220;REALM&#8221; to compare the Kerberos REALM that came from Apache httpd to the one that should be used (your Active Directory or KDC). This check can be used to prevent a user from a different REALM to login to your Liferay. If you don&#8217;t want or don&#8217;t need this additional security, you can just remove this variable and also remove the &#8220;if&#8221; test that use it (remove line 25, 65 and 88).<\/p>\n<p><a class=\"easyblog-thumb-preview\" title=\"AutoLoginFilter1.png\" href=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/AutoLoginFilter1.png\"><img decoding=\"async\" style=\"display: block; margin-left: auto; margin-right: auto; border-width: 1px; border-style: solid;\" title=\"AutoLoginFilter1.png\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/AutoLoginFilter1.png\" alt=\"AutoLoginFilter1.png\" \/><\/a><a class=\"easyblog-thumb-preview\" title=\"AutoLoginFilter2.png\" href=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/AutoLoginFilter2.png\"><img decoding=\"async\" style=\"border-width: 1px; border-style: solid; display: block; margin-left: auto; margin-right: auto;\" title=\"AutoLoginFilter2.png\" src=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/AutoLoginFilter2.png\" alt=\"AutoLoginFilter2.png\" \/><\/a><\/p>\n<p>Please find at the end of this blog the squeleton of the EXT I built for my dev environment. Please also be aware that the KerberosAutoLogin is defined in a hook (custom-hook if you followed my previous blog) but you can&#8217;t do the same for the AutoLoginFilter. Indeed, you will have to create your own EXT using the SDK, add this class in it and then deploy it to be able to see the updated version of the class loaded.<\/p>\n<p>I only printed here the method &#8220;processFilter&#8221; because it&#8217;s the only thing that needs to be modified, at least in my Liferay version 6.1.1! If you compare this method to the one on grepcode you will see that I compacted the code quite a lot to take less space but I didn&#8217;t change the code that isn&#8217;t highlighted.<\/p>\n<p>Once these two Java Classes are modified, you should be able to login properly to Liferay using Kerberos tickets. If not, then enable the logging and that should help you to find out where your issue is. Of course you can still post a comment below and I will do my best to help you. I also already saw some issues that were related to the new version of Apache&#8230; You may want to try the same thing with Apache 2.2 instead of 2.4! From my side, this was the first thing I tried to get the SSO working again and I still use Apache httpd 2.2 (instead of 2.4 as described in my previous blog). Another important thing to check is that your browser is properly setup for the SSO!<\/p>\n<p><a title=\"title\" href=\"http:\/\/dbi-services.com\/blog\/images\/easyblog_images\/132\/SSO Liferay v2\/login-filter-ext.zip\" target=\"_self\">Squeleton of the EXT<\/a><br \/>\n<a title=\"title\" href=\"http:\/\/dbi-services.com\/blog\/images\/easyblog_images\/132\/SSO Liferay v2\/custom-hook.zip\" target=\"_self\">Squeleton of the HOOK<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A little bit less than one year ago, I wrote a blog about how to setup the Kerberos SSO on Liferay using Apache httpd as a front-end, Tomcat as a back-end and with auth_mod_kerb and mod_jk to transfer the information between these two components. Unfortunately, after some months, it seems that something changed either on [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":5039,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[197],"tags":[444,594,445],"type_dbi":[],"class_list":["post-5038","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-application-integration-middleware","tag-kerberos","tag-liferay","tag-sso"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Kerberos SSO with Liferay 6.1 v2 - dbi Blog<\/title>\n<meta name=\"description\" content=\"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kerberos SSO with Liferay 6.1 v2\" \/>\n<meta property=\"og:description\" content=\"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2015-07-07T03:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"775\" \/>\n\t<meta property=\"og:image:height\" content=\"798\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Morgan Patou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MorganPatou\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Morgan Patou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/\"},\"author\":{\"name\":\"Morgan Patou\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"headline\":\"Kerberos SSO with Liferay 6.1 v2\",\"datePublished\":\"2015-07-07T03:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/\"},\"wordCount\":1046,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/KerberosAutoLogin1.png\",\"keywords\":[\"Kerberos\",\"Liferay\",\"SSO\"],\"articleSection\":[\"Application integration &amp; Middleware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/\",\"name\":\"Kerberos SSO with Liferay 6.1 v2 - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/KerberosAutoLogin1.png\",\"datePublished\":\"2015-07-07T03:00:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\"},\"description\":\"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/KerberosAutoLogin1.png\",\"contentUrl\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/04\\\/KerberosAutoLogin1.png\",\"width\":775,\"height\":798},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/kerberos-sso-with-liferay-61-v2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kerberos SSO with Liferay 6.1 v2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/#\\\/schema\\\/person\\\/c4d05b25843a9bc2ab20415dae6bd2d8\",\"name\":\"Morgan Patou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g\",\"caption\":\"Morgan Patou\"},\"description\":\"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\\\/Banking, and the Pharmaceutical industry.\",\"sameAs\":[\"https:\\\/\\\/blog.dbi-services.com\\\/author\\\/morgan-patou\\\/\",\"https:\\\/\\\/x.com\\\/MorganPatou\"],\"url\":\"https:\\\/\\\/www.dbi-services.com\\\/blog\\\/author\\\/morgan-patou\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Kerberos SSO with Liferay 6.1 v2 - dbi Blog","description":"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/","og_locale":"en_US","og_type":"article","og_title":"Kerberos SSO with Liferay 6.1 v2","og_description":"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.","og_url":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/","og_site_name":"dbi Blog","article_published_time":"2015-07-07T03:00:00+00:00","og_image":[{"width":775,"height":798,"url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png","type":"image\/png"}],"author":"Morgan Patou","twitter_card":"summary_large_image","twitter_creator":"@MorganPatou","twitter_misc":{"Written by":"Morgan Patou","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/"},"author":{"name":"Morgan Patou","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"headline":"Kerberos SSO with Liferay 6.1 v2","datePublished":"2015-07-07T03:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/"},"wordCount":1046,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png","keywords":["Kerberos","Liferay","SSO"],"articleSection":["Application integration &amp; Middleware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/","url":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/","name":"Kerberos SSO with Liferay 6.1 v2 - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png","datePublished":"2015-07-07T03:00:00+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8"},"description":"Updated way to setup the SSO using Kerberos in Liferay 6.1.1 CE.","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/KerberosAutoLogin1.png","width":775,"height":798},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/kerberos-sso-with-liferay-61-v2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Kerberos SSO with Liferay 6.1 v2"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/c4d05b25843a9bc2ab20415dae6bd2d8","name":"Morgan Patou","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5d7f5bec8b597db68a09107a6f5309e3870d6296ef94fb10ead4b09454ca67e5?s=96&d=mm&r=g","caption":"Morgan Patou"},"description":"Morgan Patou has over 12 years of experience in Enterprise Content Management (ECM) systems, with a strong focus in recent years on platforms such as Alfresco, Documentum, and M-Files. He specializes in the architecture, setup, customization, and maintenance of ECM infrastructures in complex &amp; critical environments. Morgan is well-versed in both engineering and operations aspects, including high availability design, system integration, and lifecycle management. He also has a solid foundation in open-source and proprietary technologies - ranging from Apache, OpenLDAP or Kerberos to enterprise-grade systems like WebLogic. Morgan Patou holds an Engineering Degree in Computer Science from ENSISA (\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs Sud Alsace) in Mulhouse, France. He is Alfresco Content Services Certified Administrator (ACSCA), Alfresco Content Services Certified Engineer (ACSCE) as well as OpenText Documentum Certified Administrator. His industry experience spans the Public Sector, IT Services, Financial Services\/Banking, and the Pharmaceutical industry.","sameAs":["https:\/\/blog.dbi-services.com\/author\/morgan-patou\/","https:\/\/x.com\/MorganPatou"],"url":"https:\/\/www.dbi-services.com\/blog\/author\/morgan-patou\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/5038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=5038"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/5038\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/5039"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=5038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=5038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=5038"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=5038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}