Summary
When you started out the chapter, you had an Alfresco server that only knew about the users stored in its repository. By now, your server is not only authenticating against an external LDAP directory, but can also share a session with other web applications through the magic of Single Sign-On (SSO).
You saw some sample code for working with three of Alfresco's security services classes (AuthenticationService, AuthorityService, and PersonService)
and also learned where Alfresco keeps its permission definitions (and how to
extend them).
Specifically, you learned how to:
- Install a basic OpenLDAP implementation
- Configure Alfresco to authenticate against LDAP, including "chaining" LDAP with Alfresco authentication
- Configure LDAP synchronization
- Install and configure a popular open source SSO solution from JA-SIG called CAS
- Establish SSO between Alfresco and two of Tomcat's sample servlets
- Create users and groups with the Alfresco API
- Understand the out-of-the-box permissions...
