ClearPassUserCasAuthenticatorService example on drives.xml

uPortal-Project · Mar 29, 2018 · c6c2b44 · c6c2b44
1 parent 99acb39
commit c6c2b44
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/...upportail/portlet/filemanager/services/auth/cas/ClearPassUserCasAuthenticatorService.java b/...upportail/portlet/filemanager/services/auth/cas/ClearPassUserCasAuthenticatorService.java
@@ -40,6 +40,9 @@ WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWIS
 
 package org.esupportail.portlet.filemanager.services.auth.cas;
 
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
 import java.security.KeyFactory;
 import java.security.PrivateKey;
 import java.security.spec.PKCS8EncodedKeySpec;
@@ -76,7 +79,8 @@ public void initialize(SharedUserPortletParameters userParameters) {
 
 	public void setPkcs8Key(String pkcs8Key) throws Exception {
 		 KeyFactory keyFactory = KeyFactory.getInstance("RSA");
-		 privateKey = keyFactory.generatePrivate(new PKCS8EncodedKeySpec(pkcs8Key.getBytes()));
+		 Path pkcs8KeyPath = Paths.get(pkcs8Key);
+		 privateKey = keyFactory.generatePrivate(new PKCS8EncodedKeySpec(Files.readAllBytes(pkcs8KeyPath)));
 	}
 
     public UserPassword getUserPassword(SharedUserPortletParameters userParameters) {

diff --git a/src/main/webapp/WEB-INF/context/drives.xml b/src/main/webapp/WEB-INF/context/drives.xml
@@ -230,6 +230,13 @@
       <property name="target" value="sftp://stock-2.mon-univ.fr"/>
   </bean>
 
+  <!-- if you want to use clearPass (CAS V5) use instead this casUserAuthenticationService 
+  <bean name="casUserAuthenticationService" class="org.esupportail.portlet.filemanager.services.auth.cas.ClearPassUserCasAuthenticatorService">
+      <property name="userCasAuthenticatorServiceRoot" ref="casUserAuthenticationServiceRoot"/>
+      <property name="pkcs8Key" value="/etc/cas/config/security/private.p8"/>
+      </bean>
+  -->
+
   <!-- note casUserAuthenticationServiceRoot, casService, ticketValidator, ticketValidationFilter proxyGrantingTicketStorage and  are sufficient for more than one drive-->
 
   <bean name="casUserAuthenticationServiceRoot" class="org.esupportail.portlet.filemanager.services.auth.cas.UserCasAuthenticatorServiceRoot">