Configuring Portlet Authentication and User Principal Authentication

The following configuration is for Web Development Kit Portlets and Web Publisher Portlets.

1. Expand the WAR file using the jar command from JDK1.4.x.

   For Web Development Kit Portlets, type jar -xvf wdkforportlets.war and for Web Publisher Portlets, type jar -xvf wpportlets.war.

2. Ensure that the UserPrincipalAuthenticationScheme is above the DocbaseLoginAuthenticationScheme in the AuthenticationSchemes.properties file in WEB-INF/classes/com/documentum/web/formext/session/ directory.

3. Open the WEB-INF/classes/com/documentum/web/env/sun/SunPortalEnvironment.properties file, add the following line, and save the file:

   AuthenticationMode=trusted

4. Encrypt the superuser's password and paste the encrypted form of the password into WEB-INF/classes/com/documentum/web/formext/session/TrustedAuthenticatorCredentials.properties file.

   You can encrypt the Superuser's password for the repository with the trusted authenticator tool (com.documentum.web.formext.session.TrustedAuthenticatorTool).

   1. From the command line, run the following command.

      Substitute the actual repository password to be encrypted:

      cd <war_file_director>/WEB-INF/classes java TrustedAuthenticatorTool password

      The output will look similar to the following:

      Encrypted: [d7d1d6e383d6d4e1d0], Decrypted: [my.pwd6\]

   2. Paste the encrypted form of the password into WEB-INF/classes/com/documentum/web/formext/session/TrustedAuthenticatorCredentials.properties file.

      Each repository must have three entries (substitute the actual repository name in the sample entries below):

      Repository_name.user Repository_name.password Repository_name.domain

      If no domain, then enter the following:

      Repository_name.domain=

      For example:

      myrepository.user=ecmdocbase myrepository.password=d7d1d6e383d6d4e1d0 myrepository.domain=

5. Add docbase name in <war_file_directory>/wdk/app.xml file.

   For example:

   <authentication> <!-- Default domain and docbase to authenticate against --> <domain></domain> <docbase>ecmdocbase</docbase> <!-- Class that provide the authentication service --> <service_class>com.documentum.web.formext.session.AuthenticationService</service_class> <!-- Single Sign-On authentication scheme configuration --> <sso_config> <ecs_plug_in></ecs_plug_in> <ticket_cookie></ticket_cookie> <user_header></user_header> </sso_config> </authentication>