Re: Trying to make CruiseControl webapps require authentication

Easiest way to handle autentication (atleast for me)

1) Put apache on the cc machine
2) enable ajp13 on cc's jetty
3) mount jetty via mod_jk to apache
4) add apache's authentication module to the urls you wish to protect.




On Fri, May 15, 2009 at 9:00 AM, Leo Przybylski <[email protected]> wrote:
> I too am waiting on a response to this. I even tried authentication with
> Spring. No joy. I noticed that any projects I had became discontinued (as if
> CC Dashboard couldn't contact the JMX backend anymore.) I had to disable
> authentication to get it to work again.
>
> On Thu, May 14, 2009 at 7:36 PM, Jason Boehle <[email protected]>
> wrote:
>>
>> I am trying to make the CruiseControl webapps require authentication.  I
>> first added the following to the Dashboard’s web.xml:
>>
>>     <security-constraint>
>>         <web-resource-collection>
>>
>>             <web-resource-name>CCDashboardWebResourceCollection</web-resource-name>
>>             <url-pattern>/*</url-pattern>
>>         </web-resource-collection>
>>         <auth-constraint>
>>             <role-name>user</role-name>
>>         </auth-constraint>
>>     </security-constraint>
>>
>> Then I edited the UserRealms section in jetty.xml:
>>
>>     <Set name="UserRealms">
>>       <Array type="org.mortbay.jetty.security.UserRealm">
>>         <Item>
>>           <New class="org.mortbay.jetty.security.HashUserRealm">
>>             <Set name="name">Auth</Set>
>>             <Set name="config">/work/cc/realm.properties</Set>
>>             <Set name="refreshInterval">0</Set>
>>           </New>
>>         </Item>
>>       </Array>
>>     </Set>
>>
>> The contents of /work/cc/realm.properties is:
>>
>>   user: password,user
>>
>> I also added a <dashboard> element to my CC config.xml file:
>>
>>     <dashboard url="http://user:password@localhost:8080/dashboard"/>
>>
>> The Dashboard webapp now requires authentication like I wanted, but the
>> project updates aren’t getting pushed to the Dashboard.  Another user ran
>> into the same problem:
>> http://www.nabble.com/Re%3A-security-constraint-breaks-Dashboard-tt22680743.html#a22680743.
>>
>> Any thoughts on how to get this to work?
>>
>> Thanks!
>>
>> Jason Boehle
>> [email protected]
>>
>> ------------------------------------------------------------------------------
>> Crystal Reports - New Free Runtime and 30 Day Trial
>> Check out the new simplified licensing option that enables
>> unlimited royalty-free distribution of the report engine
>> for externally facing server and web deployment.
>> http://p.sf.net/sfu/businessobjects
>> _______________________________________________
>> Cruisecontrol-user mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>>
>
>
>
> --
> Leo Przybylski
> Application Systems Analyst, Senior
> University Information Technology Services
> The University of Arizona
> Tucson, AZ 85721
>
> Office: 520.626.6997
> E-mail: przybyls [at] arizona.edu
> URL: http://www.u.arizona.edu/~przybyls/,
> https://test.kuali.org/confluence/display/~lprzybylski,
> http://confluence.arizona.edu/confluence/display/~przybyls/Home
>
>
>
>
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables
> unlimited royalty-free distribution of the report engine
> for externally facing server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> Cruisecontrol-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/cruisecontrol-user
>
>

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables 
unlimited royalty-free distribution of the report engine 
for externally facing server and web deployment. 
http://p.sf.net/sfu/businessobjects