How to avoid login in a WDK application?

Hello !

we need to develop a wdk application which will be published in the web.

The fact is that it has to work:

1) Like an intranet for administering (with login).

2) Like an open internet application to consult objects in the repository (the users do not have to login and the call to the wdk application would be responsability of an internet portal).

Is it possible to avoid login in a wdk application? We are thinking about implement a custom login and simulate de login depending of a parameter... is it possible to do that?

Thank you in advance

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Accepted answers

XdctmX

Yes it is possible to avoid login to WDK. The best example is DRL component. In one of my project i created a component just like DRL so that users don't have to login to see this component.

I will post the details.

All comments

ukdavo

For the silent login bit you could create a custom authentication scheme (see page 383 of the WDK Dev guide). I'm not sure how you would also allow admin users to login though as the custom auth scheme would kick in. Can't think of a clever way around this at the moment. In a worst case scenario just deploy DA or your WDK webapp but with the default auth schemes and get your admins to log into that

Regards.

XdctmX

Yes it is possible to avoid login to WDK. The best example is DRL component. In one of my project i created a component just like DRL so that users don't have to login to see this component.

I will post the details.

XdctmX

Find the working eg. below....

Code:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>












<config version='1.0'>
   <scope>

      
      <component id="bdrl">

         
         <desc>
            BDRL component: Opens a folder using myobjectlist component
            myobjectlist_component.xml. The object is specified using an folderId,
            tries to do an anonymous login if possible. The login component is
            invoked if necessary.
         </desc>

         <params>
            <param name='folderId' required='true'></param>
         </params>

          <pages>
            <start>/custom/mydrl/drl.jsp</start>
            <logout>/custom/mydrl/logout.jsp</logout>
         </pages>
         <class>com.my.bdrl.MyDRLComponent</class>
         <nlsbundle>com.documentum.web.formext.drl.DRLComponentNlsProp</nlsbundle>

         <defaultaccounts>

            

            
            <filter docbase='webpublisher'>
                <account>
                   <username>rijom</username>
                    <password>b4bcd9e7b7d3e2da918d</password>
                   <domain></domain>
                </account>
            </filter>
            <filter docbase='NTI'>
                <account>
                   <username>rijom</username>
                    <password>b4bcd9e7b7d3e2da918d</password>
                   <domain></domain>
                </account>
            </filter>

            
                <defaultaccount>
                   <username>rijom</username>
                   <password>b4bcd9e7b7d3e2da918d</password>
                   <domain></domain>
                </defaultaccount>
            
         </defaultaccounts>
      </component>
   </scope>
</config>

How to encrypt password?

To use the password encryption tool:

You can encrypt the password for the repository with the trusted
authenticator tool (com.documentum.web.formext.session.TrustedAuthenticatorTool).
This tool uses a Caesar cipher for encryption. You can use your own tool for encryption
as well.

1. From the command line, with com.documentum.web.formext.session.
TrustedAuthenticatorTool and the Java SDK in your classpath, run the following command on a single line. Substitute the actual repository password to be encrypted:

Code:

java -classpath "%CLASSPATH%;T:\app\WEB-INF\classes"
TrustedAuthenticatorTool password

The output will look similar to the following:
Encrypted: [d7d1d6e383d6d4e1d0], Decrypted: [my.pwd6\]

For e.g.

Code:

C:\>java -classpath "\C:\tomcat\webapps\webtop\WEB-INF\classes\;%CLASSPATH%" TrustedAuthenticatorTool APpsmy0*
Encrypted: [b4bcd9e7b7d3e2da918d], Decrypted: [APpsmy0*]

refer to - WDK_53_SP2_Development.pdf Page 105-106 or Search for Trusted Authenticator Tool

/custom/mydrl/drl.jsp

It is same as the drl.jsp of the actual drl component. No Changes.

Code:

<%
//
%>
<%@ page contentType="text/html; charset=UTF-8" %>
<%@ page errorPage="/wdk/errorhandler.jsp" %>
<%@ taglib uri="/WEB-INF/tlds/dmform_1_0.tld" prefix="dmf" %>
<%@ taglib uri="/WEB-INF/tlds/dmformext_1_0.tld" prefix="dmfx" %>
<dmf:html>
<dmf:head>
<dmf:webform/>
<dmf:title><dmf:label nlsid='MSG_TITLE'/></dmf:title>
</dmf:head>
<dmf:body cssclass='contentBackground' topmargin='0' bottommargin='0'
leftmargin='0' rightmargin='0' marginheight='0' marginwidth='0'>
<dmf:form>
<table height='100%' width='100%' align='center' cellspacing='0' cellpadding='0' border='0'>
<tr><td valign='middle'>
<table align='center' cellspacing='0' cellpadding='0' border='0'>
<tr class='contentBorderDark'><td>
<table align='center' cellspacing='1' cellpadding='0' border='0'>
<tr class='contentBackground'><td>
<table width='350' align='center' cellspacing='0' cellpadding='0' border='0'>
<tr align='left'>
<td nowrap valign='middle'>
<dmf:label cssclass='dialogTitle' nlsid='MSG_TITLE'/>:
<dmf:label cssclass='dialogTitle' name='object_name'/>
</td>
</tr>
<tr align='center'>
<td height='3' valign='middle' class="spacer"> </td>
</tr>
<tr><td height='10' class="spacer"> </td></tr>
<dmf:panel name='details'>
<tr><td>
<table cellspacing=3 cellpadding=3 border=0>
<tr>
<td width='32' class='doclistHeader'>
<dmfx:docbaseicon size='32' name="object_icon"/>
</td>
<td>
<table cellspacing=0 cellpadding=0 border=0>
<tr><td>
<b><dmf:label nlsid='MSG_VERSION' /></b>:
<dmf:label name='object_version' />
</td></tr>
<tr><td>
<b><dmf:label nlsid='MSG_FORMAT' /></b>:
<dmfx:docformatvalueformatter>
<dmf:label name='object_format' />
</dmfx:docformatvalueformatter>
</td></tr>
</table>
</td>
</tr>
<tr><td colspan='2'>
<dmf:checkbox name='opencurrent' nlsid='MSG_OPENCURRENT' onclick='onOpenCurrent'/>
</td></tr>
</table>
</td></tr>
</dmf:panel>
<dmf:panel name='error'>
<tr><td>
<table cellspacing=3 cellpadding=3 border=0>
<tr><td>
<dmf:label name="error_message"/>
</td></tr>
</table>
</td></tr>
</dmf:panel>
<tr><td>
<table height='100%' align='right' border='0' cellpadding='2' cellspacing='2'>
<tr>
<td>
<dmf:button name="view" cssclass="buttonLink" nlsid='MSG_VIEW' onclick='onViewClicked'
height='16' imagefolder='images/dialogbutton' tooltipnlsid='MSG_VIEW_TIP'/>
</td>
<td>
<dmf:button name='edit' cssclass='buttonLink' nlsid='MSG_EDIT' onclick='onEditClicked'
height='16' imagefolder='images/dialogbutton' tooltipnlsid='MSG_EDIT_TIP'/>
</td>
<dmfx:clientenvpanel environment='portal' reversevisible='true'>
<td>
<dmf:button name='close' cssclass='buttonLink' nlsid='MSG_CLOSE' onclick='onCloseClicked'
height='16' imagefolder='images/dialogbutton' tooltipnlsid='MSG_CLOSE_TIP'/>
</td>
</dmfx:clientenvpanel>
<td> </td>
</tr>
</table>
</td></tr>
<tr><td height='10' class="spacer"> </td></tr>
<tr align='center'><td valign='middle'> </td></tr>
</td></tr>
</table>
</table>
</td></tr>
</table>
</td></tr>
</table>
</dmf:form>
</dmf:body>
</dmf:html>

/custom/mydrl/logout.jsp

It is same as the drl.jsp of the actual drl component. No Changes.

Code:

MyDRLComponent - this class jumps to myObjectlist component once the anonymous authentication successful.

Code:

package com.my.bdrl;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.documentum.fc.common.DfException;
import com.documentum.fc.common.DfLoginInfo;
import com.documentum.fc.common.IDfLoginInfo;
import com.documentum.web.common.ArgumentList;
import com.documentum.web.formext.component.Component;
import com.documentum.web.formext.config.ConfigService;
import com.documentum.web.formext.config.Context;
import com.documentum.web.formext.config.IConfigElement;
import com.documentum.web.formext.config.IConfigLookup;
import com.documentum.web.formext.session.AuthenticationService;
import com.documentum.web.formext.session.DocbaseUtils;
import com.documentum.web.formext.session.IAuthenticationService;
import com.documentum.web.formext.session.PasswordExpiredException;
import com.documentum.web.formext.session.SessionManagerHttpBinding;
import com.documentum.web.formext.session.TrustedAuthenticatorUtils;

/**
* MyDRLComponent is a Component class created for Myobjectlist component. This class
* gets the folderID Parameter from the URL and gets the repository in
* which the folder resides. It read the configuration file (bdrl_component.xml)
* to get the User Name and encrypted password. It authenticates against
* the folder's repository using the user name and password form the
* config file (bdrl_component.xml)
*
* For Anonymous Login to work we need to make sure that the Component name
* entered in the ...WEB-INF\classes\com\documentum\web\formext\Environment.properties
*
* If you want to call a component without a previous session check, you will
* have to include the component to the above property file within the wdk
* classes directory.
*
* Components that do not need a session or create there own sessions can be declared
* here. Some are already included like the following:
*
* non_docbase_component.1=login
* non_docbase_component.2=changepassword
* non_docbase_component.3=errormessage
* non_docbase_component.4=logoff
* non_docbase_component.5=virtuallinkconnect
*
*
* @author Rijo Mathew
* @version 1.0
* @since 1.0
*/

public class MyDRLComponent extends Component {

   public MyDRLComponent() {
       m_strObjectId = null;
   }

   /**
    * This method accepts ArgumentList as the parameter. It Gets the folderId.
    * Form the folderID it get the repository in which the folder resides.
    *
    * It calls the methods to do anonymous authentication. Finally it passes the
    * ArgumentList to the super class
    *
    * @param ArgumentList
    * @return void
    */

   public void onInit(ArgumentList args) {
      m_strObjectId = args.get("folderId");
      System.out.println("Objectlist Oninit");
      System.out.println(m_strObjectId);
      if(m_strObjectId == null || m_strObjectId.length() == 0)
               throw new IllegalArgumentException("MY DRL requires a folderId.");
      String strRequestedDocbase = DocbaseUtils.getDocbaseNameFromId(m_strObjectId);
      System.out.println("strRequestedDocbase " +strRequestedDocbase);
      if(strRequestedDocbase == null)
        {
            showError("MSG_DOCBROKER_ERROR");
            return;
        }
      SessionManagerHttpBinding.setClientDocbase(strRequestedDocbase);
        if(!isAuthenticated(strRequestedDocbase))
        {
            attemptAnonymousLogin(strRequestedDocbase);
            setComponentJump("myobjectlist", args, getContext());
        }
      super.onInit(args);
   }

   /**
    * This method sets the error messages
    *
    *
    * @param strErrorNlsId - NLS Error Message String
    * @return void
    */

    private void showError(String strErrorNlsId)
       {
           m_showPermissionsErrorMessage = true;
           m_hideControls = true;
           m_strPermissionsErrorMessageNlsId = strErrorNlsId;
       }

       /**
       * This method tries to authenticate with the repository in which the folder resides
       *
       * Accepts Repository Name as parameter
       *
       * It calls the methods to do anonymous authentication. Finally it passes the
       * ArgumentList to the super class
       *
       * @param String strDocbase - name of the Repository
       * @return boolean - returns True if it is authenticated
       */

    public boolean isAuthenticated(String strDocbase)
       {
           boolean bAuthenticated = false;
           System.out.println("isConnectedToDocbase " + SessionManagerHttpBinding.isConnectedToDocbase(strDocbase));
           if(SessionManagerHttpBinding.isConnectedToDocbase(strDocbase))
           {
               bAuthenticated = true;
           } else
           {
               System.out.println("Connecting to Docbase");
              IAuthenticationService authService = AuthenticationService.getService();
              System.out.println("authService" + authService);
               try
               {
                   HttpServletRequest request = (HttpServletRequest)getPageContext().getRequest();
                   HttpServletResponse response = (HttpServletResponse)getPageContext().getResponse();
                   String authDocbase = authService.authenticate(request, response, strDocbase);
                   System.out.println("Docbase Name trying to authenticate strDocbase" + strDocbase);
                   System.out.println("Authenticated - authDocbase" + authDocbase);

                   if(authDocbase != null)
                       bAuthenticated = authDocbase.equals(strDocbase);
               }
               catch(DfException ignore) { }
           }
           System.out.println("Is Authenticated" + bAuthenticated);
           return bAuthenticated;
       }

       /**
       * This method tries to login Anonymously to the repository. if the received
       * object id is Cabinet or folder id then only this method tries to authenticate
       * because MYObjectlist can't take a Document ID as a parameter.
       *
       * @param String strRequestedDocbase - name of the Repository
       * @return void
       */

    private void attemptAnonymousLogin(String strRequestedDocbase)
       {
          System.out.println("attemptAnonymousLogin ");
          boolean bAttemptAnonymousAuthentication = false;
           if(m_strObjectId != null && (m_strObjectId.startsWith("0b")||m_strObjectId.startsWith("0c")))
               bAttemptAnonymousAuthentication = true;
           if(bAttemptAnonymousAuthentication)
           {
               boolean success = authenticateUsingAnonymousAccount(strRequestedDocbase);
               System.out.println("successful authentication ? " + success);
               if(success)
                   getPageContext().getRequest().setAttribute("drlUsingAnonymousAccount", Boolean.TRUE);
           }
       }

       /**
       * This method calls the method to get login information and
       * tries to do anonymous login
       *
       * @param String strRequestedDocbase - name of the Repository
       * @return boolean - returns true if the login successful
       */

    private boolean authenticateUsingAnonymousAccount(String strRequestedDocbase)
       {
           boolean bSuccessfullyAuthenticated = false;
           IDfLoginInfo loginInfo = getAnonymousAccountLoginInfo(strRequestedDocbase);
           if(loginInfo != null)
               try
               {
                  System.out.println("strRequestedDocbase " + strRequestedDocbase);
                  System.out.println("UserName " + loginInfo.getUser());
                  System.out.println("Password " + loginInfo.getPassword());
                  System.out.println("getDomain " + loginInfo.getDomain());
                  AuthenticationService.getService().login(getPageContext().getSession(), strRequestedDocbase, loginInfo.getUser(), loginInfo.getPassword(), loginInfo.getDomain());
                   bSuccessfullyAuthenticated = true;
               }
               catch(PasswordExpiredException ignore)
               {
                   bSuccessfullyAuthenticated = false;
               }
               catch(DfException ignore)
               {
                   bSuccessfullyAuthenticated = false;
               }
           return bSuccessfullyAuthenticated;
       }

       /**
       * This method gets the user name, password and domain name form the
       * bdrl_component.xml and creates a DfLoginInfo.
       *
       * @param String strRequestedDocbase - name of the Repository
       * @return loginInfo - returns login Information
       */

    private IDfLoginInfo getAnonymousAccountLoginInfo(String strRequestedDocbase)
       {
           IDfLoginInfo loginInfo = null;
           IConfigLookup configLookup = ConfigService.getConfigLookup();
           Context ctx = getContext();
           if(strRequestedDocbase != null)
           {
               ctx = new Context(getContext());
               ctx.set("docbase", strRequestedDocbase);
           }
           IConfigElement accInfo = configLookup.lookupElement("component[id=" + getComponentId() + "].defaultaccounts.account", ctx);
           if(accInfo == null)
               accInfo = configLookup.lookupElement("component[id=" + getComponentId() + "].defaultaccounts.defaultaccount", ctx);
           if(accInfo != null)
           {
               String strUserId = accInfo.getChildElement("username").getValue();
               if(strUserId != null)
               {
                   String strPassword = accInfo.getChildElement("password").getValue();
                   String strDomain = accInfo.getChildElement("domain").getValue();
                   loginInfo = new DfLoginInfo();
                   loginInfo.setUser(strUserId);
                   loginInfo.setPassword(TrustedAuthenticatorUtils.decrypt(strPassword));
                   if(strDomain != null && strDomain.length() > 0)
                       loginInfo.setDomain(strDomain);
               }
           }
           return loginInfo;
       }

   private String m_strObjectId;
   private boolean m_showPermissionsErrorMessage;
    private boolean m_hideControls;
    private String m_strPermissionsErrorMessageNlsId;

}

rpdiaz

Thank you very much for your responses

The DRL component example seems very interesting. I'll Try that.

In the other hand, we still have the problem on how to permit 2 way access (1 with login / the other one without login...)

Any idea to solve that would be appreciated

Thank you in advance!!

rpdiaz

The drl component works perfectly!!!

But I have still a problem, when TrustedAuthenticatorUtils tries to decrypt my password it throws this error:

java.lang.NumberFormatException: For input string: "YZ"
at java.lang.NumberFormatException.forInputString(NumberFormatException.java:48)
at java.lang.Integer.parseInt(Integer.java:447)
at com.documentum.web.formext.session.TrustedAuthenticatorUtils.decrypt(TrustedAuthenticatorUtils.java:98)

Anyone knows the cause of that???

Thank you in advance

XdctmX

>> In the other hand, we still have the problem on how to permit 2 way access (1 with login / the other one without login...)

Yes it is possible to have two way access. For e.g The users will be able to access only the DRL component without a login where as all other component will need a login.

XdctmX

How did you encrypt the password? Did you follow teh method i posted? Did you get the result properly after encryption as posted in my 2nd post?

rpdiaz

Yes!!! I have achieved the 2 way access.

The password error has been already solved. The problem was that my wdk.keystore file was in a wrong path so the AuthenticationTool could not decrypt it.

Thank you very much for your help!!

XdctmX

Please mark the correct/helpful answers if any and close the thread...

Francois Dauberlieu

Another way to do would be to have 2 entry pages, one with silent login and one with regular login.

There is an example in the archive (in the overview of this community, bottom left). I actually used it for a customer and now they have 2 hyperlinks in their main intranet portal. One points to the silent login, using a specific username/password that has restricted rights on folders/docs and another one where the contributor can log in and do their job

HTH

Ps: It works fine with for 5.3 up to 6.5 SP2