Autologoff Webtop through DFC

Hi,

I have a requirement to create the utility to Auto Login into Repository, some business logic and then Auto Logoff.

For Auto Login I have used AuthenticationService and IAuthenticationScheme. This is working fine and I am able to login using

service.login(sess, strRepository, strUsername, strPwd, strDomain); method

But the problem is how to get DfSession after this further, How can I auto logout of the repository using DFC and kill this login session.

Any suggestion would be much helpful.

Thanks & Regards,

Abhinav

Find more posts tagged with

Comments

lastnitescurry

Confused... what are you actually trying to achieve?

Have not played with the AuthenticationService but I would assume that sess is your DfSession object

DCTM_Guru

Maybe if you posted your entire code, we could assist you better. We dont have ESP

Abhinav_Bhatnagar

Thanks Brian and Johnny,

Sorry for sounding so confusing.. Actually I have used the code of webtop devlopment guide below -

import java.util.ResourceBundle;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import com.documentum.fc.common.DfException;

import com.documentum.fc.common.DfLogger;

import com.documentum.web.common.ArgumentList;

import com.documentum.web.formext.session.AuthenticationService;

import com.documentum.web.formext.session.IAuthenticationScheme;

import com.documentum.web.formext.session.IAuthenticationService;

public class AutoLoginScheme implements IAuthenticationScheme

{

public String authenticate(HttpServletRequest request,

HttpServletResponse response, String docbase) throws DfException

{

System.out.println("In AutoLoginScheme");

ResourceBundle bundle = ResourceBundle.getBundle("

com.mycompany.session.AutoLogin");

if (bundle != null)

{

String strRepository = bundle.getString("repository");

System.out.println("repository in properties file: " + strRepository);

String strUsername = bundle.getString("username");

System.out.println("username in properties file: " + strUsername);

String strPwd = bundle.getString("pwd");

String strDomain = bundle.getString("domain");

System.out.println("domain in properties file: " + strDomain);

IAuthenticationService service = AuthenticationService.getService();

HttpSession sess = request.getSession();

if (sess != null)

{

System.out.println("obtained session");

service.login(sess, strRepository, strUsername, strPwd, strDomain);

System.out.println("Returned from service.login");

return strRepository;

}

else

{

DfLogger.debug(this, "HTTP session was null", null, null);

return null;

}

else

{

DfLogger.debug(this, "ResourceBundle was null", null, null);

return null;

}

public String getLoginComponent(HttpServletRequest request,

HttpServletResponse response, String docbase, ArgumentList outArgs)

{

return null;

}

Brian: According to above code I guess the sess variable above is Http Session and not dfsession. Please suggest

Also, the above code allow me to get login in to repository, but I want to disconnect above session after use. There is no method in authentication API to allow me to logout this current session.

I hope I made myself clear. Thanks again for the help

Regards,

Abhinav

aflowers001

Just out of curiosity, but what business logic is being carried out that requires the use of webtop with auto login? could it not be done as a standard DFC application?

DCTM_Guru

"Also, the above code allow me to get login in to repository, but I want to disconnect above session after use."

- How do you define when the "use" is completed? The inherent problem with disconnecting a session is that unless you specifically click on the logout button, webtop is going to keep the session open from performance/caching perspective. This allows to not have to reestablish a session if you accidentally close the browser.

lastnitescurry

take a read of this, espically page 7

http://developer.emc.com/developer/devcenters/ContentManagement/devsupp/WDK_Authentication_Session_Management.pdf

You'll get your session using the getDfSession method in a WDK component class

lastnitescurry

and to echo Andy and myself {what are you actually trying to achieve?}...

what is the business requirement, because this sounds like a really stupid way to approach a problem?

Abhinav_Bhatnagar

Hi,

There is nothing much to explain though . Functionality is to authenticate the session using silent login for admin user. Admin user account will auto perform some batch tasks and It should auto logout. This is kind of POC I am doing before implementing actual business logic which is little vague at this moment. So, as to know if auto login an logout can be achieved or not.

I found a partial answer though. I have redirected the component JSP to dologout.jsp which inturn perform the Logout operation for me but catch is HTTP sessions at tomcat end are still persisting. I will let know if I find something.

Thanks for all the support and help..

Regards,

Abhinav

Abhinav_Bhatnagar

Just to confirm is silent login is really stupid way of authenticating as I thought, it is one of the recommended procedures available in wdk dev guide. May be their are some flaws in it or should not be used for intended purpose, if you can explain better approach.

Regards,

Abhinav

lastnitescurry

There is nothing much to explain though . Functionality is to authenticate the session using silent login for admin user. Admin user account will auto perform some batch tasks and It should auto logout. This is kind of POC I am doing before implementing actual business logic which is little vague at this moment. So, as to know if auto login an logout can be achieved or not.

if you can explain better approach.

Sane folks would create a method to do admin tasks and a job to schedule it.

Abhinav_Bhatnagar

and what would Sane folks use silent login for, what is its purpose? As I come to know that this URL will be hit by load balancer to autologin and check if application is responding to requests or not, to divert the traffic if not. I guess you can suggest me some better approach for this. Thanks in advance..

lastnitescurry

Abhinav_Bhatnagar wrote:and what would Sane folks use silent login for, what is its purpose? As I come to know that this URL will be hit by load balancer to autologin and check if application is responding to requests or not, to divert the traffic if not. I guess you can suggest me some better approach for this. Thanks in advance..

Never used silent login, but at a guess I would say it is for developing SSO schemes.

The simplest check that a WDK app is working is to check if file version.properties can be feteched. It is in the root of all WDK apps.

Have not done more complex load balancing checks.......... you could write a simple jsp page to count & return the number of active sessions in use on the current server (see LIST_SESSIONS)

DFC session load balancing can be managed with Docbrokers. That is one of their fuctions.

The Content Server Admin guide has a section on High Availability scripts, but they are to check that the CS repositories and components (JMS, ...) are up

DCTM_Guru

"Functionality is to authenticate the session using silent login for admin user. Admin user account will auto perform some batch tasks and It should auto logout."

- "Auto-perform?" If you are trying to execute things in the background, you should be writing a server method/job. Customizing UI doesnt make sense to me for this use case.