Access Keys:
Skip to content (Access Key - 0)

Soulwing CAS

Soulwing CAS Documentation

Guide to Enable webSSO for OpenClinica

Background

The goal is to enable OpenClinica to participate in single sign-on with the CCTS suite, while preserving the authorization/permissions that are configured in OpenClinica.

Usage

Users must be entered in the GAARDS utility, the grid identity must be entered in the OpenClinica database, and corresponding roles assigned to the grid identity.

Prerequisites

  1. A working CCTS installation.
  2. A working OpenClinica installation.

Build Steps

  1. JDK 1.5 or greater, ant 1.6.x or greater installed. A working OpenClinica installation
  2. Download soulwing cas client v 0.5.3.
  3. Unzip soulwing websso package to <SW-WEBSSO>.
  4. Copy the following dependencies from soulwing cas client into <SW-WEBSSO>/lib: catalina.jar, commons-logging.jar, servlet-api.jar, soulwing-casclient-0.5.3.jar, soulwing-casclient-tomcat-ext-0.5.3.jar
  5. Run the following command to build: ant dist.

Configuring the OpenClinica

Configuration steps:

  1. Generate the certificate and key for the OpenClinica server with the GAARDS utility, refer to the CCTS 1.1 installation guide.
  2. Generate the webSSO keystore, refer to the CCTS 1.1 installation guide.
  3. Enable the OpenClinica tomcat container for SSL:
    1. Add an entry similar to Appendix A to the <CATALINA_HOME>/conf/server.xml, refer to the tomcat SSL documentation for more information.
    2. Perform step 7 "Establish trust with WebSSO CAS Server" of the webSSO developers guide which can be found at WebSSO 1.2. Developers Guide.
  4. Follow soulwing client directions at http://www.soulwing.org/tomcat-cas.jsp with the following modifications, and remember to change the login-config entry in the web.xml to <auth-method>CAS</auth-method>
    1. In the "Install library JAR files" sections, add the following jar copies:
      1. uams-soulwing-casclient.jar to <CATALINA_HOME>/common/lib
      2. uams-soulwing-websso-casclient-tomcat-ext.jar to <CATALINA_HOME>/server/lib
    2. In the "Augment Tomcat's default authenticators" section replace CAS=org.soulwing.cas.apps.tomcat.CasAuthenticator with CAS=edu.uams.soulwing.cas.apps.tomcat.CasAuthenticator
      1. In the "Configure a resource Valve" section, the entry should be as in Appendix B
  5. Add the servlet entry listed in Appendix C to the OpenClinica web.xml
  6. The grid ID an their role assignments must be added to the OpenClinica web.xml

Appendix A

SSL ENTRY FOR <CATALINA_HOME>/CONF/SERVER.XML:

Below is the section in the file called server.xml that configures tomcat for SSL. This file it located in CATALINA_HOME/conf directory

<!-- Define a SSL Coyote HTTP/1.1 Connector on relevant port -->

<Connector port="8443" maxHttpHeaderSize="8192"
                       maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
	               enableLookups="false" disableUploadTimeout="true"
	               acceptCount="100" debug="0" scheme="https" secure="true"
	               clientAuth="false" sslProtocol="TLS"
keystoreFile="C:\yourkeystoredirectory\webSSOKeystore"
keystorePass="webSSOkeystorePasswd"  />

Appendix B

SOULWING VALVE ENTRY

The soulwing instructions for the valve entry are slightly incorrect - below is the correct entry. This entry is in server.xml located in CATALINA_HOME/conf directory

<Valve className="org.soulwing.cas.apps.tomcat.ResourceValve"
	      config="CasProtocolConfiguration"
	      authenticatorClass="org.soulwing.cas.filter.ServiceValidationAuthenticator" />

Appendix C

SERVLET ENTRY IN OPENCLINICA WEB APP

<servlet>
        <servlet-name>HostNameCheckDisablingServlet</servlet-name>
        <display-name>HostNameCheckDisablingServlet</display-name>
        <description>Address host name check issue</description>
        <servlet-class>edu.uams.soulwing.cas.client.HostNameCheckDisablingServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>

Relevant Documents

Further information about can be found at;
Last edited by
Ildeniz Yayla (967 days ago) , ...
Adaptavist Theme Builder Powered by Atlassian Confluence