Extension point domains

In component org.nuxeo.runtime.LoginComponent

Documentation

Enable clients to register new security domains in the application

There are 2 predefined security domains that clients may define:

The nuxeo-client-login -
The nuxeo-system-login - used to log in programmatically as the system user

By default these domains are not defined. If you need a system login and/or a client login you should contribute the domains defining the login modules to be used.

Contribution Descriptors

Class: org.nuxeo.runtime.api.login.SecurityDomain

Existing Contributions

Contributions are presented in the same order as the registration order on this extension point. This order is displayed before the contribution name, in brackets.

<?xml version='1.0' encoding='UTF-8'?>
<extension point="domains" target="org.nuxeo.runtime.LoginComponent">

	  <domain name="nuxeo-system-login">
	    <login-module code="org.nuxeo.runtime.api.login.SystemLoginModule" flag="required"/>
      <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
        <option name="password-stacking">********</option>
			  <option name="multi-threaded">true</option>
  	  </login-module>
	  </domain>

    <domain name="nuxeo-client-login">
      <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
        <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
        <option name="useUserIdentificationInfoCB">true</option>
      </login-module>
      <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
        <option name="password-stacking">********</option>
        <option name="restore-login-identity">true</option>
        <option name="multi-threaded">true</option>
      </login-module>
	  </domain>


  	<domain name="nuxeo-webengine">
	    <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
              <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
              <option name="useUserIdentificationInfoCB">true</option>
      </login-module>
      <!--login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
        <option name="password-stacking">true</option>
        <option name="multi-threaded">true</option>
      </login-module-->
    </domain>

  </extension>

(0) nuxeo-runtime-10.10-HF33-patch-NXP-29565.jar/opt/nuxeo-server-10.10-tomcat/nxserver/config/login-config.xml Override

<?xml version='1.0' encoding='UTF-8'?>
<extension point="domains" target="org.nuxeo.runtime.LoginComponent">
    <domain name="nuxeo-ecm-web">
      <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
        <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
        <option name="useUserIdentificationInfoCB">true</option>
      </login-module>
      <login-module code="org.nuxeo.ecm.core.api.local.ClientLoginModule" flag="required">
        <option name="password-stacking">********</option>
        <option name="restore-login-identity">true</option>
        <option name="multi-threaded">true</option>
      </login-module>
    </domain>

    <domain name="nuxeo-ecm">
      <login-module code="org.nuxeo.ecm.platform.login.NuxeoLoginModule" flag="required">
        <option name="principalClassName">org.nuxeo.ecm.platform.login.NuxeoPrincipal</option>
        <option name="useUserIdentificationInfoCB">true</option>
      </login-module>
    </domain>
  </extension>

(1) nuxeo-platform-login-10.10.jar/OSGI-INF/default-loginConfig.xml Override