Subsystem documentation / consistency fixes

This commit is contained in:
AFaust
2020-10-21 19:04:26 +02:00
parent a31309296a
commit 4ad55b7a77
5 changed files with 196 additions and 25 deletions

View File

@@ -79,7 +79,7 @@ The Keycloak authentication subsystem is enabled by putting a single instance of
authentication.chain=alfrescoNtlm1:alfrescoNtlm,keycloak1:keycloak
```
in the `alfresco-global.properties` file, or via other supported means of configuration (e.g. -D flags in `JAVA_OPTS` in Docker-based deployments). Since it rarely (if ever) makes sense to have more than one instance of the Keycloak authentication subsystem in the chain, all configuration properties specific for this type of subsystem can also be set in the `alfresco-global.properties` file, though it is generally recommended (Acosix recommendation, not necessarily documented as such by Alfresco) to use the proper subsystem configuration paths. For the above authentication chain, custom configuration properties files can be place in the configuration path `alfresco/extension/subsystems/Authentication/keycloak/keycloak1/*.properties`.
in the `alfresco-global.properties` file, or via other supported means of configuration (e.g. -D flags in `JAVA_OPTS` in Docker-based deployments). Since it rarely (if ever) makes sense to have more than one instance of the Keycloak authentication subsystem in the chain, all configuration properties specific for this type of subsystem can also be set in the `alfresco-global.properties` file, though it is generally recommended (Acosix recommendation, not necessarily documented as such by Alfresco) to use the proper subsystem configuration paths. For the above authentication chain, custom configuration properties files can be placed in the configuration path `alfresco/extension/subsystems/Authentication/keycloak/keycloak1/*.properties`.
The following core configuration properties can be set (more extensive list in the [reference](./Reference-Repository-Subsystem.md)), with only the `keycloak.adapter.auth-server-url`, `...realm`, `...resource`, and `...credentials.secret` being absolutely required for a minimal configuration (Note: whenever `...` is used as a prefix, it refers to the prefix of the previous full-length property):