Introduce weak authentication

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / internal / kernel / FirstInit.java

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/kernel/FirstInit.java b/org.argeo.cms/src/org/argeo/cms/internal/kernel/FirstInit.java
index a8ef66a90813979e5604915939565b2610835ffa..78eb68289647de357e15ac70c8a1df8aeef0696e 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/internal/kernel/FirstInit.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/kernel/FirstInit.java
@@ -22,6 +22,7 @@ import org.apache.commons.io.FileUtils;
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
 import org.argeo.cms.CmsException;
+import org.argeo.cms.internal.jcr.RepoConf;
 import org.argeo.node.NodeConstants;
 import org.argeo.osgi.useradmin.UserAdminConf;
 import org.eclipse.equinox.http.jetty.JettyConstants;
@@ -114,10 +115,6 @@ class FirstInit {
                // Business roles
                String userAdminUris = getFrameworkProp(NodeConstants.USERADMIN_URIS);
                if (userAdminUris == null) {
-                       String kerberosDomain = Activator.getCmsSecurity().getKerberosDomain();
-                       if (kerberosDomain != null) {
-                               userAdminUris = "ipa:///" + kerberosDomain;
-                       } else {
                                String demoBaseDn = "dc=example,dc=com";
                                File businessRolesFile = new File(nodeBaseDir, demoBaseDn + ".ldif");
                                if (!businessRolesFile.exists())
@@ -130,7 +127,6 @@ class FirstInit {
                                userAdminUris = businessRolesFile.toURI().toString();
                                log.warn("## DEV Using dummy base DN " + demoBaseDn);
                                // TODO downgrade security level
-                       }
                }
                for (String userAdminUri : userAdminUris.split(" "))
                        uris.add(userAdminUri);
@@ -162,7 +158,7 @@ class FirstInit {
 
                return res;
        }
-
+       
        /**
         * Called before node initialisation, in order populate OSGi instance are
         * with some files (typically LDIF, etc).