Skip to content
Issa Gorissen edited this page Sep 29, 2025 · 32 revisions

Welcome to Nexus-crowd-plugin.

This fork is to keep an up to date version of the nexus-crowd-plugin. With so many updates both on the nexus and crowd front, it's hard to keep track! And those two awesome products work so well together....

Setup

Usage for Nexus 3.x

Prerequisite: Maven must be installed on the system in order to proceed (useful for Docker containers)

  1. Add a nexus application to Crowd with a SECRET secret

  2. Look into the file bin/nexus.vmoptions to locate the value of parameter karaf.etc

  3. Create a file called crowd-plugin.properties under <karaf.etc> folder

    applicationName=nexus
    applicationPassword=SECRET
    crowdServerUrl=http://host:port/crowd/
    

    You can also use the following properties

    • cacheTTL (value is seconds; default value is 3600 seconds)
    • httpMaxConnections (default value is 20)
    • httpTimeout (value in milliseconds; default value is 5000msecs)
    • httpProxyHost
    • httpProxyPort
    • httpProxyUsername
    • httpProxyPassword
  4. if deploying on Nexus under 3.81.x

    1. Copy the bundle under NEXUS_HOME/system/com/roumanoff/nexus/nexus-crowd-plugin/<version>/nexus-crowd-plugin-<version>.jar
    2. Modify the file <karaf.etc>/startup.properties, add the new line mvn\:com.roumanoff.nexus/nexus-crowd-plugin/<version> = 200
  5. if deploying on Nexus >= 3.81.x

    1. Inject the JAR nexus-crowd-plugin-<version>.jar into the Nexus Repository JAR found in the /bin/ folder.
      Store the plugin JAR inside the Nexus JAR at location /BOOT-INF/lib/
  6. Start Nexus and use the Administration->Security->Realms page to add OSS Crowd Authentication Realm to the list of active realms (at the bottom so you can still use the admin account stored in Nexus DB for which you have changed the password, right ?).

Usage for Nexus < 3.0

  1. Add a nexus application to Crowd with a SECRET secret

  2. Create a file called crowd-plugin.xml under sonatype-work/nexus/conf

    <?xml version="1.0" encoding="UTF-8"?>
    <crowdConfiguration>
      <crowdServerUrl>http://host:port/crowd/</crowdServerUrl>
      <applicationName>nexus</applicationName>
      <applicationPassword>SECRET</applicationPassword>
    </crowdConfiguration>
    
  3. unzip the bundle under sonatype-work/nexus/plugin-repository

  4. Start Nexus and use the Administration->Server panel to add OSS Crowd Authentication Realm to the list of active realms.

Plugin Download

Watch out for the confusing version numbers, version 2.7.0 is for nexus 2.7 and version 2.0.7 is for nexus before 2.7.

Plan for next iterations

  • enable a group filter
  • provide a configuration UI
  • enable Single Sign On (SSO)

Authors and Contributors

@PatrickRoumanoff and @flopma based on initial work by @justinedelson from @sonatype