topic Re: Best practice for disabling anonymous access in Alfresco Archive

Best practice for disabling anonymous access

jobjob — Sat, 19 Sep 2009 11:40:37 GMT

Hi,I'am looking for the best (simple) way to disable all anonymous access (for example https://xxxx/service/index) on an alfresco 3.2 server installed on tomcat.Is there a simple way to do this (by simple i mean without using an apache front-end or things like that) ?Any ideas or pointers are welcom

Re: Best practice for disabling anonymous access

norgan — Sun, 20 Sep 2009 20:44:39 GMT

Does ht.access work ?

Re: Best practice for disabling anonymous access

jobjob — Mon, 21 Sep 2009 10:55:11 GMT

Hi,

Does ht.access work ?

I can, but i would prefer a "tomcat only" solution (i.e. without apache, and without need to reauthenticate).

Perhaps i can add something like this in server.xml file


   <filter-mapping>
      <filter-name>Global Authentication Filter</filter-name>
      <url-pattern>/*</url-pattern>
   </filter-mapping>
‍‍‍‍‍‍

However
1) I don't know the impact on url-pattern that using other mapping (for example "/wcs/*" is using "WebScript Authentication Filter")

2) I suppose there is a cleaner solution (i.e. more integrated in alfresco's frameworks) but i didn't found it (i'am not a Spring/Struts/Java guru) …

Regards,

Jeff

Re: Best practice for disabling anonymous access

dward — Mon, 21 Sep 2009 11:32:19 GMT

Have you tried

alfresco.authentication.allowGuestLogin=false

?

Re: Best practice for disabling anonymous access

jobjob — Tue, 22 Sep 2009 09:06:21 GMT

Hi,

Have you tried

alfresco.authentication.allowGuestLogin=false

?

Yes, but this option disable only the guest access to (for example) alfresco web client.
Some url (like http:/xxxxx/alfresco/service/index) are always available and it's possible to for example to browse the web script repository which contain home made scripts.

Jeff

Re: Best practice for disabling anonymous access

pmisra — Tue, 29 Sep 2009 12:57:18 GMT

yes, putting the following line into the alfresco-global.properties enables anonymous access to the content. It works great, Thanks!!!

alfresco.authentication.allowGuestLogin=true‍