topic Re: Disable guest account in Alfresco Archive

Disable guest account

exa — Mon, 23 Oct 2006 15:18:01 GMT

Hi,I have a weird issue : when I login for the first time of the day I enter the url to my alfresco and I directly get connected to the GUEST account.I then Deconnect freom that account and I can login from my "real" one.What's really weird is that I have already put the value of "AllowGuestLogin"

Re: Disable guest account

kevinr — Tue, 24 Oct 2006 08:25:46 GMT

Are you using the standard Alfresco authentication, or NTLM?

Can you post the changes you made to the config?

Thanks,

Kevin

Re: Disable guest account

exa — Tue, 24 Oct 2006 09:41:19 GMT

Well I configured Alfresco to do LDAP authentication. That's all.
Which config file do you want me to post ?.

Re: Disable guest account

kevinr — Tue, 24 Oct 2006 13:56:02 GMT

To configure out the Guest login, you need to override the authentication-services config:


    <!– The authentication component.                                      –>

    <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDao" />
        </property>
        <property name="authenticationManager">
            <ref bean="authenticationManager" />
        </property>
        <property name="allowGuestLogin">
            <value>false</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

See the wiki pages on configuring alfresco extensions:
http://wiki.alfresco.com/wiki/Repository_Configuration

Thanks,

Kevin

Re: Disable guest account

exa — Tue, 24 Oct 2006 14:18:36 GMT

Hi Kevin,

I did that already. It's the first I did when installing alfresco.

The I put the LDAP authentication in place. I authenticate via OpenLDAP and that works well

But when people authenticate for the first time they are directly connected, without event given a chance to login. They have to click on the deconnection button in order to get the login screen and then be able to login.

That could be a big issue if alfresco is used a an enterprise CMS.

Do you have a workaround for that ?.

/Exa

Re: Disable guest account

andy — Tue, 24 Oct 2006 15:02:10 GMT

Hi

You need to disallow guest on the ldap auth as this is the one that is used.
If you are chaining you will have to disallow guest access on all.

Something like …


   <bean id="authenticationComponentImpl" class="org.alfresco.repo.security.authentication.ldap.LDAPAuthenticationComponentImpl">
        <property name="LDAPInitialDirContextFactory">
            <ref bean="ldapInitialDirContextFactory"/>
        </property>
        <property name="userNameFormat">
            <!–
            
            This maps between what the user types in and what is passed through to the underlying LDAP authentication.
            
            "%s" - the user id is passed through without modification.
            Used for LDAP authentication such as DIGEST-MD5, anything that is not "simple".
            
            "cn=%s,ou=London,dc=company,dc=com" - If the user types in "Joe Bloggs" the authentricate as "cn=Joe Bloggs,ou=London,dc=company,dc=com" 
            Usually for simple authentication.
            
            –>
            <value>%s</value>
        </property>
       <property name="allowGuestLogin">
            <value>false</value>
        </property> 
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Regards

Andy