Best practice for disabling anonymous access

[jobjob]

Hi,

I'am looking for the best (simple) way to disable all anonymous access (for example https://xxxx/service/index) on an alfresco 3.2 server installed on tomcat.
Is there a simple way to do this (by simple i mean without using an apache front-end or things like that) ?

Any ideas or pointers are welcome …

Jeff

[norgan]

Does ht.access work ?

[jobjob]

Hi,

Does ht.access work ?

I can, but i would prefer a "tomcat only" solution (i.e. without apache, and without need to reauthenticate).

Perhaps i can add something like this in server.xml file

   <filter-mapping>
      <filter-name>Global Authentication Filter</filter-name>
      <url-pattern>/*</url-pattern>
   </filter-mapping>
‍‍‍‍‍‍

However
1) I don't know the impact on url-pattern that using other mapping (for example "/wcs/*" is using "WebScript Authentication Filter")

2) I suppose there is a cleaner solution (i.e. more integrated in alfresco's frameworks) but i didn't found it (i'am not a Spring/Struts/Java guru) …

Regards,

Jeff

[dward]

Have you tried

alfresco.authentication.allowGuestLogin=false

?

[jobjob]

Hi,

Have you tried

alfresco.authentication.allowGuestLogin=false

?

Yes, but this option disable only the guest access to (for example) alfresco web client.
Some url (like http:/xxxxx/alfresco/service/index) are always available and it's possible to for example to browse the web script repository which contain home made scripts.

Jeff

[pmisra]

yes, putting the following line into the alfresco-global.properties enables anonymous access to the content. It works great, Thanks!!!

alfresco.authentication.allowGuestLogin=true‍