Disable guest access

[simon]

Alfresco,

I found the following in the file-servers-custom.xml file, this seems to ENABLE guest access. I wanted to DISABLE the guest login. What is the recomended method to do this (in Alfresco Enterprise 2.1.1)?

   <config evaluator="string-compare" condition="Filesystem Security">
      <authenticator type="alfresco">
         <allowGuest/>
         <!– Map any unknown user to guest –>
         <!–
         <mapUnknownUserToGuest/>
         –>
      </authenticator>
   </config>‍‍‍‍‍‍‍‍‍

1. Remove the authenticator in this file?
2. Change the <allowGuest/> to something like <disallowGuest/>?
3. Change the option in the authenticationComponent in the authentication-services-context.xml file?

I tried a few of these but the last one seems the only one that works. That's fine for me but does that mean the one in the file-servers-custom.xml is obsolete?

[mabayona]

http://forums.alfresco.com/viewtopic.php?t=1096

[simon]

Thanks mbayona but I know how to disable guest access, I was only wondering what the file-servers-custom.xml configuration is used for. Why are there 2 configuration parameters for the same thing?

[andy]

Hi

There is one for normal authentication and one for access via CIFS and the like. CIFS may go a different route than alfresco authentication. It should be configured from a single property. CIFS may also map unknown users to guest (if I recall correctly). You could raise this as an enhancement.

Andy

[simon]

Thanks Andy, I will add this to JIRA so that it may be improved in one of the next releases.

So, how do I disable the component today? I disabled guest access in the authentication-services-context.xml file but if I understand you correctly I will also need to disable the file-servers-custom.xml? And if so, how? Removing the config component completely?

[andy]

Hi

It depends …. as you are using the alfresco authentication option then guest access will be set according to the authentication component settings. If you used passthru it would have its own settings in addition to the authentication component.

Andy

[g_rathod]

friends,

I made following changes:
authentication-services-context.xml

 <bean id="authenticationComponentNormal" class="org.alfresco.repo.security.authentication.AuthenticationComponentImpl">
        <property name="authenticationDao">
            <ref bean="authenticationDao" />
        </property>
        <property name="authenticationManager">
            <ref bean="authenticationManager" />
        </property>
        <property name="allowGuestLogin">
            <value>false</value>
        </property>
    </bean>
‍‍‍‍‍‍‍‍‍‍‍‍‍

after that I restarted server and checked again with guest/guest
it works…

Any solution ?

I think this is the bug of alfresco……