Anonymous access to KM in 2004s SPS07

Hi experts,
I have setup an External Facing Portal on 2004s SPS07, but the anonymous user needs to be authenticated when accessing XML forms documents. The XML forms documents are indeed shown through KM navigation iViews. Images from KM are also not shown; HTML documents in KM however are.
I think something has changed in 2004s, because according to note 837898, the only thing that needs to be changed is setting the AuthScheme property for the iViews in Standard Portal Role to Anonymous. I have done this step, but it won't get through. I get several error messages in the default.trc which say:
Regarding Anonymous access to Standard Portal Role:
com.sapportals.portal.prt.runtime.PortalRuntimeException: Access is denied:
pcd:portal_content/every_user/general/eu_role/com.sap.km.home_ws/com.sap.km.hidden/com.sap.km.urlaccess/com.sap.km.docs - user: visitor
Regarding editing the Standard Portal Role:
[com.sapportals.portal.pcd.admintools.roleeditor.RoleEditorCompContextHandler] Ex.msg:null [EXCEPTION] #1#java.lang.NullPointerException
com.sap.security.api.NoSuchRoleException: Principal set ROLE.PCD_ROLE_PERSISTENCE.aLs3DpIRt8wxUeWRnJ+poSMWUUE= doesn't exist!
Regarding XML forms:
Exception getting currently running XMLForm Module version.
java.lang.IllegalStateException: No transaction at com.adobe.service.J2EEConnectionFactoryManagerPeerImpl.getConnection(J2EEConnectionFactoryManagerPeerImpl.java:70)
When looking in the com.sap.km.cm.par file AuthScheme property for components docs, navigation, xmlformspreview, et cetera, is still set to basic authentication.
Does anybody know what goes wrong and how to solve this? Thanks a lot in advance!
Kind regards,
Hilco Broens

Hi Stefan,
In this version (2004s SPS07) I don't need to change the settings in the URL generator service, since they all point to irj/go/km/docs.
Accessing documents (HTML, XML) directly through a KM doc iView is succesfull, however when opened from a link within a KM nav iView or KM search iView it won't work:
- opening a link like irj/go/km/docs/.../doc.ext results in an access denied error:
Access denied (Object: portal_content/every_user/general/eu_role/com.sap.km.home_ws/com.sap.km.hidden/com.sap.km.urlaccess/com.sap.km.docs).
- opening a link like /irj/servlet/prt/portal/prtroot/com.sap.km.cm.xmlformpreview?XMLFormID=id&show=/repository/.../id.xml results in the authentication form.
Note: images in this repository are never shown!
Concerning your second idea, in com.sap.km.cm in application-config there is a property:
<property name="SecurityArea" value="NetWeaver.KMC" />
In component-config for all related components:
<property name="SafetyLevel" value="low_safety" />
The problem still remains in the fact that I cannot change the AuthScheme property to Anonymous for Standard Portal Role iViews properly. I figure this will change the <property name="AuthScheme" value="basicauthentication" /> in com.sap.km.cm to Anonymous.
Any other ideas?
Kind regards,
Hilco

Similar Messages

Login to Portal without credentials - Anonymous access

All,
We have a requirement to provide anonymous access to all the LDAP users in portal for accessing KM documents.
Can somebody explain me if it is possible to give access to all the users without using credentials in portal ? Thanks!

SAP Note - 837898: How to set up anonymous logon for KM

Anonymous access to Portal Component over direct URL.

Hi All,
Im having a few Issues with enabling anonymous access to a portal component.
Here is a mock of our portalapp.xml file
<?xml version="1.0" encoding="iso-8859-1"?>
<application>
<application-config>
    <property name="SharingReference" value="usermanagement, knowledgemanagement, landscape, htmlb, exportalJCOclient, exportal"/>
    <property name="startup" value="true"/>
    <property name="releasable" value="true"/>
    <property name="Vendor" value="com.ourdomain"/>
    <property name="SecurityArea" value="OurSecurityArea"/> -->
</application-config>
<components>
    <component name="MyComponent">
      <component-config>
        <property name="ClassName" value="com.ourdomain.MyClass"/>
        <property name="ComponentType" value="servlet"/>
        <property name="SafetyLevel" value="no_safety"/>
      </component-config>
      <component-profile/>
    </component>
</components>
<services/>
</application>
I want to be able to access the servlet over a URL like...
http://host:port/irj/servlet/prt/portal/prtroot/MyApp.MyComponent
I have added the Default User Group Everyone to the no_safety area of our com.ourDomain Security Zone.
However when try to navigate to the URL we are first faced with a SAP Portal login page. on successful login the servlet is then shown.
Note: I was able to get the Same Servlet working within an iView when the iViews Authentification Scheme was set to anonymous...However i am under instruction to get it working without the iView...
As Background, The servlet is to be a sink for accepting data sent via an HTTP Post.
Any help with this or pointers in the right direction would be greatly appreciated.
-Paul

Hi Darrell,
Thankyou for that, yes it has helped....And I can now access the servlet directly without need to login.
I figured that there was something that i was missing.....
-Paul

Anonymous Access Sharepoint Foundation 2013

Is it possible to allow anonymous access in Sharepoint Foundation 2013? I've enabled anonymous access at the site level as well as via central administration but users are still prompted for login when browsing to the site anonymously. I'm
more curious if this is an issue with the Foundation version specifically at this point. Thanks.

Hi mtrosper,
Please disable anonymous access via the UI, then enable it using PowerShell, compare the result.
You can use the following PowerShell command to enable it:
$webApp = Get-SPWebApplication 'http://someurl:9999'
$webApp.IisSettings['Default'].AllowAnonymous=$false
$webApp.update()
More information, you can refer to the link:
http://sharepoint.stackexchange.com/questions/74487/how-to-disable-anonymous-access-for-sharepoint-webapplication-with-powershell
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Reporting Services 2008 - Anonymous Access

Hello,
In SSRS 2005 I was able to grant anonymous access to my reports by changing the authentication mode for the Reporting Services virtual directory in IIS to Anonymous and then adding the 'account used for anonymous access' to the permissions on the appropriate Reporting Services directories (in report manager).
Now with SSRS 2008 there are no virtual directories in IIS.
I tried to follow the instructions given:
http://technet.microsoft.com/en-us/library/cc281310.aspx (Authentication Types in Reporting Services)
Which instructed me to use the custom AuthenticationType, and following the instructions here:
http://technet.microsoft.com/en-us/library/cc281383.aspx (How to: Configure Custom or Forms Authentication in Reporting Services)
which just got me an error:
The Authentication Extension threw an unexpected exception or returned a value that is not valid: . (rsAuthenticationExtensionError) Get Online Help
For more information about this error navigate to the report server on the local server machine, or enable remote errors
Any ideas on how to set up anonymous access to SSRS2008?
Thanks for any time and help!
-Tim

JC,
I check the solution on net and get following:
First create a class called ReportServerCredentials that implements the IReportServerCredentials interface. You will need to import System.Net and Microsoft.Reporting.WebForms to this class. Overload the New and GetFormsCredentials methods and the NetworkCredentials and ImpersonationUser properties. Here's a class that I use:
Imports Microsoft.VisualBasic
Imports Microsoft.Reporting.WebForms
Imports System.Net
Public Class ReportServerCredentials
    Implements IReportServerCredentials
    Private _userName As String
    Private _password As String
    Private _domain As String
    Public Sub New(ByVal userName As String, ByVal password As String, ByVal domain As String)
        _userName = userName
        _password = password
        _domain = domain
    End Sub
    Public ReadOnly Property ImpersonationUser() As System.Security.Principal.WindowsIdentity Implements Microsoft.Reporting.WebForms.IReportServerCredentials.ImpersonationUser
        Get
            Return Nothing
        End Get
    End Property
    Public ReadOnly Property NetworkCredentials() As ICredentials Implements Microsoft.Reporting.WebForms.IReportServerCredentials.NetworkCredentials
        Get
            Return New NetworkCredential(_userName, _password, _domain)
        End Get
    End Property
    Public Function GetFormsCredentials(ByRef authCookie As System.Net.Cookie, ByRef userName As String, ByRef password As String, ByRef authority As String) As Boolean Implements Microsoft.Reporting.WebForms.IReportServerCredentials.GetFormsCredentials
        userName = _userName
        password = _password
        authority = _domain
        Return Nothing
    End Function
End Class
Next, in the OnLoad of your page with the ReportViewer control, create a new instance of your ReportServerCredentials (I use values stored in AppSettings). Then assign your object to the ReportViewer control's ServerReport.ReportServerCredentials property.
Dim cred As New ReportServerCredentials(ConfigurationManager.AppSettings("MyStoredUser"),_
    ConfigurationManager.AppSettings("MyStoredPassword"), _
    ConfigurationManager.AppSettings("MyStoredDomain"))
    MyReportViewerControl.ServerReport.ReportServerCredentials = cred
I try it but get following error
Compiler Error Message: BC30002: Type 'IReportServerCredentials' is not defined.
Do you think it is a possible way for Reporting Service 2008? if yes, what lead to the error? thanks in advance.

Anonymous access to list on public site (Sharepoint Online)

Hi,
I have created a Contact Us custom list for our public web site and could assign "Add items" and "View items" permissions for the Anonymous user (by using the 3rd party WSP365
Anonymous 2013 sandbox solution). This is clearly shown in the Permissions of this list.
Now I'm trying to access this list through the REST API and the $.ajax function (jQuery). Assuming the list is called "ContactUs", I should be able to read and write to this list through
http://contoso-public.sharepoint.com/_api/web/lists/GetByTitle('ContactUs')/items
1st problem: When I try to access this list, I get a login popup asking me to log into prodnet47-48ipv4a.sharepointonline.com.akadns.net (same on IE11 and Chrome)
Accessing directly the link above returns the following error (although I'm not sure it is meant to be accessed like that):
<m:error xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata"><m:code>-2147024891,
System.UnauthorizedAccessException</m:code><m:message xml:lang="en-US">Access
denied. You do not have permission to perform this action or access this resource.</m:message></m:error>
2nd problem: When I use _spPageContextInfo.webAbsoluteUrl +"/_api/web/lists/GetByTitle('ContactUs')/items to programatically get the base domain, the url returned is
http://contoso-public.sharepoint.com/undefined/_api/web/lists/GetByTitle('ContactUs')/items
Any help welcome.
Thanks in advance

I read that anonymous access is unsupported in 2010 and didn't find improvements in 2013. Alternative route is to create service account with minimal read permission and use this account to communicate with REST.
http://allthatjs.com/2012/07/20/limitations-of-sharepoint-listdata-svc/
Bala

Enable anonymous access for Javascript Client Object Model

In SharePoint 2010 it was possible to use the Javascript Client Object Model with anonymous access enabled by removing "GetItems" from the ClientCallableSettings.AnonymousRestrictedTypes.
In SharePoint 2013 however, it seems that an extra security barrier has been implemented. Trying to use the Javascript Client Object Model results in the following message: "Access denied. You do not have permission to perform this action or access this
resource."
After this I went on to do a little research, and it appears that Javascript Client Object Model actually relies on the REST API (please correct me if I'm mistaken), and the REST API also doesn't seem to work as an anonymous user.
So I'm in the dark here. I can't imagine that SharePoint 2013 (so heavily relying on the client object model) can't be used with anonymous access. I've also found very little documentation on anonymous access in combination with SharePoint 2013.
So, how do I enable the Javascript Client Object Model to be used with anonymous access enabled?
P.S. Needless to say, my web application is enabled for anonymous access and so is my site collection.

There are really 4 things you need to do to enable anonymous access:
1. In web application level, enable anonymous.
2. In site collection level, make sure anonymous access Entire Website.
3. In Web level, set Full Permission Masks, till here, you're able to anonymously access REST APIs.
# Enable Anonymous access
$web = Get-SPWeb $url
if($web -ne $null)
Write-Host
Write-Host -ForegroundColor Yellow "Enabling Anonymous access on:" $web.Url
Write-Host
$web.AnonymousState = "On"
Write-Host -ForegroundColor Yellow "AnonymousState set to:" $web.AnonymousState
$web.AnonymousPermMask64 = "FullMask"
Write-Host -ForegroundColor Yellow "AnonymousPermMask64 set to:" $web.AnonymousPermMask64
$web.Update()
Write-Host
Below are the things to enable anonymous client object model APIs:
4. In web application level, Require Use Remote Interfaces Permission - uncheck it.
5. In web application level, Anonymous Restricted Types, remove all of them:
$app.ClientCallableSettings.AnonymousRestrictedTypes.RemoveAll()

Anonymous access with named users

Hi!
I am trying to set up anonymous access with named users on EP6 SP9. I am using Database only as UME Data storage. I have applied the note #728106, since most of the content is html-pages on the KM.
I defined the UME settings ume.login.guest_user.uniqueids=anon01,anon02
ume.login.anonymous_user.mode=1
Restarted the server and attached user account into roles (which contain only anonymous content).
I then accessed the page /irj/portal/anonymous (or the longer version /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.anonymous) and everything was fine. However I wasn't able to get the portal working with /irj/portal/anonymous?j_user=anon02. I always received Portal runtime error. From the logs I saw that the portal tried to access as user anon01.
When I changed the UME settings into
ume.login.guest_user.uniqueids=anon02,anon01
I was able to get the anon02 user account working, but not /irj/portal/anonymous?j_user=anon01. From the logs I saw that the portal tried to access as user anon02.
Both user account are using the same rule, portal desktop and framework page. I can see the correct (and different) TLN for each user only in the content are I see this error.
Any ideas?
Thanks,
Petri

I need to switch between two named anonymous users.
It works fine using http://<server>:<port>/irj/portal?j_user=<first_Guest_user>&j_password=<pwd_of_first_Guest_user>&login_submit=true
Then to switch to the other user I must do a log-off or close the browser and input the other url http://<server>:<port>/irj/portal?j_user=<second_Guest_user>&j_password=<pwd_of_second_Guest_user>&login_submit=true
I developed a servlet to switch the users using IAuthentication (method forceLogoffUser) and then redirect to the respective url. But when I call forceLogoffUser method I get a login screen and the script stop executing. Passing 'returnURL' parameter did not work.
Parameters:
req - HttpServletRequest
resp - HttpServletResponse
returnURL - url to use to logon again.
Is there a way to switch automaticaly between the two named anonymous users?

Anonymous access to KM Navigation Iview

In order to obtain an anonymous access to a KM folder, I followed the instructions in the guide How to configure an anonymous access to KM.
Unfortunately I still have 2 problems:
1) connecting to the portal by http://<server name etc.>/anonymous I can see the folder and the documents list, but if I try to open a document clicking on it I get a page with the message 401 Unauthorized by the J2EE Engine
2) in the KM Navigation Iview I cannot see the icons (those of the documents type, that one of the folder and so on), and when opening the iview I have a logon request for every icon
Someone can help me?

Hi Giuseppe,
if you implement everything according to SAP Note 837898 (especially the URL Generator Service entries and the Authentication Schema of the "hidden" iviews) you should get rid of this problems.
Hope this helps,
Robert

How to set up KM folder with Anonymous access.

Experts,
I would like to setup a KM folder with anonymous access where any document on that folder can be viewed by anonymous users by clicking on a link specific to that document. For example: http://server/irj/go/km/docs/documents/TechDocs/file_name.html
Please note that this document will not be rendered through an iView, so setting up an anonymous role will not work in this case.
Can anyone tell if this will be doable and the steps to do it?
Thanks in advance for your help.
Regards,
Abu

Hi Abu,
> How can I just give access to a specific folder under /irj/go/km/docs?
You have to differentiate between anonymous access to the iView behind /irj/go/km/docs (PCD auth scheme) and the permissions on KM folders (KM permissions). If you want to restrict the access, on the folders which should not be accessible for anonymous access, remove the group "Everyone" from the permissions (via details / settings / permissions). For details see http://help.sap.com/saphelp_nw04/helpdata/en/1b/12c49eb27011d5993800508b6b8b11/frameset.htm
Hope it helps
Detlev

SSRS 2012 rendering issue/Enabling Anonymous access - Upgraded SSRS from SQL 2005 to SQL 2012.

Hi,
I just recently upgraded SQL 2005 SSRS to SQL 2012 SSRS. Everything is working great other than small issue.
Sounds like some authentication issue. SQL 2005 SSRS - IIS, we enabled anonymous access and we never had this problem. SQL 2012 SSRS /WIN 2008 R2 - I am not sure how to enable anonymous access.
If anyone can help me on this? I really appreciate your help.
Thanks,
Vel
Vel Thavasi

Hi Vel,
According your description, you want to know how the enable anonymous access to SSRS 2012. Right?
In SSRS 2008 or later version, we are not using IIS any more. If we want to configure the authentication, we need to configure in RSReportServer.config. This file locate at:
<drive>:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer
However, in SSRS 2012, Anonymous authentication is not supported on report server. Please see:
Authentication with the Report Server
In this scenario, we need to custom an authentication type to achieve the "Anonymous" goal. Please refer to the link:
Configure Custom or Forms Authentication on the Report Server
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Default view and date format for anonymous access in convergence calendar

Hi,
is there an option to configure default view and date format when user access to a calendar with anonymous access ?
Actually, date format is M/D and I want D/M.
And the default view is monthly, and I would like to set to 7 days view.
Thx for your help
Regars,
JC

jchatriot wrote:
is there an option to configure default view and date format when user access to a calendar with anonymous access ?No. I've raise a new Request For Enhancement:
RFE #6961895 - "Provide configuration option and URL parameter to set Anonymous Calendar view and date format"
Regards,
Shane.

In Infopath forms, is GetUserProfileByName not an option when anonymous access is enabled on the server?

Hi,
How can you populate an Infopath form with values from the SOAP web service GetUserProfileByName operation when anonymous access is (and has to be) enabled on the server?
Looks like the facility is redundant when this is the case?

Hope this post helps
http://blogs.technet.com/b/anneste/archive/2011/11/02/how-to-create-an-infopath-form-to-auto-populate-data-in-sharepoint-2010.aspx
Bistesh

How to connect to web services from iOS to get list using anonymous access

Hello
This is a public facing web site that I would like to have access to a list file to get data in an iOS app however I get 403 forbidden because I do not have a username and password.
How can I get this list with anonymous access?
Under my admin account I published this list as a web page for anonymous access using a data view but I would also like the same data for my iOS app.
Thank you for any help and direction.

yes, it is.
List
Anonymous users can:
View Items
This site collection is hosted and the permission level for anonymous users is set to entire web site.
here's the error & url I get off of IE when clicking http://myportal/_vti_bin/listdata.svc/MyList
http://myportal/_layouts/error.aspx?ErrorText=Object%20reference%20not%20set%20to%20an%20instance%20of%20an%20object%2E
Error
An error has occurred on the server.
Troubleshoot issues with Microsoft SharePoint Foundation.
Correlation ID: 52edf46c-682d-426e-b04c-8a8bb0a92040
Date and Time: 7/29/2014 12:09:41 PM

Is anonymous access support in sharepoint 2013 bi sites to view dashboards reports without login ??

HI
In SharePoint 2013 :
IS Anonymous access supports for BI sites where dashboards are deployed using Performance point services and SQL SERVER ANALYSIS server?
adil

If you're using an Excel Services data connection, Anonymous is not supported:
https://technet.microsoft.com/en-us/library/ff191193.aspx
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Anonymous access to KM in 2004s SPS07

Similar Messages

Maybe you are looking for