Configure the Guest to NOT see the login page?

I'm trying to get my portal to allow the guest user to see their default community (as set inthe default subportal).
I can't get it to do anything other than show the login screen.
On a .Net portal, the n_config.xml seems to be the key file, but I can't figure out what it is looking for ... what are the possible values?
In this context, what is a "space"? Is it a community ID, an activity space, or other?
How are values configured? Replace the value="", or does it go between the propertie's tags? (<AllowGuestAccess value="1"></AllowGuestAccess>, or <AllowGuestAccess value="1">1</AllowGuestAccess>)
<Authentication> <!-- Allow the Guest user to access the portal. If guest access is disallowed, the portal will always prompt for login information. --> <AllowGuestAccess value="1"></AllowGuestAccess> <!-- This is the password for the Guest user. --> <GuestPassword value=""></GuestPassword> <!-- If the guest user does not specify a space, the user will normally go to their default page. If this is 1, the guest user will go to the login page. --> <GuestRedirectToLogin value="1"></GuestRedirectToLogin> </Authentication>

Hi Javier,
You're right -- the Login space is always accessible if you type space=Login, even if you're using SSO and you follow all of developersupport's suggestions. Of course, you already have to be logged in to get there, so the risk is minimal, however, it allows you to "su" to another user (including Administrator) as long as you know the password.
One of our customers thinks this is a major security hole and as a result, we've hacked the LoginView to automagically log you out and redirect you to a protected resource, which forces another SSO login. That's the only thing I could think to do to plug the hole. If any Plumtreevians are listening to this thread, it would be great to get a real fix for this into your next release.
If anyone has any better suggestions, I'm all ears.
Regards,
Chris Bucchere | bdg | [email protected]| www.bdg-online.com

Similar Messages

  • I cannot connect to the login page of my banking websites for Firefox but can from IE also firefox does not close when I shut it down I have just done a clean instal of windowsws7 and teh problem persists on reinstall of FF3.6.13

    I can connect with my banking websites but the login page will not come up. This is a recent occurrence and I have done virus scans and have also recently done a clean instal of Windows 7. The problem persists. I can connect to any other website with no problems. When I close FF it appears to close and Task manager shows as not running but it will not reopen. If I attempt to uninstall I am told that FF is running and needs to be closed. I have to reboot to get to close and be able to reopen.
    I can connect to the bank sites with IE. However I really don't like IE.
    I am using Win7 Professional on a Sony notebook VGN SZ55

    I don't have an answer, but I experienced the same problems trying to set up an airport express to route traffic to my stereo.
    Apple Extreme router, iMac and laptop all worked just fine for months, upon installing Airport Express (step by step, according to instructions), all **** broke loose. Airport Utility was unable to see my Airport Extreme router, after hours of rebooting computer, cable modem, router, and finally a hard reset of the Airport Extreme router, it is finally recognized by Airport Utility again.
    Recreated network, iMac connects to the internet just fine, laptop (Macbook Air) connects to the network just fine, but will not connect to the internet. Network diagnostics does not help, it gets to the "do you have a router? If so, reboot" stage, and never seems to see the router.
    Any suggestions?

  • Not able to get the login page after installing 12.1.1

    HI,
    i am not able to get the login page after installing in the 12.1.1. when i accessed from client machineo.Please help me in fixing out this problem.
    Thanks,
    venkat.

    Hi,
    What is the OS?
    What is the error message?
    Any errors in Apache/Database log files?
    Thanks,
    Hussein

  • My Macbook Pro is frozen on the login page with a white screen and only my login picture. How do I fix this? I can't turn it off and I closed it and let it charge but it's still not working.

    My Macbook Pro is frozen on the login page with a white screen and only my login picture. How do I fix this? I can't turn it off and I closed it and let it charge but it's still not working. It's only 3 months old and was working perfectly fine 30min before this happened.

    Hello Kierasully,
    I would start your troubleshooting with the article below for issues of not being able to log in to your Mac. Start with booting up in to Safe Boot as well as resetting PRAM on your Mac. If that does not work, then verify the hard drive with booting to the Recover HD and go to Disk Utility to verify it.
    Mac OS X: Gray screen appears during startup
    http://support.apple.com/en-us/ts2570
    Regards,
    -Norm G. 

  • Firefox does not automatically load nor find the login page for a public network (i.e. username and password)

    To log in on a public network without a password-key (not secured), a user login is required.
    After connecting to the network, the browser, upon opening it, normally automatically loads the login page, in order to enter a username and password and connect to the internet.
    Firefox doesn't find the login page automatically, so I need to switch to google Chrome just to log in to the network.
    Does this have anything to do with user settings in the options of firefox?
    Any ideas?
    thx!

    Hi,
    You can try setting the login page as the [https://support.mozilla.org/en-US/kb/How%20to%20set%20the%20home%20page Home page] and choose to '''Show my home page''' beside '''When Firefox starts:'''.
    Alternatively, and/or to preserve your current settings you could also pin it as an always present one-click away [https://support.mozilla.org/en-US/kb/what-are-app-tabs App tab].

  • Configure the login protlet

    Is there any way which we can configure the login protlet to support "ForgotpAssword" and "Rememberence ME" features?

    We have portal Login server and Oracle Internet Directory installed on one of our Windows 2000 box.
    We want the Oracle LDAP server to do the authentication. I understand that we can configure the Login Server to delegate the authentication request to the LDAP server.
    iAS 1.0.2.1.0
    portal 3.0.9.8.1(PATCH)=>3.0.9.8.2
    OID 2.1.1.1
    But my ssoxoid.pkb have no set_external_cookies procedure, so we
    cannot complete ssoxoid.pkb.
    So I try blow
    PROCEDURE set_external_cookies
    p_username IN VARCHAR2
    , p_password IN VARCHAR2
    , p_cookie_list OUT wwsso_ls_private.cookie_list
    is
    begin
    null;
    end set_external_cookies;
    so i could complete
    but i cannot login with 'Error: Unexpected errors (WWC-41400)'continue~~~
    The availability of OID with Applications 11.5.5 SelfService Account?
    Please help!

  • Big authentication problem: not being redirected to the login page

    Hello, everybody!
    I've just noticed a big problem in the web application I'm developing. In this
    application I'm using the FORM authentication method as you can see below in the
    web.xml file:
      <security-constraint>
         <web-resource-collection>
                <web-resource-name>permitido</web-resource-name>
                <url-pattern>/*</url-pattern>
           </web-resource-collection>
           <user-data-constraint>
                <transport-guarantee>NONE</transport-guarantee>
           </user-data-constraint>
      </security-constraint>
      <security-constraint>
           <web-resource-collection>
                <web-resource-name>restrito</web-resource-name>
                <url-pattern>/confirmacaoreserva.jsp</url-pattern>
                <url-pattern>/confirmacaoreserva.faces</url-pattern>
                <url-pattern>/reservaconfirmada.jsp</url-pattern>
                <url-pattern>/reservaconfirmada.faces</url-pattern>
           </web-resource-collection>
           <auth-constraint>
                <role-name>ADMINISTRADOR</role-name>
                <role-name>USUARIO</role-name>
           </auth-constraint>
           <user-data-constraint>
                <transport-guarantee>NONE</transport-guarantee>
           </user-data-constraint>
      </security-constraint>
      <login-config>
           <auth-method>FORM</auth-method>
           <form-login-config>
              <form-login-page>/login.jsp</form-login-page>
                <form-error-page>/errologin.jsp</form-error-page>
           </form-login-config>
      </login-config>
      <security-role>
           <role-name>ADMINISTRADOR</role-name>
      </security-role>
      <security-role>
           <role-name>USUARIO</role-name>
      </security-role>If I type in the browser's address field any of the protected pages,
    confirmacaoreserva.faces or reservaconfirmada.faces, the web container redirects
    me to the login page as expected, as I was'n authenticated yet. Until till
    this point everything is working without problem. But I noticed, to my surprise,
    that when I click on a link in a web page like this:
    <h:commandLink value="#{msg.reservar}" action="#{materiais.reservarMaterial}">
        <f:setPropertyActionListener target="#{materiais.codigoMaterial}" value="#{material.codigo}" />
    </h:commandLink>
    // in the backing bean
    public String reservarMaterial()
        // some processing...
        return "confirmacaoReserva";
    // in faces-config.xml
    <navigation-rule>
        <navigation-case>
            <from-outcome>confirmacaoReserva</from-outcome>
            <to-view-id>/confirmacaoreserva.jsp</to-view-id>
        </navigation-case>
    </navigation-rule>it completely by-passes the web container authentication and redirects me to the
    protected page (+confirmacaoreserva+) without asking me first to authenticate in
    the login page. Of course this is unacceptable.
    So, how can I solve this? How do I fix this problem?
    Thank you.
    Marcos

    Marcos_AntonioPS wrote:
    BalusC wrote:
    Which appserver implementation/version are you using?JBoss 4.2.3.GAOK.
    Which JSF implementation/version are you using?The default JSF implementation that comes with JBoss 4.2.3.GAWhich one? Read the manifest file of the JSF implementation JAR.
    Does it work if you redirect instead of forward in the navigation case (just add <redirect />) ?I haven't tested yetAnd?

  • After new weblogic domain configuration with oim 11g, not able to login

    After new weblogic domain configuration with oim 11g, not able to login for the frist time as xelsysadm.
    it says invalid sign in. and in logs it says password is invalid.
    Please help me in asap...

    Thanks Pallavi for the effort. I tried commenting out, its still the same. It do not throw exception this time. However, It tells me that the recon event is completed and linked to user. When I go to user's profile, I dont see the resource provisioned.
    Also,
    The Account ID in recon manager of Web Console and the Account ID that is stored in the tables, doesn't match.
    I wrote a custom code to fetch account and user details and here is the output,
    User Key : 13 -- has Login Id : USER_CS
    Account with account key : 49 is with user key : [USER_CS]
    Getting Account Data......
    {UD_TEST_1P_EMPLOYEENUMBER=1567, UD_TEST_1P_NAME=Kim1}
    However the Account Id in recon manager is : 91
    This seems fine.
    Doesn't this mean, the account is reconciled successfully?
    The problem is that, I am not able to see this resource in User's resource profile.
    Edited by: Shashi kiran on Apr 18, 2013 3:56 PM

  • Configure the Logoff page in SRM

    Hi,
    any pointers how do we configure the logoff page in SRM? Once the user logs in, even after clicking on the logoff button, the login page doesnt appear. Any pointers?

    Hi,
    See the foll threads for more pointers:
    Customize Logoff link ?  ;-)
    Re: SUS logoff problem - session do not close
    Re: Logoff button does not end session while accessing bbpstart service.
    Re: Which paramteer to set???
    Re: Logoff button does not end session while accessing bbpstart service.
    Re: Which paramteer to set???
    Re: Browser Shut-down using "Log off" link
    BR,
    Disha.
    <b>Pls reward points for useful answers.</b>

  • When I get to the login page on my macbook, I type in my password and it starts to load, but then the screen turns blue and it goes back to the login. What should I do?

    I was having some problems with my mac, safari and itunes was freezing alot. I have to force shutdown and when I tried to start up again i get to the login page, type in my password and it starts to load, but then the screen turns blue for a few seconds and it goes back to the log in screen. What should I do?
    Please Help!!

    Somewhat similar problem:
    Put in the password, hit enter, the screen goes blue for half a second, then goes back to login screen and carries on logging in as usual.  Drives me mad.  It doesn't happen with a fresh Lion installation, nor if booted into safe mode.  On the machine in question it also happens to new user accounts.
    I've removed all login items, including Startup Items and Launch Demons (pun intended) and Agents, I've compared system login plists with a fresh Lion installation - can't see differences.  I've removed Little Snitch and PeerGuardian (no more third party kexts).
    @Carolyn: I've done disk maintenance with DiskUtility and fsck and even DiskWarrior, cleaned caches, etc. etc.
    Any ideas would be gratefully received.
    Sorry for trying to hijack the thread (as it's not about Lion), but it seemed dead anyway.

  • When I get to the login page on my macbook, I type in my password and it starts to load, but then the screen turns blue and it goes back to the login.

    When I get to the login page on my macbook, I type in my password and it starts to load, but then the screen turns blue and it goes back to the login.
    Iv tryed this numerious times still keeps going back to pasword. Can not get any further. Tried restart holding shift key.. still nothing. What do i do?

    Thank you for your help.
    I couldnt get to the hard drive/ desktop. Soft login not even working. So i could not do any of that.
    In the end i took it to Apple and its actually the hard drive on its way out. A common issue with that series of Mac. Funny seeing i dont use this mac much. However being 2.5 years old and out of warrently, Apple have recognise this issue with this series/ Model and installing a new hard drive at no cost.
    Very luck and greatful. And not feeling so dumb that it was something i did or could troubleshoot myself.
    Hope this helps others that it just might be your hard drive failing.

  • Imessage is buggy, i can login to it but does discontinues to verify and goes back to the login page,

    The problem with imessage with me and same thing too for my facetime, i can login but discontinues to verify and goes back to the login page. This is the second time where imessage is not working, the first time was "Unable to verify email" error, but i manage to solve it by just restarting my ipod. The second time, restart doesn't solve the issue, i wonder the iMessage app is pretty buggy, or servers are busy etc. I need help on this, does anyone has the same problem?

    Restore in iTunes. See
    http://support.apple.com/kb/HT4623

  • Cannot acces the login page of Access Manager 7.1 amserver

    I am new to Access Manager 7.1. After a successfull installation on Solaris 10 11/06 x86, SUN Java Directory Server 6 EE, SUN Java Application Server 8.2 i cannot reach the login page of amserver. The Application Server registers properly the Web Applications, the configuration of the Access Manager was good in my best knowledge. The exeption is as follows
    type Exception report
    message
    description The server encountered an internal error () that prevented it from fulfilling this request.
    exception
    javax.servlet.ServletException: AMSetupFilter.doFilter
         com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:100)
    root cause
    com.iplanet.jato.CompleteRequestException
         com.sun.identity.authentication.UI.AuthenticationServletBase.onUncaughtException(AuthenticationServletBase.java:122)
         com.iplanet.jato.ApplicationServletBase.fireUncaughtException(ApplicationServletBase.java:1164)
         com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:639)
         com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:459)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:747)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:860)
         sun.reflect.GeneratedMethodAccessor73.invoke(Unknown Source)
         sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         java.lang.reflect.Method.invoke(Method.java:585)
         org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:249)
         java.security.AccessController.doPrivileged(Native Method)
         javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
         org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:282)
         org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:165)
         java.security.AccessController.doPrivileged(Native Method)
         com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:86)
    note The full stack trace of the root cause is available in the Sun-Java-System/Application-Server logs.
    Could anybody help me to solve this situation.
    Thanks

    Hey,
    were you able to resolve this issue???
    I am getting the same error after I re-installed the SUN suite(including portal,access manager ,directory server etc)
    Please let me know If you can help.!
    Thanks
    Deepak

  • HT3867 My iPhone won't display the login page for public wireless hotspots

    My iPhone 4S does not load the login pages of public wifi hotspots. It has not always done this for I cn remember a using it afew times. Help please before I break this phone lol

    One possibility is that you have specified DNS servers in your Network preferences. (Network Preferences  -> Advanced -> DNS, see if anything is specified.) If so, you want to create a new network location which doesn't have any DNS servers defined. (Network Preferences  -> Location -> Edit Locations.)  Create a new one (click the + sign), and use that  location when logging on to public WiFi hotspots.
    The other (and worse) problem might be a security feature added to OS 10.7.2 and higher versions. 
    Apple found out that a hacker could fool you into accepting a bogus "update" via a fake Software Update pop-up.  The fix was to rig the OS so that, when you connect to a wifi network, a Mac running the new and improved OS will silently "phone home" to an IP address at apple.com, and inquire about the hotspot's certificate. If it fails to get back a message declaring the hotspot's certificate to be valid, it assumes that the hotspot login popup is fake, and won't let you proceed.  The permanent solution is for the hotspot's "captive portal system" to allow Macs to connect to the Apple host, so that the OS can do the verification.  Most public WiFi systems have made the adjustment, but there are quite a few (including many schools) who are behind the curve.  If this is your issue, tell whoever runs the network to get with the program!
    While waiting for that to happen, you can always copy the login page url from a PC (or older Mac OS) that is able to access the hotspot, paste it into your address bar, and take it from there.  (Truncate the url at the first question mark . . . the ? and all the junk that comes after it are likely to be specific to the machine you copied it from.  You'll see a fresh bunch of junk materialize, as the site talks to your Mac.)

  • Modify the login page (login.jsp) of B2B scenario of the Internet Sales app

    All
    I wanted to modify the login page (login.jsp) of B2B scenario of the Internet Sales application
    By typing the URL "http://<servername>:50001/b2b/b2b/init.do." I could able to see the login page
    My requirement is to add an extra link in this page
    when I use showmodule=true it gives the location of jsp which is "user/logon/login.jsp"
    I could able to find this jsp in the DC "crm-isa-web-b2b"
    when I open the DC in package explorer i could able to locate this jsp in a jar file but not able to open/modify it
    Awaiting experts response
    Thanks
    Murali.K.N

    When I work on ours ISA4, I go to the file on the server
    \jsp\crm.b2b\servlet_jsp\b2b\root\b2b\login\login.jsp
    Now, I'd imagine there might be a much easier way to work with the files, but that's how I edited ours. 

Maybe you are looking for

  • ITunes 9 not updating tag data when re-importing a CD

    Hello all, With ALL previous versions of iTunes, when you re-import a CD and if you change the information (like the genre, etc.) iTunes would update the existing versions of the songs with this new data (it would also fill in the track x of n inform

  • VGA cable

    I have a vga cable. I can see you tube and home video but full films that I have on my i tune ? why any one ? it tells me I have no premission

  • Don't understand background activity in Lion

    19.01.12 19:32:03,000 kernel: IOSurface: buffer allocation size is zero 19.01.12 19:52:26,603 Mail: open on /Users/mfx/Library/Mail/V2/Mailboxes/Essentiell.mbox/AC7B169F-B7A3-4C26-9766-14 F9C0509455/Data/5/2/1/Messages/125018.emlx: No such file or di

  • Strange issues with Leopard (Safari, Mail, speed)

    I have a 20" iMac (white model) which I got in March of this year. I just upgraded to Leopard (did the upgrade path with the DVD. Nothing set in options or anything special). The upgrade went fine and 10.5 seems to be running ok. There are a few issu

  • G5 dies at apple screen

    I wonder whether anybody can point me to where the possible fault could lie. When I start my G5 up it gets as far as the apple icon appearing on the screen and then the power cuts off and it shuts down? I have another older G5 standing idle (G5 Model