How to disable authentication in CQ?

Hi ,
i have written a servlet on my instance and i wanto hit this from another instance wihtouht asking fro authentication ?
Please suggest how can i disable authentication on the first CQ instance .
Thanks

Add the following OSGI property annotation to your sevlet
Property(name = "sling.auth.requirements", value = "-{pathtoservlet}")
See http://sling.apache.org/documentation/the-sling-engine/authentication/authentication-frame work.html for additional information on this property. Notice the dash prefixing the path - if you don't include the dash that means the path requires authentication. THis property sets an entire sub-tree as not requiring authentication so you don't want any secured URLs below this path. As and example
Property(name = "sling.auth.requirements", value = "-/bin/my/sevlet/path")
disables authentication for that path. To my knowledge this does not allow wildcards - you need an absolute path.

Similar Messages

How to disable authentication on ocms for subscribe request

Hi,
I am using ocms for Presence.I have installed OCMS on JBoss so proxy register is not configured.Now when I'm sending subscribe request to Presence server I get the 401 Unauthorized error.
The stack trace is as follows:
SIP/2.0 401 Unauthorized
Server: Oracle-OCMS/4.1.0-723
Call-ID: 3mtk7z4w9ccl-1usz12wbrvnrb
WWW-Authenticate: Digest qop="auth",stale=false,realm="10.200.220.132",opaque="b5b30dfd8d36b938baef2dedd5d4d50b",nonce="MTIzMTI1NTM3MjkyNGM3YWExZDgxMTFkZTcxNWE4YTU5Y2RhZDM0ZGU1NWJi"
Via: SIP/2.0/UDP 10.200.220.132:5060;branch=z9hG4bK-quyuo0vl5xno-1rkttmswx1deo.1;received=10.200.220.132;rport=5060
From: <sip:[email protected]>;tag=1axdx8kob9gfv-1obhae0vr4sqs
CSeq: 1 SUBSCRIBE
Content-Length: 0
To: <sip:10.200.220.132:5060>;tag=-12r6zajkxvega839359283
where sip:10.200.220.132:5060 is configured as Presence server.I just want to diasable the authorization for subscribe request. Is anyone know about how to disable authorization in ocms. I hope u guys got my question.plz guide me.
Regards,
satish

Hi Yan,
What's the oracle product you are using it and if you want to avoid the digest authentication,you can remove the CLIENT-CERT defined in the auth-method of web.xml in the application and it will either fall back to FORM based or Basic authentication based on which is configured in the application
<login-config>
<auth-method>CLIENT-CERT,BASIC</auth-method>
</login-config>
http://docs.oracle.com/cd/E11035_01/wls100/security/thin_client.html
/Mohammed R

How to disable authentication window in abap

Dear experts,
My Requirement is need to send sms to cusomer mobile so i added fallowing code
CONCATENATE
     'http://112.110.32.178/login/pushsms.php?login=novire&pass=novire&mob_no='
      V_TELF1
     '&text='
          V_EGP
         INTO
          WF_STRING .
    CALL METHOD CL_HTTP_CLIENT=>CREATE_BY_URL
      EXPORTING
        URL                = WF_STRING
      IMPORTING
        CLIENT             = HTTP_CLIENT
      EXCEPTIONS
        ARGUMENT_NOT_FOUND = 1
        PLUGIN_NOT_ACTIVE = 2
        INTERNAL_ERROR     = 3
        OTHERS             = 4.
    CALL METHOD HTTP_CLIENT->SEND
      EXCEPTIONS
        HTTP_COMMUNICATION_FAILURE = 1
        HTTP_INVALID_STATE         = 2.
when below method(CALL METHOD HTTP_CLIENT->RECEIVE) is executing then POP UP is comming it is like
Resource   Websense Content Gateway
User name :
Password
After enter id and password it is sending sms so what we nee to do to disable the POP UP Screen.
    CALL METHOD HTTP_CLIENT->RECEIVE
      EXCEPTIONS
        HTTP_COMMUNICATION_FAILURE = 1
        HTTP_INVALID_STATE         = 2
        HTTP_PROCESSING_FAILED     = 3.
    CLEAR RESULT .
    RESULT = HTTP_CLIENT->RESPONSE->GET_CDATA( ).
    REFRESH RESULT_TAB .
    SPLIT RESULT AT CL_ABAP_CHAR_UTILITIES=>CR_LF INTO TABLE RESULT_TAB .
ENDIF.
Thanks&Regards.
siva.

Hi Siva,
Did you try using AUTHENTICATION method?
CALL METHOD W_HTTP_CLIENT->AUTHENTICATE
EXPORTING
    USERNAME             = 'user'
    PASSWORD             = 'password'
Try and see if this sets user id and password as default
Thanks,
~AK.

How to disable authentication for weblogic server

Hi expert,
I have a web application deployed on weblogic server 12c. And I have a client which connects to the web application. The client will authenticate with server with digest authentication (challenge\response). We use the default authentication in weblogic server and the authentication is done by weblogic server. And it works fine.
However, I want to run a performance testing to replay all client requests including the requests for authentication. Since it's challenge/response authentication mechanism, the original requests can not pass authentication and weblogic server replies 401. I want to know is there any way to disable weblogic authentication so that the authentication passes when I replay my original request?
Thanks very much!
Regards,
Yan

You can disable the security of the application in the web.xml. Here there is a security-constraint configured that tells WebLogic what to do, for example,
<security-constraint>
<web-resource-collection>
<web-resource-name>All</web-resource-name>
<url-pattern>/faces/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>MANAGER</role-name>
<role-name>EMPLOYEE</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint>
If you put the security-constraint in comments, you can access the application, without authentication (note that the application itself probably uses the authentication in order to set certain things, so I do not if this is going to work).

Disable Authentication in PI 7.1 - RNIF adapter

Hello experts,
Do any of you know how to turn off WEBAS authentication in PI 7.1. I'm working on RNIF adapter to Idoc scenario.
The following thread shows us how to disable authentication in XI 3.0 -
Disable user and password in RNIF adapter.
If I cannot disable authentication in PI 7.1, how else to go about this?
I'm trying to test with Rosettanet STK and I'm getting 401 Unauthorized every time I try to post to PI 7.1 RNIF adapter.
Please advise.
Thanks
Karthik

Hi Karthik,
You should be able to do it. One thing you should keep in mind. If you disable then it disables to all the communication channels using the rnif adapter, not just to the one communication channel.
Regards,
---Satish

How to disable Java Plug-In authentication dialog box ?

Hi,
I'm using SSL connection with client authentication. Certificate is on hardware device.
I'm providing keystore with cert for SSLContext in my app programmatically.
When I run it from console (java -jar) it works ok.
*When I use it as an applet i get browser prompt (popup dialog) for client certificate.*
How to disable it ? (jre 1.5.0_12 + Firefox + Linux Ubuntu)

-how do you code the access to the keystore ? You have several solutions : SSLContext.init(km, tm, random), or System.setProperty("javax.net.ssl.keyStore", value), or implement a KeyManagerFactory. Everything is said in the guide : http://java.sun.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html
Last solution, running java -Djavax.net.ssl.keyStore=yourkeystore -Djavax.net.ssl.keyStorePassword=yourpassword , but it could not work in applet mode.
-I told you to check the policy, because applets usually have less rights. In the link you said, check such permissions :
FilePermission, SSLPermission (getSSLSessionContext)
-don't forget rewarding duke stars if that was the right answer :)

How to disable Java Plug-In authentication dialog ?

Hi,
I'm using SSL connection with client authentication. Certificate is on hardware device.
I'm providing keystore with cert for SSLContext in my app programmatically.
When I run it from console (java -jar) it works ok.
*When I use it as an applet i get browser prompt (popup dialog) for client certificate.*
How to disable it ? (jre 1.5.0_12)

Here is the sollution:
Java browser plugin in sun.plugin.AppletViewer is doing sth like this:
System.setProperty ("java.protocol.handler.pkgs", "sun.plugin.net.protocol|com.sun.deploy.net.protocol");invoking:
System.setProperty("java.protocol.handler.pkgs", "");resets the handler to default with no popups

Hi, All. Iam using Adobe Document Cloud. After saving a pdf document to this cloud, I am able to see my PC folders . How to disable this? Does my PC folders are also available across other PC's to access them with my Adobe ID? Please help me. Thanks

Hi, All. Iam using Adobe Document Cloud. After saving a pdf document to this cloud, I am able to see my PC folders as well with a browsing option . How to disable this? Does my PC folders will also available across other PC's to access them with my Adobe ID? Please help me. Thanks in advance.

Hi indi68632954,
I can understand your concern & you need to worry about this, as your PC folders won't be available on other PC's as this option is just to browse through the files of the specific system on which you are working as shown in the screenshot below.
Only the files uploaded on the Document cloud will be available over Internet using Adobe Document Cloud service upon the authentication of your Adobe ID & password.
I hope this will answer your query.
In case if you have any further query please let us know, we will be happy to assist you.
Regards,
Aadesh

How to disable role password in Solaris 11

Roles can only be assumed by logged in users. That is the definition of a role. Therefore role authentication is to some extent double authentication. The user has already authenticated as himself when he logged in and the sysadmin has enough trust in him to grant him a certain role. So why would he need to authenticate to the role? Isn't that double authentication ? Anyway I can see why that makes sense on a role like 'root' but on other more normal types of roles ? Really?
Anyway that is not what this posting is about. It is about me not being able to figure out how to disable role password in Oracle 11.
In Solaris 10 I would do:
<pre>passwd -r files -d myrole</pre>
That would set the myrole account to a no password account and that would be enough to disable it.
In Solaris 11 I cannot make this work. I suspect this is because of the introduction of the roleauth attribute but I've tried all possible combinations:
<pre>passwd -r files -d myrole</pre>
<pre>rolemod -K roleauth=user myrole</pre>
or
<pre>passwd -r files -d myrole</pre>
<pre>rolemod -K roleauth=role myrole</pre>
Can't make any of these work.
Pls help.

Hello MrMonza,
I do not completely understand what you are looking for. Perhaps it would help if you explained, for which purpose you want to use your new role.
In short, a role is simply a user account, to which you cannot login directly. As to every user account, rights are assigned to each role. And as for every user account, you have to provide a password for it.
If you want to switch to a role without password, this is nearly the same as extending the rights of your account.
This is possible by assigning additional profiles to it via /etc/user_attr. Privileged commands, written by you, and connected to these profiles, can be defined in /etc/security/exec_attr.d/local-entries. These commands can be called via pfexec, see pfexec(1), which grants privileges (e.g. uid=0) for just the call.
See also user_attr(4), prof_attr(4), exec_attr(4) and the "SEE ALSO" sections in there.
Profiles can be chosen from the predefined profiles in /etc/security/prof_attr.d, or they can be self-assembled from these profiles and authorizations from /etc/security/auth_attr.d.
New profiles should be stored in /etc/security/prof_attr.d/local-entries.

How to disable AUX port in ASR 9010

Hi All,
How to disable the AUX port in ASR 9010. Inside "line aux" I can't configure anything except "login authentication" (which is used for aaa authentication).
Also after IOS XR 3.2 the configuration for AUX port has been removed
Platform used: ASR 9010
Version: IOS-XR 4.1.2
Best Regards
Saikat Chakraborty

Hi Saikat,
AUX has the same authentication method as we have on the system. From this perspective, AUX is protected the same way as the Console port and only those who have an account can login via AUX (same way as via console). Any attempts to log on AUX will be logged:
Successful:
ksh[65902]: Successfully authenticated user 'XXX' for ksh access via 'aux' on '0/RSP0/CPU0'
Incorrect:
ksh[65902]: Failed authentication attempt by user 'YYY' for ksh access via 'aux' on '0/RSP0/CPU0
But if anyone has a physical access to the device, that would be even bigger threat compare to system protected AUX login.
BTW, tacacs authentication should work for AUX too. We’d need to define a template for it.
Example:
aaa authentication login tacacs_template group tacacs+ local
line template aux
login authentication tacacs_template
Regards,
/A

How to disable login page in an application

how to disable login page in an application

Hi Alekh,
To turn off authentication you must create and make current a No Login Authentication authentication scheme.
or change Page / Security / Authentication as "Page is Public"
Regards,
Benz

How to disable SSL Renegotiation

Hi All,
A security audit discovered one of our application's SSL termination, resides our ACE, supports SSL Renegotiation, which is, in their opinion, a security risk. As far I know, it is not supported to turn off this feature on ACE. Anyway, I want to be sure, before I reports this to the auditors. If you know, how to disable it, please share with me!
We are running 3.0(0)A4(2.2).
Regards,
Tamas

Thank you for your answer.
Our running version is A5(2.0). It should have rehandshake disabled by default.
Here are the outputs from some commands:
ACE# sh run | i rehand
Generating configuration....
ACE# sh parameter-map SSL_TERMINATION
Parameter-map : SSL_TERMINATION
Description : -
Type : ssl
    version                            : all
    close-protocol                     : none
    expired-crl                        : allow
    cdp-errors                         : reject
    authentication-failure any         : reject
    session-cache timeout              : disabled
    queue-delay timeout                : disabled
    Accepted cipher list:
      RSA_WITH_RC4_128_MD5 (priority:1)
      RSA_WITH_RC4_128_SHA (priority:1)
      RSA_WITH_AES_128_CBC_SHA (priority:10)
      RSA_WITH_AES_256_CBC_SHA (priority:1)
    rehandshake                        : disabled
    purpose-check                      : enabled
As you can see there is no configuration command to activate rehandshake.
So my question is if the rehandshake command only affects the ACE´s ability to do a rehandshake from its own side, but always lets the client do it if it wants to.
It isn't easy to find details about this. And the only place where I have found i little bit of details says "Enables rehandshake, allowing the ACE to send an SSL HelloRequest message to its peer to restart SSL handshake negotiation", so it might just be in that direction.
A followup question would be if it is possible to prevent the client from doing a rehandshake by a command in the ACE.
If this behaviour is not the intention this has to be a bug and I would go to the TAC with it.
I just want to know how the ACE is intended to work before I do that.
Best Regards,
/Torbjörn

How to Enable Authentication to Selected Users

1. How to enable SAP and AD authentication only for selected users in infoview login page ?
2. How to disable(remove) enterprise options in down arrow selection in infoview login page for some users?
We have to make some changes in web.xml?
Can anyone help me out.
Thanks!
Milton

You have to enable authentication for your application.
However, for the public pages, you disable this by setting the page's security attribute Authentication to "Page is public".

How to disable parent window while popup window is coming

Hi,
I am working on Oracle Applications 11i.
I am able to get the popup window using the Java script in the controller.
Please see the below code for the reference.
String pubOrderId = pageContext.getParameter("orderId");
StringBuffer l_buffer = new StringBuffer();
StringBuffer l_buffer1 = new StringBuffer();
l_buffer.append("javascript:mywin = openWindow(top, '");
l_buffer1.append("/jct/oracle/apps/xxpwc/entry/webui/AddAttachmentPG");
l_buffer1.append("&retainAM=Y");
l_buffer1.append("&pubOrderId="+pubOrderId);
String url = "/OA_HTML/OA.jsp?page="+l_buffer1.toString();
OAUrl popupUrl = new OAUrl(url, OAWebBeanConstants.ADD_BREAD_CRUMB_SAVE );
String strUrl = popupUrl.createURL(pageContext);
l_buffer.append(strUrl.toString());
l_buffer.append("', 'lovWindow', {width:750, height:550},false,'dialog',null);");
pageContext.putJavaScriptFunction("SomeName",l_buffer.toString());
But here the problem is, even though popup window is there, i am able to do the actions on the parent page.
So how to disable the parent page, while getting the popup window.
Thanks in advance.
Thanks
Naga

Hi,
You can use javaScript for disabling parent window as well.
Refer below link for the same:
http://www.codeproject.com/Questions/393481/Parent-window-not-disabling-when-pop-up-appears-vi
--Sushant

How to Disable "Auto Align" in [System Pref.] - [Display] - [Arrangement]

Does anyone know How to Disable "Auto Align" in [System Preferences] -> [Display] -> [Arrangement]?
It always want to align the two screens from the top when they are lined up close together and I need them to be aligned from the bottom. Since the resolution heights are so close together (1080 & 1050) it does not allow one to align side by side from the bottom as it prioritizes top alignment.
I guess I'm looking for a script to disable this feature.

Anyone got any ideas?

How to disable authentication in CQ?

Similar Messages

Maybe you are looking for