Public content not accessible for guest user

Hi,
I have 2 environments with having Guest role (read on Public SecurityGroup).
Ideally public content should be accesible by any guest/annonomous users.
Environment 1)
UCM with SSO(kerbarose based)
When i access public content with any guest/annonomous user its not accessible
Environment 2)
UCM with out SSO
When i access public content with any guest/annonomous user its accessible
Did any one faced this problem.
Any help is highly appreciable.
Note: Accounts not enabled
Thanks,
Vijay

It seems like your Kerberos SSO reject anonymous users, rather than give the 'Guest' role. Not sure if anything can be done about it at UCM side.

Similar Messages

ESS Busness Package Content Not Accessible For Delta Copy Role

We are implementing EP 6.0 connected to an ECC 5.0 backend System. We have imported ESS Business Package 60.2 into the portal. If I assign the ESS role "out of the box" (PCD folder structure: CONTENT PROVIDED BY SAP => END USER CONTENT => com.sap.pct.ess.employee => com.sap.pct.ess.roles => Employee Self-Service) to the Everyone Group, the content displays correctly. I had to set the Web Dynpro System Permissions for the End User to get this to work (Everyone Group => Administrator None, End-User Enabled) but did NOT have to set any Permissions on the role or its parent folders. I made a delta copy of the ESS User Role and placed it in a customization folder in the PCD and then deleted some of the worksets from the delta copy. The remaining worksets, roles, iviews, etc in the delta copy role are located in the PCD in folder structure: CONTENT PROVIDED BY SAP => END USER CONTENT => com.sap.pct.ess.employee. The Web Dynpro System Permissions for the End User are set(Everyone Group => Administrator None, End-User Enabled). The ESS navigation tabs are visible as well as the Overview page but none of the area group pages or services will display. I have tried setting End-User permissions on the PCD folder that contains the delta copy role but it still will not work. Any ideas?

HI,
Please send me the best practice you use to create ESS role and workset.
thanks,

Logic Additional Content not installing for all users

I've got a MAC installed on an Active Directory domain. If I log in as the local administrator account, Logic runs fine, but if I log in as any network users, it loops around the 'downloading content' loop for ever. I've downloaded the .pkg files separately but when I go to run them, it prompts me for credentials and whatever I use, it just crashes out. Any ideas how to progress this?
Thx

I am experiencing the same problem on my LAN. Administrator account the app works fine, end users sign in with non admin accounts and it will not work.
I spent some time reading online and found the following instructions on the NET. I tried them and I thought it worked because I was able to log on as a non admin user test account and the flash player worked just fine.
Log in as Admin
2. Download the following zip file from here:
www.supportflash.com/reset_all.zip
3. Unzip this folder onto your desktop.
4. Drag both files ‘reset_min_all.cmd’ and
‘subinacl.exe’ to your
desktop.
5. Run the reset_min_all.cmd file.
6. It will open a DOS like terminal and start
running through registry
keys.
7. When it is finished it will say “press any key
to continue”.
8. At this point you can install the latest Flash
Player:
for Internet Explorer:
http://www.adobe.com/support/flashplayer/ts/documents/tn_19166/Install_F
lash_Player_9_ActiveX.zip
other browsers:
http://www.adobe.com/go/getflashplayer
9. Check that Flash Player is working for the
Admin.
10. Check that Flash Player is working as the
other 2 users.
I hope this information helps. Feel free to reply
if you need further
assistance on the issue discussed here or file
a new case if you want to
report a new issue in the Support Portal:
I also found 6 different versions of Version 8 that supposedly does not require Admin priveleges but it does. Back to the drawing board.

Public Folders not accessible as Guest

Having a problem connecting to Public folders as Guest on certain Mavericks iMacs [10.9.2] over the company LAN.
The network has no problems, no IP conflicts. There are other 10.9.2 Macs that can have their Public Folders accessed. There is no discernable difference between the computers, some are older that have been upgraded to Mav, others are new and came with Mav installed.
I've created different user accounts on the problem Macs and the result is the same. Changed the IP addresses, nothing.
I can connect to these Macs with admin user credentials and access the Public Folders that way, but it's kind of contradictory. This for me points away from the network and to the Macs themselves. Any ideas would be helpful.
Regards.

Thanks again Sterling, is there anyone near you who is familiar with Kerberos? Here is some Console details from the computer I am trying to access as guest:
14/04/2014 18:07:47.823 digest-service[320]: digest-request: od failed with 2 proto=ntlmv2
14/04/2014 18:07:47.823 digest-service[320]: digest-request: user=\GUEST
14/04/2014 18:07:47.824 digest-service[320]: digest-request: kdc failed with 36150275 proto=unknown
14/04/2014 18:07:47.824 digest-service[320]: digest-request guest: ok user=DAVE-MORRISSEY\GUEST proto=ntlmv2 flags: NEG_KEYEX, ENC_128, NEG_VERSION, NEG_TARGET_INFO, NEG_NTLM2, NEG_NTLM, NEG_TARGET, NEG_UNICODE
14/04/2014 18:07:54.454 digest-service[320]: digest-request: uid=0
14/04/2014 18:07:54.454 digest-service[320]: digest-request: init request
14/04/2014 18:07:54.456 digest-service[320]: digest-request: init return domain: DAVE-MORRISSEY server: DAVE-MORRISSEY indomain was: <NULL>
14/04/2014 18:08:02.468 kdc[93]: Got a canonicalize request for a LKDC realm from local-ipc
14/04/2014 18:08:02.468 kdc[93]: LKDC referral to the real LKDC realm name
14/04/2014 18:08:02.469 kdc[93]: AS-REQ davemorrissey@LKDC:SHA1.4FD5C7E5DC3FDB1A8E6B55B1AD6DF4B577C2CCE9 from local-ipc for krbtgt/LKDC:SHA1.4FD5C7E5DC3FDB1A8E6B55B1AD6DF4B577C2CCE9@LKDC:SHA1.4FD5C7E5DC3 FDB1A8E6B55B1AD6DF4B577C2CCE9
There are many Apple Discussions dating back to OS Tiger about LKDC and SMB issues, none that I read refer to guest logins, but they are centred around authentication.
When I guest access my own Mac [Mav upgrade] from the above machine [Mav out of the box] it is successful and there are no Console entries.

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options.

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options. I was able to select the account under "parental controls", but again, could not delete it. Why Apple? Why?!!????

SOLVED Ok. I actually was able to disable it. I had to actually log in as the guest user to make it accessible in the preference window. Then I disabled it and logged out. Apologies if this was obvious for some people, but I have had some sort of issue with something every update since Snow Leopard.

ISE DNS Question For Guest Users

Before I ask the question, let me explain our environment.
We have an internal 5508 controller. We also have a 5508 DMZ controller that acts as an anchor controller. Guest traffic is piped to the DMZ controller which provides the DHCP address, and DNS server information. The DNS that we provide is our ISP provider DNS server information, to our guest wireless users. There's no need to provide them with our internal DNS server information, since they're only going to the internet.
Here's my dilema. We are now implementing the ISE appliances so that we can better control our guest users. Currently, our guest SSID is wide open. With the ISE, we're going to initially only do self-registration for guest users. They will connect to our broadcasted SSID, when they connect to it, they will be presented with the guest portal. There will be a link that allows them to go to a self-registration page. The dilema is that the ISE appliances are a part of our internal 10.x.x.x network. Since the guest users will have our ISP's DNS servers, our ISE devices will not be able to be found for the redirection to the portal.
Would anyone have any suggestions on this? I don't want to advertise our internal DNS servers to guest users. Thanks for any help!

I haven't tried this before but ISE does actually allow you to assign physical ports to the Guest HTTP portal. You can see this under Administration > Web Portal Management > General > Ports. Perhaps you can:
1. Take a physical port from your appliance and connect it to the DMZ
3. Give it an IP address that is resolvable from the public DNS server
3. Assign that physical port only to the guest HTTP service
On the other hand, you could also build a DNS server just for the guest users and stick in the DMZ :)
Not sure if this helps but just some food for thought.
Thank you for rating helpful posts!

OpenNewWindow for Guest Users?

In the PTConfig.xml, I set OpenNewWindow=1 which should launch Knowledge Directory documents into a new window. Restarted IIS after the modification, but this does not seem to work for Guest users (or any users that I've encountered). The comment indicates that the user personal preference overrides this setting. If I modify and save the Document Display Options, the behavior is changed but this is not even possible with a Guest user.
Ideas?

I understand that updating the Default Profile will only affect users created after that change is made.
The user account I am concerned with at this point is the Guest account. Right now the only public access to our portal is through the unauthenticated Guest access.
I have updated the Guest user's account and selected the option to open documents in a new window for the Guest user. But when accessing the Knowledge Directory as the Guest user, the documents are still opening in the same/current window.
BTW - We are running 5.0.4

Files to download without any permissions for guest user.

Hello, i have created a KM Navi Iview, with path to /documents/.../...
When i go to
http://portal/irj/portal/anonymous i see a list of files, but i can copy,delete and rename files (permissions for guest are: read), how can i solve this, if i need only download permissions for guest?

Hello Artem,
Please do not remove the Guest User from its groups.
The Guest User is an integral part of the "Anonymous Users" group which ultmately falls under "Everyone" Group. How did you remove Guest User as only Config tool allows you to do that.
What I suggest is make a Portal Group of Users and add all your regular users to it. Give Read/Write permission to this group. Then add only Read permissions for Anonymous Users Group.
Hope this helped.

Language choice for Guest Users

How to the remember language choice for Guest Users? You cannot save perferences in Guest user, but the default language is not desired.

If you are using the Win8 WDK or later, you should be able to use a very limited C++ and the tools will flag constructs that are not supported. The discussions you found are mostly still valid, there is no new and delete (unless you roll your
own), but you can use simple classes and C++ syntax. Basically take a look at the old forum post
https://social.msdn.microsoft.com/Forums/windowsdesktop/en-US/452f4f41-6a81-4cfc-a5b6-46e0b76dfbe5/support-of-vs2011-in-c-for-device-drivers?forum=wdk
Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

Thunderbird Mission Control Desktop/AutoConfig not working for some users

I have the file: "C:\Program Files (x86)\Mozilla Thunderbird\defaults\pref\custom.js"
It contains:
pref("general.config.obscure_value", 0);
pref("general.config.filename", "TMcustom.cfg");
I have the file: "C:\Program Files (x86)\Mozilla Thunderbird\TMcustom.cfg"
It contains:
var promptService = Components.classes["@mozilla.org/embedcomp/prompt-service;1"]
.getService(Components.interfaces.nsIPromptService);
promptService.alert(null, "title", "testing");
For most of my users the alert pops up fine when I start Thunderbird, but for a few it doesn't. All of the machines where setup with the same install script. If I log into one of the machines where it's not working as a different user, then it works fine, so I know the files are in the right spot. So why would it not work for specific users? Is there something in the user's Windows profile that could cause it to not work? Or are there any other suggestions?

As it turns out this was a known bug that was corrected in the recent release of Java 7_65 and Java 8_11. Here is a link to the bug description in the database.
Bug ID: JDK-8019274 RMI thread can no longer call out to AWT thread for webstart app

After Upgradation BPF is not working for some users

Hi All,
We have recently upgraded from BPC 5.1 to 7MS SP7. we are having multi server setup with one application / reporting server (windows 2003 and one sql server 2008 (windows 2003 64 bit).
Intially before upgradation we don't have any issues with BPF and it worked fine for all users. But post upgradation tasks within the BPF does not work for other users except for the first two people who first used it. Other users have the same rights as the ones who can access the tasks.
when they click on the link it gets them to eExcel and the right application but doesnt open the package or report assigned to the task. It doesn't give us any errors, on the status bar we get a message finalising but does not getting any thing.
Any inputs ??

Hi,
Are you sure that those users have installed BPC 7 SP7 clients on their machine? Meaning that you uninstalled 5.1 clients and installed the new client from http://servername/Osoft?
If yes, you should maybe run a client diagnostic on the machines and also check the Management Console for any error messages.
Hope this will drive you to a potential solution.
Best Regards,
Patrick

Line items are not appearing for some users

Hi
In one module pool program some line items are not appering for specific users. For Ex: Out of 5 line items user1 is able to see only 3 and user2 able to see all the line items. what might be the reason.
Regards
John.

Hi,
What do you mean by line items? Are you talking about screen fields in your module pool program or output of the program?
Please clarify your issue.
Regards,
RS

MAM application is not working for some users

Hi All,
Tha MAM application is not working for some users.Different users have different workcenters other than that I dont see any other change. When I run MAM30_090_GETLIST in the backend I can see the no of customized users.But I cant see same no of users in the MEREP_207 table for the Syncbo MAM30_090 and strcture id TOP in the middleware. There is a data when I checked under worklist monitor for that user. But neither the MAM application nor MAM data is downloading to that device.
If I use different user on the same device I can see the MAM application and MAM data.
What could be the wrong in this case. Any help would be highly appreciated.
Mobile Client:MI 70 SP 15 Patch 0 Build 200802280918
Middleware:SAP NetWeaver 2004s with Patch leve 15
Backend:SAP ECC 6.0
Application:MAM 3.0
Thanks and Regards,
Ameer.

Hi,
from your description the source of your issue is quite obvious: some of the MAM users configured in spro are not configured properly.
For T01 SyncBos the number of TOP records in merep_207 MUST be the same as number of headers returned by an appropriate getList FM in the backend.
You need to solve this before you can go any further.
Reason why a record is not recorded in MEREP_207 - getdetail failed for whatever reason. So execute MAM30_ML_getdetail for each of the users that is not replicated in the middleware and check if there are errors in RETURN table. If there is no error - one of the common reason for replication fail is when there are records in item tables that have duplicate primary keys.
Regards,
Larissa Limarova

Fingerprint utility is not working for normal users - Tecra M11

Hi All,
I installed windows 7 pro in Tecra M11 laptop and the Toshiba finger print utility is not working for normal users.
It is working only for domain administrators. The TFPU is not working for, normal domain users, local users, local administrators. If we run the utility it will ask to enter the windows password and once we applied the password then the message saying "entered password is not valid" will prompt even if we are trying to use the utility first time.
If we try with a domain admin account it will work without any problem. Can somebody help me to trouble shoot this issue?
Thanks.

People nowadays experienced that no matter How many times we glide our finger it have no response.In this instance, you might be very afraid of Windows password lost by reason that there is a plenty of important data on your PC.
Then what should you do? One choose is fix the Fingerprint scanners, but this method will cost a lot of money. The other is use the Windows password function to solve the problem. Certainly, this is a very safer, faster and easier to use method for you.
According my personal experience, you can try these three ways to re-access to your PC:
Method 1: Login with the default administrator account
* Step 1: Start Windows PC
* Step 2: When you can see the Windows login screen, press ctrl+alt+del keys Twice and it'll show Classic Login box
* Step 3: Type Administrator as Username and leave the password field blank
* Step 4: Press the Enter Key and then you can be able to login the default windows administrator account which is it created by default when install windows.
*Note:* This trick is only work for Windows XP. And when you input the key combination Please don't put the cursor on any account. And if you change the name or password before, you cannot login by this way.
Method 2: Use the previous password reset disk
This method describes how to create and use a password reset disk for a computer that is a member of a domain. You can use a Windows password reset disk to gain access to your Microsoft Windows Professional-based computer if you forget your Windows password. Please click here to learn more.
Method 3: Using Windows Password Unlocker
Using Windows password remove software is could be the fastest and easiest way for you to reset your Windows password while you didn't create a password reset disk before.
There are 2 options for you: recover Windows password with a bootable CD/DVD or recover Windows password with a USB flash drive.
Before starting, a bootable CD/DVD or USB flash drive and a computer with CD drive are required. (Internal CD drive and external CD drive are both OK.
Option 1: Recover Windows password by burning a bootable CD/DVD
Option 2: Recover Windows password by burning a USB flash drive
The whole Windows password recovery process can be divided to 3 big steps:
* >> Step 1: Burn a USB flash drive to remove lost Windows password
* >> Step 2: Set your target computer to boot from USB
* >> Step 3: Recover forgotten Windows password with the burned USB flash drive
In fact, all you need is a *Windows Password Unlocker www.passwordunlocker.com/windows-password-recovery.html which can help you directly reset your windows xp password, and then you can login your XP without a password required. Of course, there are also some other ways to do it, but this way may be most convenient one.

Synaptics touchpad on HP Mini 110 Windows 7 32 Bit - not working for one user - working for another

Hi,
I recently have an issue with Synaptics touchpad on HP Mini 110 Windows 7 32 Bit - NOT working for one user - working for another.
Windows 7 updates recently installed ???
By checking the device properties on the user that works - "Synaptics PS/2 Port Touchpad 13/10/2011 Version 15.3.29.0"
When the other user logs on, the touchpad works for a few seconds, then a displays a black square with a red diagonal line through it, then the touchpad won't respond. Trying to use the keypad to navigate to system diagnosics or anything to find further info is useless....

Hey eagle_no11,
Thank you for joining the HP Support Community!
I will do my best in assisting to hopefully get the TouchPad to work on the second user profile.
What I would like to start off with, is to restore the original Synaptics drivers onto the profile that is not working correctly. I have included the document Using Recovery Manager to Restore Software and Drivers (Windows 7).
Once you have installed the original drivers, you will need to complete all updates from both HP, as well as Windows. For these updates, if you open the HP Support Assistant, and select Maintain, you should see an option for updating.
Please let me know how these steps do work out for you.
Have a great day!
I worked on behalf of HP

Public content not accessible for guest user

Similar Messages

Maybe you are looking for