Access to Portal forums via direct link - no authentication

[Former Member]

Hi we are using Forums add-on of version FORUMS 7.30 SP7.

The Forums are running on our intranet portal which is using SPNEGO for Kerberos SSO.

All this works fine except the case when email notification is sent to the forum's user.

The user receives something like following link:

http://intranetportal.company.com/forums/forum.jspa?forumID=8

When he/she follows the link, no authentication is performed and user is logged in via Guest user with following error:

Error: You do not have permission to view the requested forum or category

We would like to benefit from Kerberos SSO and let the users to login directly to Forums application via received link.

What needs to be done in order to push forums to authenticate user using SPNEGO?

Please advise.

Kind regards,

Evgeni Vekua

[Former Member · Accepted solution]

Disallow anonymous access. Set the forum system property

sap.anonymous.enabled = false

It is the default value. If it the value is already set to false then check the forum permissions. You could remove all permissions from User Type "Anyone".

[Former Member · Accepted solution]

Thanks for fast and helpful answer!

In our case (forums ver 7.3) the property "sap.anonymous.enabled" was not in the list of the forums properties. The users type "Anyone" by default have all permissions "revoked".

I've created the property with value "false" and it started to work immediately without app or server restart. Not much doc about this property only once briefly mentioned in the note.

Note 1727364 - Managing Forums System Properties

Thanks again.

Evgeni.