disabling guest user in prod

[Former Member]

what are the impacts of disabling/deleting default guest user in BO XI R2 SP1 in a Unix solaris environment.

[amrsalem1983 · Accepted solution]

you can just login to the CMC, and go to users

find the user guest

check "Account is disabled"

good luck

Amr

[Former Member · Accepted solution]

I know how to disable guest account or any other account.

what I am asking is to explain the impacts of the same a bit more than what was explained by Srinivas Ganapathi.

[Former Member · Accepted solution]

Prashant,

BOE has it's own form of SSO using Enterprise Authtication (via the SDK). This requires the Guest account to be enabled and without a password. So, unless you have a custom application that use the BO SDK and Enterprise Authentication to implement SSO, you should be fine.

Since you did not mention your Authentication plugin, I'll assume it's LDAP. LDAP with SSO should work fine with the Guest account disabled. For that matter, any implementation of SSO is ok as long as it's not Enterprise Authentication (with SSO).

Srinivas

[Former Member · Accepted solution]

Please tell how to check what Authentication plugin we use.

Beside I can tell that we use siteminder authentication to login to Infoview.

[ted_ueda · Accepted solution]

You require the "Guest" account for the following:

1. You have clients logging onto your Enterprise deployment using the "Guest" account.

2. You have some custom Java, .NET or COM Report Application Server (RAS) SDK applications - likely migrated from RAS 9, Crystal Enterprise 10 Embedded, or Crystal Reports Server XI Embedded, that uses what's called "unmanaged reporting" (i.e., RPT files not published to Enterprise, but copied to the OS file structure).

You will have to ask your IT deployment team whether either applies to you.

Sincerely,

Ted Ueda

[Former Member · Accepted solution]

Login to CMC. Click on Authentication under Manage. You will see tabs for LDAP, Enterprise, WindowsAD, Windows NT (WindowsAD and WindowsNT only show if BOE is installed on some flavor of Windows). Switch to each tab and see which one(s) is(are) enabled.

[Former Member · Accepted solution]

Thanks Srinivas for your cooperation.

I checked the tabs and only Enterprise Tab is enabled. For your information we use Trusted Authentication to login to Infoview that is through siteminder.

WindowsAD, Windows NT are not even present so no question of that.

Lastly from LDAP tab I saw that it is not yet configured.

Please provide if you have some documentation regarding the concepts of this authentication.

Thanks again for your explanations.

[Former Member · Accepted solution]

If you do not see WindowsAD/NT, you must be on a *nix platform.

There is unfortunately no further documentation besides the Administration Guide (and the training material from BO, if you have it).

You should probably open a message with SAP and ask them if they have anything further.

[BasicTek · Accepted solution]

If you are logging in with guest then disabling the guest account will prevent that. If you are using trusted auth and anything else other than guest (by your description I would guess enterprise accounts). Then disabling the guest account will have no affect on your SSO.

Regards,

Tim

[Former Member]

Anonymous Single Sign On (Enterprise Authentication) will fail without the Guest account (or if the Guest account has a password). So, if you don't use Enterprise Authentication or don't require anonymous SSO, the Guest account can be safely disabled.

[Former Member]

Please explain it a bit more. Does that mean that we will not be able to login using SSO. Right now we use site minder authentication to log on.