nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Disabled users are able to login in share

shyam2016

Hi,
I have configured external and kerberos authentication along with AlfrescoNtlm.
I have created a TEST user in share and the authentication process works fine and TEST user is able to login in share.
Now if i disable TEST user in share, still TEST user is able to login in share.
So is there any configuration to prevent disabled users to login in share and alfresco?
if i need to customize the code where i can do that.
appreciate if you can guide me with this issue.
Thank you !

Find more posts tagged with

Comments

ddraper

This sounds like a bug in Alfresco as I would expect/hope that a disabled user would not be able to log in - however I can't say for certain. I would suggest raising an issue in JIRA to report this problem as it is likely to be something that needs to be investigated.

douglascrp

shyam2016 _

As you said, you configured Alfresco to authenticate externally, and you are saying that you disabled the user in Alfresco.

I guess the problem is that for the external authentication, the user is active.

Can you try to disable the user there instead of Alfresco?

If that does the trick, I guess you should also enable the synchronization, and with that, you will have the user also disabled in Alfresco when the synchronization runs.

shyam2016

Thank you Douglas, But we don't want to disable user the in external system

, because if we disable user in the external system user will not be able

to login in another applications also. because that is a central system.

douglascrp

In that case, I think you should be using the local authentication first.