nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Worksite Web login control

OlivierTikit

Hi Guys,
One of our customers set up a Worksite Web Server dedicated to external users only (marked as "external" in the DBAdmin). Internal users have to connect to another Worksite Web Server which is in the LAN and if they want to work from home they will have to connect to this internal Web Server through VPN access.
Now, just in case an external user manages to get the login/password of an internal user, we would like to reject connection requests from internal users to the Web Server reserved for external users.

I was wondering if there would be a parameter in the WWeb options.xml configuration file to refuse internal connections:

<security external="1" ip-check="0" show-login-username="0" document-security-on-move="leave" document-security-on-checkin="leave" document-security-on-copy="leave" allow-free-format-user-id="0" document-class-override="0" document-class-prompt="0">

Thanks for any idea,
Cheers,
Olivier

Find more posts tagged with

Comments

dabird

I have some good news and bad news. First, the bad news: You can't use the security node in options.xml to achieve this. ip-check=1 looks up allowed addresses, not disallowed addresses. You would use this when you want to limit access to a subnet and its IP addresses.

Now for the good news: You can accomplish this, but it will require a little bit of coding on your part. You need to modify the WorkSite Web authentication module to handle requests based on IP address and user name. We recently completed a mini webcast on how to customize the authentication module for WSW. You can find the recording @ http://devnet.interwoven.com/site.fcgi/webcasts/docs/webcast-recordings.html. It's the third item in the list entitled "Creating a Custom Authentication Module for WorkSite Web 8.1".

OlivierTikit

Hi:

We are going to start working on that solution. The first problem that we have found is that we need the AuthenticationModule code. Could you send it, please?. Could you provide us as well any information that can help us with this matter?

Thanks in advance

dabird

You must contact Tech Support to get the code; I cannot provide it to you directly. As for additional information, take a look at the webcast that I mentioned in my previous post. The webcast demonstrates how you would override the authentication process. If that still does not help you, please provide more specific details about what you need help with.