KB30305: How to Prevent the Windows Authentication Popup from Appearing When Users Try to Access MicroStrategy Web Administrator Page in MicroStrategy Web Version 9.4.1. And Later

 
SYMPTOM:
When users try to access the administrator page through the URL or by clicking on the "Go to administrator page" link on the projects page in Strategy Web version 9.x. the following popup appears which needs the users to type in the login credentials of the machine hosting Strategy Web server
 

 
Follow the steps given below in order to avoid the popup from showing up so that any user can access the Web admin page:

• Make a copy of the web.xml file located under the WEB-INF folder.
• Edit the web.xml file and comment out the security-constraint tag as shown below,

<!-- <security-constraint>
<web-resource-collection>
<web-resource-name>Administrator</web-resource-name>
<url-pattern>/servlet/mstrWebAdmin</url-pattern> -->
<!-- TQMS 245539: The following url-patterns are to prevent IBM WebSphere 6.0.2 security hole being exploited. -->
<!-- <url-pattern>/servlet/mstrWebAdmin/*</url-pattern>
<url-pattern>/servlet/mstrWeb/mstrWebAdmin</url-pattern>
<url-pattern>/servlet/mstrWeb/mstrWebAdmin/*</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>admin</role-name>
</auth-constraint>
<user-data-constraint>
<transport-guarantee>NONE</transport-guarantee>
</user-data-constraint>
</security-constraint> -->

• Save the file and restart the web server.

NOTE: The above change will allow any user to access the Web administrator page. If you want to customize the access to the Strategy Web Administration page refer to the 'Administering Strategy Web' -- 'Using the Strategy Web Administrator Page' section in the 'System Administration Guide'.
 
ADDITIONAL INFORMATION:
The Strategy SDK allows you to customize several Strategy products and extend and integrate the Strategy business intelligence functionality into other applications. However, before changing the way Strategy products look or behave, it is helpful to understand how the application is built. For more information regarding the Strategy products or the process of customizing Strategy products, please refer to Strategy Developer Zone (https://developer.microstrategy.com).
To access the Strategy Developer Zone, you must have access to the Strategy Knowledge Base, you must have purchased the Strategy SDK, and you must be current on your Strategy maintenance agreement. If you are a US-based business and believe that you satisfy all three of these conditions but you do not have access to the Strategy Developer Zone, please contact Strategy Technical Support at support@microstrategy.com or at (703) 848-8700. If you are an international business, please contact Strategy Technical Support at the appropriate email address or phone number found at https://www.microstrategy.com/us/services/support/contact.
CUSTOMIZATION WARNING:
This customization is provided as a convenience to Strategy users and is only directly applicable to the version stated. While this code may apply to other releases directly, Strategy Technical Support makes no guarantees that the code provided will apply to any future or previous builds. In the event of a code change in future builds, Strategy Technical Support makes no guarantee that an updated version of this particular customization will be provided. In the event of a code change in future builds, Strategy may not be able to provide additional code on this matter even though this customization is provided at this time for this specific build. For enhancements to this customization or to incorporate similar functionality into other versions, contact your Account Executive to inquire about Strategy Consulting assistance.