D3web: How-To Secure A KnowWE Installation

This page (revision-11) was last changed on 16-Oct-2026 10:32 by Albrecht Striffler

This page was created on 06-Jan-2013 15:49 by Daniel Zügner

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version	Date Modified	Size	Author	Changes ...	Change note
11	16-Oct-2026 10:32	1 KB	Albrecht Striffler	to previous	Install.jsp is gone from current KnowWE; replace the default admin hint; remove public todo
10	06-Jan-2013 15:49	1 KB	Jochen Reutelshöfer	to previous \| to last
9	17-Dec-2012 21:11	1 KB	Albrecht Striffler	to previous \| to last
8	17-Dec-2012 21:08	1 KB	Albrecht Striffler	to previous \| to last
7	17-Dec-2012 21:08	1 KB	Albrecht Striffler	to previous \| to last
6	17-Dec-2012 18:47	1 KB	Jochen Reutelshöfer	to previous \| to last
5	17-Dec-2012 18:46	1 KB	Jochen Reutelshöfer	to previous \| to last
4	17-Dec-2012 18:42	1 KB	Jochen Reutelshöfer	to previous \| to last
3	17-Dec-2012 18:40	1 KB	Jochen Reutelshöfer	to previous \| to last
2	17-Dec-2012 15:14	1 KB	Daniel Zügner	to previous \| to last
1	06-Jan-2013 15:49	1 KB	Daniel Zügner	to last

Page References

Incoming links	Outgoing links
How-To Secure A KnowWE Installation How-Tos	How-To Secure A KnowWE Installation

1		−	%%(color: red)
2		−	__Deprecated! Needs review.
3		−	%%
4	1		To secure a KnowWE(JSPWiki) installation, you have to edit two files:
5	2
6		−	* {{jspwiki.properties}}: at the very bottom uncomment the line {{spwiki.approver.workflow.saveWikiPage=Admin}} to enable the forced approval of new user accounts by an admin. (Make sure there is an 'Admin' group)
	3	+	* {{jspwiki.properties}}:
	4	+	** at the very bottom uncomment the line {{jspwiki.approver.workflow.saveWikiPage=Admin}} to enable the forced approval of new user accounts by an admin. (Make sure there is an 'Admin' group)
	5	+	** make sure the option {{allowHTML}} is set to {{false}}
7	6
8	7		* {{jspwiki.policiy}}: comment the permissions of 'Anonymous' to disable anonymous editing
9	8		before:
	9	+	%%prettify %% after:
10	10		%%prettify {{{
11	11		grant principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
12	12		permission com.ecyrd.jspwiki.auth.permissions.PagePermission ":", "modify";
13	13		permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
14	14		};
15		−	}}}%% after:
16		−	%%prettify {{{
	15	+	}}}%%
	16	+
	17	+	{{{
17	18		grant principal com.ecyrd.jspwiki.auth.authorize.Role "Anonymous" {
18	19		// permission com.ecyrd.jspwiki.auth.permissions.PagePermission ":", "modify";
19	20		// permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages";
20	21		};
21		−	}}}%%
	22	+	}}}
22	23
	24	+	* {{Install.jsp}}: KnowWE releases up to 2026.7 still contain it; delete the file from the root folder of the web application.
	25	+
	26	+	* Admin accounts: Make sure every account in the group ''Admin'' has an individual, strong password before you go online.
	27	+
23	28		After that, restart the container and the wiki is secure.
24	29
25		−	<tags>HowTo</tags>
	30	+
26	31		%%tags
27		−	howto
	32	+	howto security
28	33		%
29	34

Page revision history

Page References

Annotate

Version management