AEM Login button issue in crxde

[subrato_kha]

Hi All,

Recently we have installed AEM 6.5.5 SP and the login option is not visible anymore though CRXDE. Has anyone faced this issue. 

@kautuk_sahni 

 

[ChitraMadan · Accepted solution]

Hi @subrato_kha ,

“The login and logout buttons have been removed on purpose from CRXDE for security reasons (internal ID: GRANITE-27790). Back ported to AEM 6.5.5.0 as part NPR-33521.”

Workarounds:

https://<IP>:<PORT>/libs/granite/core/content/login.html
login and then navigate to /crx/de

https://<IP>:<PORT>/libs/granite/core/content/login.html?resource=crx/de

For Publisher

https://<IP>:<PORT>/crx/packmgr/index.jsp

login, then navigate to /crx/de

Please refer to this article for full details

https://blogs.perficient.com/2020/06/16/how-to-easily-access-crx-de-on-adobe-ams-after-aem-6-5-5-upg...

[subrato_kha]

@ChitraMadan : Dont know how removal of login button from CRXDE is protecting when we can login via package manager

[vanegi]

Hi @subrato_kha,

This is to reduce attack surface, CRX DE Lite should only be accessible to logged-in user.

Acceptance criteria as per GRANITE-27790 are as:

~ anonymous users cannot use features of CRX DE Lite (both UI and API)
~ the feature is configurable
~ default installations have safe config (anonymous access is blocked)

We have a doc bug CQDOC-16016 raised for this to include this behavior available on our official documentation link. 

Thanks!!

[subrato_kha]

@vanegi the feature is configurable means i can enable the login option in CRXDE Lite ?

[Peter_Grape]

I would also like to know what is configurable, can we re-enable it again?, if so how, since this causes a real hassle for us on publish servers, security or not.

[turbotad]

@Peter_Grape as far as I know, this is not configurable. This was intentionally removed in AEM 6.5.5 along with PackageShare. http://www.jetteroheller.com/package-share-discontinued-on-aem-6-5-5-0-aem-6-5-sp5/