title: How to force authentication to Archiva internal repository?
body: <p>big problem. My Archiva internal repo (and maybe snapshot repo, although I don't know yet as I have not put any snapshots in there yet) seem to be accessible to the public.</p>
  
  <p>I.e. if someone wanted the surefire plugin from my repo, they could download it by simply going to <a href="https://my.repo.url.com/archiva/repository/internal/org/apache/maven/surefire/surefire-junit3/2.7.1/surefire-junit3-2.7.1.jar" rel="nofollow">https://my.repo.url.com/archiva/repository/internal/org/apache/maven/surefire/surefire-junit3/2.7.1/surefire-junit3-2.7.1.jar</a></p>
  
  <p>They could download the file right then and there. Would be a shame if there were actual project jar's and such in there also available to the general public and I can't seem to figure out how to disable private access to save the life of me.</p>
  
  <p>I authenticate via LDAP.</p>
  
  <p>Thanks!</p>