http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8519 <pre> I switched to Mulgara 2.1.12 for my remote Mulgara triple-store. I saw the same results as with Mulgara 2.1.13. I am running Fedora Commons 3.6.2. Chuck ________________________________ From: Schoppet, Chuck Sent: Friday, May 17, 2013 9:44 AM To: fedora-commons-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org&lt;mailto:fedora-commons-users&lt; at &gt;lists.sourceforge.net&gt; Subject: Using fedora-rebuild.sh on remote Mulgara 2.1.13 triple-store Are there any known issues with running fedora-rebuild.sh on Mulgara 2.1.13? We have setup Mulgara 2.1.13 in its own JVM on the same server as Fedora. The fedora program to rebuild the Mulgara triple-store (fedora-rebuild.sh) builds the triple-store without displaying warnings or errors. Fedora's tomcat starts up and the triples can be viewed and changed using fedora REST interfaces: admin and risearch. However, the Mulgara data directory (/app/local/mulgara/fedora/) is now empty. Using the find command, I did not find any active "lucene" directories on the file system</pre> Schoppet, Chuck 2013-05-20T17:40:18 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8518 <pre>Forgive my slowness in putting these concepts together, but I might need some more hints on how to write a custom filter. What I need is to pass: - a user ID (the current Fedora user) - an action name (a Fedora/external app mapped action, or a CRUD action) - a resource ID (a field in a datastream in the Fedora object being accessed, referring to a Pkey in the external app) - a datastream ID (specific datastream or field being accessed by the Fedora user) to my external API (along with a username/pass for Fedora to access that API). I should get back a "permit", "deny", "not applicable" or "indeterminate" response from the external API and use that as a policy result - which I might have then to combine with other Fedora-specific policies. How can I create a request with those data in Fedora? Do I have to create a new Java class and refer to it in config-pdp? Thanks, s ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platf</pre> Stefano Cossu 2013-05-20T15:54:42 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8517 <pre>Are there any known issues with running fedora-rebuild.sh on Mulgara 2.1.13? We have setup Mulgara 2.1.13 in its own JVM on the same server as Fedora. The fedora program to rebuild the Mulgara triple-store (fedora-rebuild.sh) builds the triple-store without displaying warnings or errors. Fedora's tomcat starts up and the triples can be viewed and changed using fedora REST interfaces: admin and risearch. However, the Mulgara data directory (/app/local/mulgara/fedora/) is now empty. Using the find command, I did not find any active "lucene" directories on the file system. After Fedora and Mulgara are shut down and restarted, the triples are gone. When an object is changed through the admin interface, Mulgara builds the data directory with lucene, temp, xaStatementStore and xaStringPool directories. After restarting Fedora and Mulgara , the triples in the triple-store remain. Chuck This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthor</pre> Schoppet, Chuck 2013-05-17T13:44:06 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8516 <pre>*FOR IMMEDIATE RELEASE* * * May 17, 2013 Contact: Carol Minton Morris cmmorris-db6tg5YPMqnNLxjTenLetw&lt; at &gt;public.gmane.org Read it online: http://bit.ly/YOlSyI *Fedora Futures Project Welcomes New Technical Lead* * * *Winchester, MA * The DuraSpace organization and the Fedora Futures Project are pleased to announce that Andrew Woods will take over as the new Technical Lead for Fedora effective May 15, 2013. In this role he will provide technical leadership for the Fedora Futures Project. Woods joined the DuraSpace organization in early 2009 as a Fedora committer. Since then he has helped establish the D.C. Area Fedora Users Group, been a project co-lead on DuraCloud, and worked in various technical and advisory capacities within DPN, APTrust, Chronopolis, and NDSA. The Fedora Futures project is currently underway with Edwin Shin, MediaShelf, coordinating development leading up to a planned alpha Fedora 4 release this summer. Recent work has been focused on running Fedora in a cluster to provide greater durabil</pre> Carol Minton Morris 2013-05-17T12:48:34 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8515 <pre>I guess I'll have to dig more into the FeSL documentation on how to write a custom filter - but thanks, that is a great starting point. We need to check authorization against an external application because that's where the permissions system has always been kept, and it's so complex that we cannot replicate it. Stefano p.s. Sorry for the messy chain, I was getting these e-mails in digests. On 5/16/13 11:59 AM, fedora-commons-users-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org wrote: ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d </pre> Stefano Cossu 2013-05-16T20:39:52 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8514 <pre>Please excuse the provincial nature of this post,… Please join us Monday, June 3, for a full-day unconference to share ideas, techniques, and solutions with fellow Fedora users. NEFUG welcomes content managers, metadata specialists, programmers, and anyone involved in curating, managing, and delivering digital content in a Fedora-based environment. Details about the day are available at http://blogs.lib.uconn.edu/nefug/nefug2013/ Thanks to Five Colleges, Inc., and with additional support from Northeastern University and the University of Connecticut, there is no registration fee, and morning coffee/snacks and lunch will be provided. So that we can insure adequate meeting space and provide enough food for everyone, please register&lt;https://docs.google.com/a/mtholyoke.edu/spreadsheet/viewform?formkey=dF9PZ01CZUh5b2Zrd3hSLV9uRUE1Y0E6MQ&gt; by May 29th. We look forward to seeing you! -NEFUG 2013 Organizers (Greg Colati, Erin Fahy, Kelcy Shepherd, Patrick Yott) Patrick Yott Associate Dean for Digital Strategies</pre> Yott, Patrick 2013-05-16T19:08:35 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8513 <pre>I eventually opted for having all the data streams managed, mostly due to an unpredictable structure of the source URIs. It is good to know that I can have the HTTP auth option though. I was also testing Fedora's capabilities... Thanks, Stefano On 5/16/13 11:17 AM, fedora-commons-users-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org wrote: ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d </pre> Stefano Cossu 2013-05-16T16:59:35 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8512 <pre>That's an interesting, and tricky, use case. Any reason why you'd deliver that decision from an external application, and not in a fixed policy datastream? One approach occurs to me: have the external authorizing webservice return a XACML response to a query, then make the FESLPOLICY datastream an externally-managed datastream that points to your web service. This approach is pretty crude, and not without its problems, as I believe Fedora caches its policy evaluations. A custom attribute finder might do the job, too. Here's the wiki page on how FeSL implements Policies: https://wiki.duraspace.org/display/FEDORA36/FeSL+Authorization You may be be able to do more under the hood with the Sun XACML PDP evaluation engine API. Ben's approach is even more direct, if you prefer to skip XACML altogether. </pre> Scott Prater 2013-05-16T16:34:27 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8511 <pre>Stefano- Depending on how much you need to have both XACML and the external authorization, you could probably just implement alternative authorization filters and wire them into the Spring configuration. With a couple of noteworthy exceptions, FESL expects the filters to do the authZ work (and deal directly with the XACML machinery). - Ben On Thu, May 16, 2013 at 12:17 PM, Stefano Cossu &lt;scossu-zfBRdVzM7aGHXe+LvDLADg&lt; at &gt;public.gmane.org&gt; wrote: ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alienvault_d2d_______________________________________________ Fedora-commons-users mailing list Fedora-commons-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.s</pre> Benjamin Armintor 2013-05-16T16:24:17 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8510 <pre>Hi there, My team and I are building a Fedora repository and we are starting to wrap our heads around FeSL and the XACML specifications. The repository we are building has to necessarily rely on an external application to apply some of its policies. The external application should be accessed via HTTP request with something like: "Can user John Doe read the EXIF data for image 12345ABC?" and receive a positive or negative outcome which will determine the result of the authorization policy. I have looked around on how to do this, but I'm not sure about how to approach the problem. Any suggestions? Thanks Stefano ------------------------------------------------------------------------------ AlienVault Unified Security Management (USM) platform delivers complete security visibility with the essential security capabilities. Easily and efficiently configure, manage, and operate all of your security controls from a single console and one unified framework. Download a free trial. http://p.sf.net/sfu/alie</pre> Stefano Cossu 2013-05-16T16:17:44 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8509 <pre>Please excuse any cross-posting. The University of New Hampshire Library seeks an experienced and self-motivated Web Developer for its Library Information Technology (LIT) unit. LIT provides desktop client support, hardware and software procurement and management, server administration, and web design and development in support of the Library's services to the University community. The Web Developer/Coder will be responsible for writing back-end code to support new web applications and search services for end users and Library staff under the direction of the Systems Librarian. Responsibilities: *All aspects of web application development, including defining requirements, writing code, testing, deployment, maintenance, and security *Auditing existing Library code for adherence to University IT security policy and best practices *Following department project management and prioritization methods *Developing and maintaining awareness of trends in web development generally and Library computing in part</pre> Wolff, Robert 2013-05-10T13:56:05 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8508 <pre>Stefano, I assume that some sort of access control in Fedora (a policy) will be applied to the Fedora external datastream or object, or that the repository itself will not be publicly exposed? Otherwise, Fedora basically becomes an open back window to access content that's protected by a locked front door. I think the primary reason why this issue hasn't come up before is because most repository owners have direct control over the objects within their repository, and can manage the authnz architecture to suit their own needs. If you have some degree of control over who can access the images on the backend webserver, then the simplest solution would be to configure the backend web server to allow requests from the Fedora host to pass through unimpeded, using IP access control. I took a look at the source code, and the method that makes the actual request is https://github.com/fcrepo/fcrepo/blob/master/fcrepo-server/src/main/java/org/fcrepo/server/storage/DefaultExternalContentManager.java li</pre> Scott Prater 2013-05-09T21:36:29 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8507 <pre> Currently it's under $100 per TB of disk. So, your immediate costs are not that high. You may be spending more by engineering a more complicated solution. Justin On Thu, May 9, 2013 at 4:02 PM, Stefano Cossu &lt;scossu-zfBRdVzM7aGHXe+LvDLADg&lt; at &gt;public.gmane.org&gt; wrote: ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. This 200-page book is written by three acclaimed leaders in the field. The early access version is available now. Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________ Fedora-commons-users mailing list Fedora-commons-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.sourceforge.net/lists/listinfo/fedora-commons-users </pre> Justin Coyne 2013-05-09T21:08:09 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8506 <pre>&lt; at &gt;Scott: I can't afford to have this datastream managed by Fedora, because it's several megabytes large and there are over a million of them. &lt; at &gt;Rich: the http://user&lt; at &gt;pass:/resource syntax works with cURL too, that's why I gave it a shot even though I don't know what Fedora actually uses to connect to remote servers. Your source link is very interesting though. I'll give it a look. I wonder how this hasn't been brought up before. Accessing resources through authentication seems like quite a common task to me, and I hoped I could do it without hacking the Fedora code. Thanks sc Stefano Cossu Director of Application Services, Collections The Art Institute of Chicago 116 S. Michigan Ave. Chicago, IL 60603 312-499-4026 On 5/9/13 3:45 PM, fedora-commons-users-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org wrote: ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to </pre> Stefano Cossu 2013-05-09T21:02:32 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8505 <pre> I can't afford to have this datastream managed by Fedora, because it's several megabytes large and there are over a million of them. &lt; at &gt;Ben: I actually figured out the certificate issue, but still if an image fails, I can see log reports mentioning the URL with username and password included. As said, the safest way I found is to have a redirect, so the end client can deal with authentication; but I'd prefer to have the resources as External ones so I can use Fedora as the only gateway to all resources. My question is: is there a plan to have Fedora support basic HTTP authentication through headers? By the way, I also found out that Fedora strips off the port number of the host when accessing an External resource. Thanks sc ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. This 200-page book is written by three acclaim</pre> Stefano Cossu 2013-05-09T20:30:47 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8504 <pre>Yes, in that sense it would be straightforward- though this question of where the credentials would be stored was one of things that derailed the feature in the first place! On Thu, May 9, 2013 at 4:40 PM, Rich d'Rich &lt;rich.d.rich-Re5JQEeQqe8AvxtiuMwx3w&lt; at &gt;public.gmane.org&gt; wrote: ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. This 200-page book is written by three acclaimed leaders in the field. The early access version is available now. Download your free book today! http://p.sf.net/sfu/neotech_d2d_may_______________________________________________ Fedora-commons-users mailing list Fedora-commons-users-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f&lt; at &gt;public.gmane.org https://lists.sourceforge.net/lists/listinfo/fedora-commons-users </pre> Benjamin Armintor 2013-05-09T20:45:16 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8503 <pre>AFAIK the username:password&lt; at &gt; syntax is a browser artefact that the Java HTTP access libraries (apache commons httpclient) that Fedora uses doesn't support. This also means that you can't do a server-server import where the source Fedora server requires authentication, and it causes problems with disseminators. However, looking at the code, most of the "wiring" is there: https://github.com/fcrepo/fcrepo/blob/master/fcrepo-server/src/main/java/org/fcrepo/server/access/DefaultAccess.java it just needs getDatastreamDissemination (around line 1145) to extract a username and password from somewhere and put it into ContentManagerParams. Ideally, there would be a configured table of known external servers and credentials that could be kept secure so passwords aren't bandied about. I may be wrong though and there's already a way to do this :-) On 10 May 2013 06:36, Scott Prater &lt;prater-63mtpxcE9Cs&lt; at &gt;public.gmane.org&gt; wrote: ------------------------------------------------------------------------------ Learn Grap</pre> Rich d'Rich 2013-05-09T20:40:14 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8502 <pre>Stefano -- Are you ingesting the datastreams as managed datastreams, or as redirect or external datastreams? If the former, once Fedora ingests the FOXML, the object is referred to by its internal Fedora URI, and no source URLs or passwords are exposed in any object export. If the datastreams are managed, then you may want to take a compromise approach: fetch them to the local machine using curl or some such tool, then ingest the local file. Once it's ingested, you can delete the local file. Managed datastreams are usually preferred to external or redirect datastreams; there are use cases for external and redirect datastreams (which is why they exist), but the normal case is to store datastreams as managed. </pre> Scott Prater 2013-05-09T18:36:47 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8501 <pre>Stefano- I remember some conversation a couple of years ago about supporting BASIC auth in services, but as far as I know they didn't go anywhere. Maybe another committer remembers something? In any case, I don't see why storing the credentials like that wouldn't work, if you can accept the plain-text issues you cite. As far as certs, Im afraid you're on your own. I will warn you that Java errs on the side of verification unless you instruct it not to, so invalid certs will cause other problems. - Ben On Thu, May 9, 2013 at 12:32 PM, Stefano Cossu &lt;scossu-zfBRdVzM7aGHXe+LvDLADg&lt; at &gt;public.gmane.org&gt; wrote: ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. This 200-page book is written by three acclaimed leaders in the field. The early access version is available now. Download your free book today! http://p.sf.net/sfu/neotech_d2d_may</pre> Benjamin Armintor 2013-05-09T18:08:05 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8500 <pre>Hi there, I'm starting to tinker with Fedora and trying to write a CMA workflow. I'm building a digital object that should grab an image datastream from an HTTPS server which requires basic authentication. I tried inserting the authentication data in the URL for the datastream, but now I have 2 problems: 1) Username and password are stored in plain text in the FOXML, visible by everyone who looks up that record in Fedora, as well as all over the logs. 2) I still can't connect to the server this way. The server's certificate is expired, I don't know if that plays a role. Fedora throws this error: ERROR 2013-05-09 11:04:28.618 [http-8080-1] (BaseRestResource) Unexpected error fulfilling REST API request org.fcrepo.server.errors.HttpServiceNotFoundException: [DefaultExternalContentManager] returned an error. The underlying error was a org.fcrepo.server.errors.GeneralException T he message was "Error getting https://username:password&lt; at &gt;imageserver/myHugePicture" . at org.fcrepo.server.stora</pre> Stefano Cossu 2013-05-09T16:32:54 http://permalink.gmane.org/gmane.comp.cms.fedora-commons.user/8499 <pre>*FOR IMMEDIATE RELEASE* May 7, 2013 Contact: Carol Minton Morris cmmorris-db6tg5YPMqnNLxjTenLetw&lt; at &gt;public.gmane.org Read it online: http://bit.ly/10g4XkX *Do Your Part to Invest in Our Digital Future: Become a Sponsor of DuraSpace * *Winchester, MA* Today the DuraSpace organization announced the launch of the 2013 Sponsorship Program encouraging users of DSpace and Fedora technologies for durable access to invest in our digital future by becoming DuraSpace sponsors. The annual campaign raises funds to support the continued advancement of the DSpace and Fedora open source software which is available free of charge. DuraSpace relies on financial support from the organizations that directly benefit from using DSpace and Fedora to continue to meet the changing needs of our communities. “The challenge of preserving academic content is too great for any one institution to tackle alone”, says Karin Wittenborg, University Librarian, University of Virginia. “DuraSpace fosters collaborative activities and op</pre> Carol Minton Morris 2013-05-07T13:35:34 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.comp.cms.fedora-commons.user