Re: [Dspace-tech] Shibboleth - user groups

2010-10-20 Thread Jochen Lienhard

Hi,

we only have this shibboleth protection configuration:

Location /shibboleth-login
   AuthType shibboleth
   ShibRequireSession On
   require valid-user
   ShibUseHeaders On
/Location

We do not protect the root-path.

We have not yet tested the authentication.shib.role-header.
Could it perhaps be a problem of scoped or not scoped affiliation?

Greetings

Jochen Lienhard

Pottinger, Hardy J. schrieb:

Hi, we actually like the functionality of the Shibboleth lazy session it 
makes the site feel friendlier. Our university has not yet implemented any sort of logout 
cookie for Shibboleth, and don't plan to until it's supported (that's what the sysadmins 
tell me). However, our setup is a bit different from yours, here are the pertinent 
snippets from our various configs:

!-- snip from /etc/tomcat5/server.xml tomcat server config --
Connector port=8009
   enableLookups=false redirectPort=8080 protocol=AJP/1.3 address=127.0.0.1 
tomcatAuthentication=false
   connectionTimeout=2 disableUploadTimeout=true URIEncoding=UTF-8/


!-- snip from /etc/tomcat5/Catalina/localhost/xmlui.xml context fragment --
Context debug=0
 docBase=/dspace/webapps/xmlui reloadable=true unpackWARs=true 
autoDeploy=true
/Context


### snips from our_production_vhost.conf

# turn on Shibboleth Lazy Session
Location /
 AuthType shibboleth
 ShibRequireSession Off
 require shibboleth
/Location

# reverse proxy for xmlui
Location /xmlui
   ProxyPass ajp://127.0.0.1:8009/xmlui
   ProxyPassReverse  ajp://127.0.0.1:8009/xmlui
   SetEnv force-proxy-request-1.0 1
   SetEnv proxy-nokeepalive 1
/Location

# start Shibboleth login at this location
Location /xmlui/shibboleth-login
   AuthType shibboleth
   ShibRequireSession On
   ShibUseHeaders On
   require valid-user
/Location

For your setup, I think if you moved that ShibUseHeaders On down from the lazy session 
stanza to your shibboleth-login stanza, you'd end up with what you wanted. If memory serves, that's 
the magic give me my headers, now, please command.

Hope that helps!

--Hardy

   

-Original Message-
From: Vlastimil Krejcir [mailto:krej...@ics.muni.cz]
Sent: Tuesday, October 19, 2010 9:15 AM
To: DSpace-tech@lists.sourceforge.net
Subject: [Dspace-tech] Shibboleth - user groups


Hi all,

I have set up Shibboleth authentication in DSpace and assingning groups
according to the affiliation (authentication.shib.role-header) does
not
work.

I have found that getSpecialGroups() from
/org/dspace/authenticate/ShibAuthentication.java gets no shibboleth
headers. I guess that the trouble lies in Apache config. At first I have
tried mod_proxy, then mod_jk and the result is still the same. To get
getSpecialGroups() works properly (to sent shib headers) I have to
change
Apache config slightly to use lazy session for the root (where I have my
DSpace installation):

Location /shibboleth-login
AuthType shibboleth
ShibRequireSession On
Require valid-user
ShibUseHeaders On
/Location

Location /
AuthType shibboleth
ShibRequireSession Off
ShibUseHeaders on
Require shibboleth
/Location


So this is lazy session configuration. Using this, groups assigning
works.
But I can't logout - means trying to reach /mydspace cause I'm logged in
via Shibboleth without asking what kind of authetication I want. If I
was
logged in before, my last session is used, if I wasn't there is
something I name empty user. It seems, DSpace tests shibboleth
header
and then assumes somebody is logged in.

Removing lazy session config (for the root /) causes Shibboleth works
fine
except for assigning groups.

Has anyone experienced the same troubles? Can you share your Apache
config?

I have version 1.6.2, also last SP (2.3.1 I think). I have also set up
webui.session.invalidate = false.

Thanks.

Vlastik



Vlastimil Krejčíř
Library and Information Centre, Institute of Computer Science
Masaryk University in Brno, Czech Republic
Email: krejcir (at) ics (dot) muni (dot) cz
Phone: +420 549 49 3872
ICQ: 163963217
Jabber: kre...@jabber.org




--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly
Flex(R) Builder(TM)) enable the development of rich applications that
run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
 

--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly
Flex(R) 

[Dspace-tech] Community.itemsCount() : count is overvalued

2010-10-20 Thread Fabian Smagghe

Hi,

In function Community.countItems(), we made dso.countItems () for each 
collection and each subcommunity within: if some items are linked to 
several collections and/or subcommunities, these items are counted 
several times and the number of items in the Community is overvalued.  
In our repository, many items are linked to 2 collections (+- 20%).


In function Community.countItems(), why not use a query like this 
(similar query used in function Collection.countItems()):

query = SELECT count(*) FROM communities2item, item WHERE 
   + communities2item.community_id =  ? 
   + AND communities2item.item_id = item.item_id 
   + AND in_archive ='1' AND item.withdrawn='0';

Should this problem be reported in JIRA ?

Thanks
Fabian Smagghe
Université de Liège
attachment: f_smagghe.vcf--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] Community.itemsCount() : count is overvalued

2010-10-20 Thread Claudia Jürgen
Salut Fabian,

having redundant counts has been discussed a while ago and been left as 
it is. Both approaches have disadvantages. If you do a distinct count 
then the user might be presented with lists where the sum of the 
subcommunities/collections does not fit the total in the community, 
which might be confusing. Maybe this should be made configurable in 
order to better fit the different use cases.

Hope that helps

Claudia Jürgen

Am 20.10.2010 09:14, schrieb Fabian Smagghe:
 Hi,

 In function Community.countItems(), we made dso.countItems () for each
 collection and each subcommunity within: if some items are linked to
 several collections and/or subcommunities, these items are counted
 several times and the number of items in the Community is overvalued. In
 our repository, many items are linked to 2 collections (+- 20%).

 In function Community.countItems(), why not use a query like this
 (similar query used in function Collection.countItems()):
 query = SELECT count(*) FROM communities2item, item WHERE 
 + communities2item.community_id = ? 
 + AND communities2item.item_id = item.item_id 
 + AND in_archive ='1' AND item.withdrawn='0';

 Should this problem be reported in JIRA ?

 Thanks
 Fabian Smagghe
 Université de Liège



 --
 Download new Adobe(R) Flash(R) Builder(TM) 4
 The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly
 Flex(R) Builder(TM)) enable the development of rich applications that run
 across multiple browsers and platforms. Download your free trials today!
 http://p.sf.net/sfu/adobe-dev2dev



 ___
 DSpace-tech mailing list
 DSpace-tech@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/dspace-tech

-- 
Claudia Juergen
Universitaetsbibliothek Dortmund
Eldorado
0231/755-4043
https://eldorado.tu-dortmund.de/

--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


[Dspace-tech] Original license not displaying.

2010-10-20 Thread Mark Melia



Hi all,

I am also having this problem - I have amended DIM-Handler.xsl as described 
below but the problem persists. Does anyone know of any other factors that 
might cause this?

Thanks for your help,
Mark


On Wed, Oct 13, 2010 at 11:27 AM, Debashree Patidp...@oln.org  
mailto:dp...@oln.org  wrote:

 Hi Eric,

 This is a feature in*1.6*.2 -- the original*license*  is for the submitter
 and need not be visible to public. So the DIM-Handler.xsl was modified to
 remove the*link*  to original*license*. There was a recent post about this
 and below is the solution (if you want to revert to the old way) from
 Tonny Laursen.


 I have now changed
 DIM-Handler.xsl.
 I have changed the lines from

 xsl:apply-templates
 select=./mets:fileSec/mets:fileg...@use='CC-*LICENSE*']/

 TO

 xsl:apply-templates
 select=./mets:fileSec/mets:fileg...@use='CC-LICENSE' or @USE='LICENSE']/

 And that seems to work :)

 Tonny


 -Debashree
 OhioLINK




 I'm in the process of migrating our 1.5.2 instance to 1.6.2 on a new
 server.  I imported the old dspace database to postgres, ran the
 update script, then copied the assetstore to the new machine.

 Everything seems fine, except that Original License links no longer
 appear on item-level pages, neither for existing items or new
 submissions.  In both cases, license.txt is still available if I
 manually type the URL into the browser.  How do I get the links back?

 I'm using XMLUI with the same theme on both machines.

 Eric

 --
 Beautiful is writing same markup. Internet Explorer 9 supports
 standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2  L3.
 Spend less time writing and  rewriting code and more time creating great
 experiences on the web. Be a part of the beta today.
 http://p.sf.net/sfu/beautyoftheweb
 ___
 DSpace-tech mailing list
 DSpace-tech@lists.sourceforge.net  mailto:DSpace-tech@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/dspace-tech






--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] Community.itemsCount() : count is overvalued

2010-10-20 Thread Fabian Smagghe

Hello Claudia,

I understand the both approaches, but in my opinion the count should 
mean the number of items in a particular community
and not the sum of items in subcommunities/collections of a particular 
community even if the sum does not match

the distinct count...

Thank you for your reply.
Fabian Smagghe


Le 20/10/10 11:16, Claudia Jürgen a écrit :

Salut Fabian,

having redundant counts has been discussed a while ago and been left as
it is. Both approaches have disadvantages. If you do a distinct count
then the user might be presented with lists where the sum of the
subcommunities/collections does not fit the total in the community,
which might be confusing. Maybe this should be made configurable in
order to better fit the different use cases.

Hope that helps

Claudia Jürgen

Am 20.10.2010 09:14, schrieb Fabian Smagghe:
   

Hi,

In function Community.countItems(), we made dso.countItems () for each
collection and each subcommunity within: if some items are linked to
several collections and/or subcommunities, these items are counted
several times and the number of items in the Community is overvalued. In
our repository, many items are linked to 2 collections (+- 20%).

In function Community.countItems(), why not use a query like this
(similar query used in function Collection.countItems()):
query = SELECT count(*) FROM communities2item, item WHERE 
+ communities2item.community_id = ? 
+ AND communities2item.item_id = item.item_id 
+ AND in_archive ='1' AND item.withdrawn='0';

Should this problem be reported in JIRA ?

Thanks
Fabian Smagghe
Université de Liège



--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev



___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
 
   


attachment: f_smagghe.vcf--
Download new Adobe(R) Flash(R) Builder(TM) 4
The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly 
Flex(R) Builder(TM)) enable the development of rich applications that run
across multiple browsers and platforms. Download your free trials today!
http://p.sf.net/sfu/adobe-dev2dev___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech


Re: [Dspace-tech] DSpace searches within documents?

2010-10-20 Thread Stuart Lewis
Hi Sophie,

 We are looking for systems which have full text search capability and access 
 control (we already have DSpace). 
 I always thought DSpace only searches metadata, but I saw a wiki page showing 
 how to configure full text indexing. However, I haven't seen any DSpace 
 instance which shows the full text search results as I would see from vendor 
 databases. How does the DSpace full text search look like? Will it meet the 
 expectation of search within documents?

Full-text indexing and searching of PDFs / HTML docs / Word docs is available 
within DSpace.  If you run the following script, it will generate these indexes:

 - http://www.dspace.org/1_6_2Documentation/ch08.html#N1605F
 - [dspace]/bin/dspace filter-media

The current version of DSpace does not show snippets of text in the search 
results to indicate where in the full text the search string was found.  This 
is possible, and we have an open ticket in our development tracking system to 
address this: https://jira.duraspace.org/browse/DS-172

Thanks,


Stuart Lewis
IT Innovations Analyst and Developer
Te Tumu Herenga The University of Auckland Library
Auckland Mail Centre, Private Bag 92019, Auckland 1142, New Zealand
Ph: +64 (0)9 373 7599 x81928


--
Nokia and ATT present the 2010 Calling All Innovators-North America contest
Create new apps  games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech