YES!!! GREAT!!! ... Thank you very much!!
I knew that it should be a parameter in the web.xml file, but I didn't
succes to find it (... them!).
Thank you again, and greetings to all of you!
Pierre-Yves
Bill Branan a écrit :
Hi Pierre-Yves,
Fedora uses a servlet filter called EnforceAuthnFilter in the web.xml
to require authentication on http requests. If you want to no longer
require authentication for API-A activities, you'll need to remove the
filter mappings which send API-A methods through this filter. This is
an example of a filter mapping in the deployed Fedora web.xml:
<filter-mapping>
<filter-name>EnforceAuthnFilter</filter-name>
<servlet-name>AccessServlet</servlet-name>
</filter-mapping>
The servlets that are associated with API-A are: AccessServlet,
DescribeRepositoryServlet, FieldSearchServlet,
GetObjectHistoryServlet, ListDatastreamsServlet, ListMethodsServlet,
MethodParameterResolverServlet, OAIProviderServlet, ReportServlet, and
RISearchServlet. The url pattern associated with API-A is
/services/access.
Removing the filter mappings for each of these servlets/url patterns
should allow requests to pass through without requiring
authentication. You can, of course, be more selective regarding what
you allow through without authenication, the list above is just what
Fedora considers the API-A set.
Hope this helps.
Bill
2009/4/10 Pierre-Yves JALLUD <[email protected]
<mailto:[email protected]>>
Hi all,
with a excess of security I have installed a fedora-common server
with API-A and API-M access with authentication. I would like to
stop the authentication only for API-A without to re-install all
the server.
I have looked at the documentation, the files fedora.fcfg and
tomcat/webapps/fedora/WEB-INF/web.xml. I also have tried to
comment all lines in
tomcat/webapps/fedora/WEB-INF/web-add-for-authenticated-apia.xml
... but there is always an authentication for the API-A.
Does someone knows where is (are...?) the parameter(s) to
authorise API-A without authentication?
greetings
Pierre-Yves
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Fedora-commons-developers mailing list
[email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers
begin:vcard
fn:Pierre-Yves JALLUD
n:JALLUD;Pierre-Yves
email;internet:[email protected]
tel;work:04-72-69-52-79
url:http://cc.in2p3.fr
version:2.1
end:vcard
------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today.
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Fedora-commons-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers
