I see that you have xacml policies enabled... are you ingesting with 
localhost, or your host name?  By default, XACML denies any API-M 
operations if you're not running the command over the localhost interface.

See 
https://wiki.duraspace.org/display/FCR30/XACML+Policy+Enforcement#XACMLPolicyEnforcement-DEFAULTPOLICIES
 
for more information.  In short, you'll want to copy 
$FEDORA_HOME/data//fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml
 
up to 
$FEDORA_HOME/data//fedora-xacml-policies/repository-policies/allow-apim-myhost.xml,
 
edit it to allow API-M operations from your whitelist of IPs, delete 
$FEDORA_HOME/data//fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml,
 
and restart fedora (or reload the policies).

-- Scott


Nick Ruest wrote:
> Hi Steve,
> 
> Fedora ingest - cd $FEDORA_HOME/client/bin ./fedora-ingest-demos.sh 
> hostname 8080 fedoraAdmin mypass http
> 
> $FEDORA_HOME/install/install.properties:
> 
> #Install Options
> #Wed Jan 19 14:21:25 EST 2011
> ri.enabled=false
> messaging.enabled=false
> apia.auth.required=false
> database.jdbcDriverClass=com.mysql.jdbc.Driver
> ssl.available=false
> database.jdbcURL=jdbc\:mysql\://localhost/dev_fedora?useUnicode\=true&characterEncoding\=UTF-8&autoReconnect\=true
>  
> 
> database.password=xxxxxxxx
> database.mysql.driver=included
> database.username=fedora_user
> fesl.authz.enabled=false
> tomcat.shutdown.port=8005
> deploy.local.services=true
> xacml.enabled=true
> database.mysql.jdbcDriverClass=com.mysql.jdbc.Driver
> tomcat.http.port=8080
> fedora.serverHost=islandora.mcmaster.ca
> database=mysql
> database.driver=included
> fedora.serverContext=fedora
> llstore.type=akubra-fs
> tomcat.home=/opt/tomcat6
> fesl.authn.enabled=true
> fedora.home=/opt/fedora
> database.mysql.jdbcURL=jdbc\:mysql\://localhost/dev_fedora?useUnicode\=true&characterEncoding\=UTF-8&autoReconnect\=true
>  
> 
> install.type=custom
> servlet.engine=existingTomcat
> fedora.admin.pass=xxxxxxxxx
> 
> thanks!
> 
> -nruest
> 
> On 11-01-20 07:03 AM, Steve Bayliss wrote:
>> Hi Nick
>>
>> - how are you doing the ingest?
>> - how have you got Fedora configured (auth required for api-a, api-m, 
>> ssl,
>> etc - maybe you could post a $FEDORA_HOME/install/install.properties, 
>> with
>> any passwords suitable obfuscated).
>>
>> Steve
>>
>>> -----Original Message-----
>>> From: Nick Ruest [mailto:rue...@mcmaster.ca]
>>> Sent: 20 January 2011 11:54
>>> To: fedora-commons-users@lists.sourceforge.net
>>> Subject: [fcrepo-user] ingest demos - 41 out of 41 failed
>>>
>>>
>>> Hi,
>>>
>>> I'm in the process of setting up a dev environment for fedora (3.4.1)
>>> and islandora at the moment. I have fedora up and running
>>> just fine, but
>>> I am absolutely stumped on trying to get the demo objects to ingest.
>>> I've been able to get them to ingest before on other setups, but I am
>>> getting: WARNING: 41 of 41 objects failed.  Check log.
>>>
>>> Sample log output:
>>> <ingest-from-dir>
>>> <failed
>>> file="/opt/fedora/client/demo/foxml/local-server-demos/documen
>>> t-transform-demo/demo_XML_TO_HTMLDOC.xml">
>>>       (401)Unauthorized
>>> </failed>
>>> <failed
>>> file="/opt/fedora/client/demo/foxml/local-server-demos/documen
>>> t-transform-demo/obj_demo_14.xml">
>>>       (401)Unauthorized
>>> </failed>
>>>
>>> I've double checked the username and password used against
>>> fedora-users.xml. Any suggestions?
>>>
>>> thanks!
>>>
>>> -nruest
>>>
>>
>> ------------------------------------------------------------------------------
>>  
>>
>> Protect Your Site and Customers from Malware Attacks
>> Learn about various malware tactics and how to avoid them. Understand
>> malware threats, the impact they can have on your business, and how you
>> can protect your company and customers by using code signing.
>> http://p.sf.net/sfu/oracle-sfdevnl
>> _______________________________________________
>> Fedora-commons-users mailing list
>> Fedora-commons-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Protect Your Site and Customers from Malware Attacks
> Learn about various malware tactics and how to avoid them. Understand 
> malware threats, the impact they can have on your business, and how you 
> can protect your company and customers by using code signing.
> http://p.sf.net/sfu/oracle-sfdevnl
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Fedora-commons-users mailing list
> Fedora-commons-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users


-- 
Scott Prater
Library, Instructional, and Research Applications (LIRA)
Division of Information Technology (DoIT)
University of Wisconsin - Madison
pra...@wisc.edu

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users

Reply via email to