Hello,
I have fcrepo 3.5 running under tomcat 6.0.35 with MySQL. Everything
is running properly until XACML policies are enforced. When I try to
get a datastream through the web admin client, I am prompted for a
username and password, then I get the error "Could not get datastream
PDF due to: Error (401)" or HTML or DC etc.
My jaas.conf file contains only:
fedora-auth
{
org.fcrepo.server.security.jaas.auth.module.XmlUsersFileModule required
debug=true;
};
According to my install.properties file, fesl.authz=false and fesl.authn=true
In addition to ensuring I am not fat-fingering a username or password,
I've tried http and https and I've changed the
$FEDORA_HOME/server/config/spring/web/web.properties file to allow
api-m on any_channel.
I've added the host IP address to deny-apim-if-not-localhost and I've
removed policy from the repository-policy directory to no avail.
The fcrepo log shows:
.
.
INFO 2012-03-12 13:27:16.394 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:id
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:state
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:id
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:state
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:id
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:id
INFO 2012-03-12 13:27:16.395 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:state
INFO 2012-03-12 13:27:16.396 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:id
INFO 2012-03-12 13:27:16.396 [http-8080-2] (AttributeFinder) Failed to
resolve any values for
urn:fedora:names:fedora:2.1:resource:datastream:state
INFO 2012-03-12 13:27:16.396 [http-8080-2] (AttributeFinder) Failed to
resolve any values for fedoraRole
INFO 2012-03-12 13:27:16.396 [http-8080-2] (AttributeFinder) Failed to
resolve any values for fedoraRole
INFO 2012-03-12 13:27:16.396 [http-8080-2] (AttributeFinder) Failed to
resolve any values for fedoraRole
INFO 2012-03-12 13:27:39.729 [http-8080-1] (DefaultManagement)
Completed getDatastream(pid: dclfedora35:StatusRpt20120113,
datastreamID: PDF, asOfDateTime: null)
WARN 2012-03-12 13:27:39.735 [http-8080-1] (DatastreamResource)
Authorization failed; unable to fulfill REST API request
org.fcrepo.server.errors.authorization.AuthzDeniedException:
.
.
.
I've searched the list serve archive and found some similar problems
but the solutions mentioned have not helped. I'd appreciate any
advice. Thanks.
Maury Bouchard
Simmons College - GSLIS
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
