We're hiding the whole Java Servlet container (which holds Fedora Commons, 
SOLR, djatoka, etc.) from public access via a configuration stanza in the 
container's server.xml file.  For instance:

  
https://github.com/lyrasis/reposervice/blob/master/sed_templates/binaries%23tomcat%23conf/server.xml#L71

We then use SSH to tunnel to localhost:8080 on the server in order to get 
access:

  ssh -fNg -L 18080:localhost:8080  hostname.goes.here


Peter

On Jun 27, 2013, at 4:30 PM, "Grotevant, Paul F" <[email protected]> wrote:
> Good afternoon,
> 
> We want to restrict access to certain internal URLs on our Fedora instance
> to authenticated administrators only.
> 
> For example, the Resource Index search page:
> 
>  http://example.com/fedora/risearch
> 
> And the method list page for each object, for example:
> 
>  http://example.com/fedora/objects/foobar:100/methods
> 
> 
> Any best practice recommendations or sample configuration is appreciated.
> 
> Thanks,
> Paul



--
Peter Murray
Assistant Director, Technology Services Development
LYRASIS
[email protected]
+1 678-235-2955
800.999.8558 x2955



------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users

Reply via email to