Ok, the /$/server interface is required for the query screen.

The /$/server interface also gives access to the data set management
functions.

So it does not look like the query window only can be given anon access.

Oh well.

Thanks for everyone's help!

On Wed, Feb 17, 2016 at 2:48 PM, Don Rolph <[email protected]> wrote:

> Nope:  behavior still the same.
>
> I think I need a line of the form:
>
> /$/<some field>* = anon
>
> where <some field> refers to the datasets page /dataset.html
>
> But still struggling.
>
> Thanks for your help!
>
> On Wed, Feb 17, 2016 at 1:57 PM, Don Rolph <[email protected]> wrote:
>
>> I am restarting.  Let me remove the "
>>
>> Thanks!
>>
>> On Wed, Feb 17, 2016 at 9:42 AM, A. Soroka <[email protected]> wrote:
>>
>>> I confess that looks good to me. I should think that the /**=anon clause
>>> would allow access to the HTML forms.
>>>
>>> In fact, I just ran a copy of Fuseki locally with this shiro.ini and had
>>> no problem accessing the forms from another computer. The one thing that
>>> strikes me as odd is your line:
>>>
>>> /$/** = authcBasic,user[admin]"
>>>
>>> Did you leave an extra quote in there? Also, just to be clear, you are
>>> restarting Fuseki in between changes to shiro.ini, right? (It’s not a
>>> dynamically-loaded configuration, so far as I know.)
>>>
>>> ---
>>> A. Soroka
>>> The University of Virginia Library
>>>
>>> > On Feb 16, 2016, at 5:27 PM, Don Rolph <[email protected]> wrote:
>>> >
>>> > Shiro.ini file as below:
>>> >
>>> > # Licensed under the terms of
>>> http://www.apache.org/licenses/LICENSE-2.0
>>> >
>>> > [main]
>>> > # Development
>>> > ssl.enabled = false
>>> >
>>> > plainMatcher=org.apache.shiro.authc.credential.SimpleCredentialsMatcher
>>> > #iniRealm=org.apache.shiro.realm.text.IniRealm
>>> > iniRealm.credentialsMatcher = $plainMatcher
>>> >
>>> > localhostFilter=org.apache.jena.fuseki.authz.LocalhostFilter
>>> >
>>> > [users]
>>> > # Implicitly adds "iniRealm =  org.apache.shiro.realm.text.IniRealm"
>>> > admin=refdata
>>> >
>>> > [roles]
>>> >
>>> > [urls]
>>> > ## Control functions open to anyone
>>> > /$/status = anon
>>> > /$/ping   = anon
>>> >
>>> > ## and the rest are restricted to localhost.
>>> > ##/$/** = localhostFilter
>>> >
>>> > ## If you want simple, basic authentication user/password
>>> > ## on the operations,
>>> > ##    1 - set a better password in [users] above.
>>> > ##    2 - comment out the "/$/** = localhost" line and use:
>>> > /$/** = authcBasic,user[admin]"
>>> >
>>> > ## or to allow any access.
>>> > ##/$/** = anon
>>> >
>>> > # Everything else
>>> > /**=anon
>>> > ~
>>> >
>>> >
>>> > I have put in lines of the form:
>>> >
>>> > /$/status = anon
>>> > /$/ping   = anon
>>> > /$/datasets = anon
>>> >
>>> > and
>>> >
>>> > /$/status = anon
>>> > /$/ping   = anon
>>> > /$/datasets/* = anon
>>> >
>>> > and
>>> >
>>> > /$/status = anon
>>> > /$/ping   = anon
>>> > /$/datasets/ds* = anon
>>> >
>>> > etc. without luck.
>>> >
>>> > Unsure what the /$/ path to the query page would be.
>>> >
>>> > Thanks!
>>> >
>>> >
>>> >
>>> >
>>> > On Tue, Feb 16, 2016 at 4:40 PM, A. Soroka <[email protected]> wrote:
>>> >
>>> >> Can you show us your current shiro.ini file?
>>> >>
>>> >> ---
>>> >> A. Soroka
>>> >> The University of Virginia Library
>>> >>
>>> >>> On Feb 16, 2016, at 4:38 PM, Don Rolph <[email protected]> wrote:
>>> >>>
>>> >>> When I go to the dataset web page it asks for authentication and if I
>>> >>> cancel it I cant see the dataset.
>>> >>>
>>> >>> On Tue, Feb 16, 2016 at 3:24 PM, A. Soroka <[email protected]>
>>> wrote:
>>> >>>
>>> >>>> Those forms should be available to everyone by default. The line:
>>> >>>>
>>> >>>> /**=anon
>>> >>>>
>>> >>>> in the default shiro.ini file takes care of that. When you go to
>>> those
>>> >>>> pages from another machine, what response are you actually getting?
>>> >>>>
>>> >>>> ---
>>> >>>> A. Soroka
>>> >>>> The University of Virginia Library
>>> >>>>
>>> >>>>> On Feb 16, 2016, at 1:15 PM, Don Rolph <[email protected]>
>>> wrote:
>>> >>>>>
>>> >>>>> The HTML interface.
>>> >>>>>
>>> >>>>> Thanks!
>>> >>>>>
>>> >>>>> On Tue, Feb 16, 2016 at 12:26 PM, A. Soroka <[email protected]>
>>> >> wrote:
>>> >>>>>
>>> >>>>>> Do you mean the HTML form that lets you edit queries for any
>>> dataset
>>> >> or
>>> >>>>>> the query endpoint for a given dataset?
>>> >>>>>>
>>> >>>>>> ---
>>> >>>>>> A. Soroka
>>> >>>>>> The University of Virginia Library
>>> >>>>>>
>>> >>>>>>> On Feb 16, 2016, at 10:38 AM, Don Rolph <[email protected]>
>>> wrote:
>>> >>>>>>>
>>> >>>>>>> OK this works to open up the web interface to either all users or
>>> >> using
>>> >>>>>> the
>>> >>>>>>> example authorized users.
>>> >>>>>>>
>>> >>>>>>> How do I let all users use the query interface?
>>> >>>>>>>
>>> >>>>>>> I tried:
>>> >>>>>>>
>>> >>>>>>> /$/datasets = anon
>>> >>>>>>>
>>> >>>>>>> and
>>> >>>>>>>
>>> >>>>>>> /$/datasets* = anon
>>> >>>>>>>
>>> >>>>>>> and
>>> >>>>>>>
>>> >>>>>>> /$/datasets/* = anon
>>> >>>>>>>
>>> >>>>>>> and
>>> >>>>>>>
>>> >>>>>>> /$/datasets/ds = anon
>>> >>>>>>>
>>> >>>>>>> and
>>> >>>>>>>
>>> >>>>>>> /$/datsets/ds* = anon
>>> >>>>>>>
>>> >>>>>>> but none of these seem to work to allow anonymous access to the
>>> query
>>> >>>>>>> screen.
>>> >>>>>>>
>>> >>>>>>> Thoughts?
>>> >>>>>>>
>>> >>>>>>> Thanks in advance!
>>> >>>>>>>
>>> >>>>>>>
>>> >>>>>>> On Mon, Feb 15, 2016 at 3:35 PM, A. Soroka <[email protected]>
>>> >> wrote:
>>> >>>>>>>
>>> >>>>>>>> Have you adjusted the security settings for the UI? See the
>>> first
>>> >>>>>>>> paragraph here:
>>> >>>>>>>>
>>> >>>>>>>>
>>> https://jena.apache.org/documentation/fuseki2/fuseki-security.html
>>> >>>>>>>>
>>> >>>>>>>> ---
>>> >>>>>>>> A. Soroka
>>> >>>>>>>> The University of Virginia Library
>>> >>>>>>>>
>>> >>>>>>>>> On Feb 15, 2016, at 2:08 PM, Don Rolph <[email protected]>
>>> >> wrote:
>>> >>>>>>>>>
>>> >>>>>>>>> How do I enable the web interface to Jena-fuseki 2.3.1?
>>> >>>>>>>>>
>>> >>>>>>>>> I can connect to the web server at:
>>> >>>>>>>>>
>>> >>>>>>>>> http://webserver.com:3030/
>>> >>>>>>>>>
>>> >>>>>>>>> but it seems I have to do something to enable this
>>> functionality
>>> >>>> form a
>>> >>>>>>>>> remote machine.
>>> >>>>>>>>>
>>> >>>>>>>>> Hints/suggestions?
>>> >>>>>>>>>
>>> >>>>>>>>> Thanks in advance!
>>> >>>>>>>>>
>>> >>>>>>>>> --
>>> >>>>>>>>>
>>> >>>>>>>>> 73,
>>> >>>>>>>>> AB1PH
>>> >>>>>>>>> Don Rolph
>>> >>>>>>>>
>>> >>>>>>>>
>>> >>>>>>>
>>> >>>>>>>
>>> >>>>>>> --
>>> >>>>>>>
>>> >>>>>>> 73,
>>> >>>>>>> AB1PH
>>> >>>>>>> Don Rolph
>>> >>>>>>
>>> >>>>>>
>>> >>>>>
>>> >>>>>
>>> >>>>> --
>>> >>>>>
>>> >>>>> 73,
>>> >>>>> AB1PH
>>> >>>>> Don Rolph
>>> >>>>
>>> >>>>
>>> >>>
>>> >>>
>>> >>> --
>>> >>>
>>> >>> 73,
>>> >>> AB1PH
>>> >>> Don Rolph
>>> >>
>>> >>
>>> >
>>> >
>>> > --
>>> >
>>> > 73,
>>> > AB1PH
>>> > Don Rolph
>>>
>>>
>>
>>
>> --
>>
>> 73,
>> AB1PH
>> Don Rolph
>>
>
>
>
> --
>
> 73,
> AB1PH
> Don Rolph
>



-- 

73,
AB1PH
Don Rolph

Reply via email to