Hi yes, the initial workaround (/$/**) is probably only acceptable for local usage because of the security vulnerabilities it can create (maybe I should have mentioned it in my email).
Anyway, I just wanted to confirm that "/$/server = anon" works also for me on Windows (browsers: Opera, Edge). Good to hear 4.0.0 will not require manipulating the default shiro ini file. Thanks, Piotr pt., 19 mar 2021 o 12:34 Andy Seaborne <a...@apache.org> napisał(a): > Hi Dave, > > Thanks for the detailed report. Details matter! > > The only thing about > > ## or to allow any access. > /$/** = anon > > is that it opens up everything. > > Development 4.0.0 seems to work, no shiro.ini change. > > We now have GitHub dependabot running so updates get signalled > automatically, and allowed regularly, rather than drift. > > Andy > > On 19/03/2021 10:39, Dave Iberson-Hurst wrote: > > Andy > > > > Removed 3.17 from my applications folder > > Went to here http://archive.apache.org/dist/jena/binaries/ > > Downloaded apache-jena-fuseki-3.17.0.zip > > Expanded into applications > > cd "/Applications/apache-jena-fuseki-3.17.0" > > ./fuseki-server --update > > Killed server, updated shiro.ini (created by first run) as below > > Browser and console, no version displayed > > ---------- > > ## Control functions open to anyone > > /$/status = anon > > /$/ping = anon > > /$/metrics = anon > > /$/server = anon <----- Add this > > ---------- > > Restart server > > Back to browser, refresh, server version displayed > > Create dataset, Error > > Killed server, updated shiro.ini as below, removed prev edit > > ------------ > > ## or to allow any access. > > /$/** = anon > > ------------ > > Restart server > > Back to browser, refresh, server version displayed > > Create dataset, ok > > > > Hope that helps > > Dave Iberson-Hurst > > > > On 19/03/2021, 10.23, "Andy Seaborne" <a...@apache.org> wrote: > > > > Logged as > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fissues.apache.org%2Fjira%2Fbrowse%2FJENA-2072&data=04%7C01%7C%7C7b21b9c6e51d406cd34008d8eab89e03%7C301427c9511349b7901842bf7e6be88c%7C0%7C0%7C637517425935837689%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=RujinuieOu7%2BF2STZdqEuHUTWpdq93%2BKvNLMyincaX0%3D&reserved=0 > > > > Workaround seems to be to edit shiro.ini > > > > shiro.ini fix (run once to get it to unpack, then in > run/shiro.ini):: > > > > ---------- > > ## Control functions open to anyone > > /$/status = anon > > /$/ping = anon > > /$/metrics = anon > > /$/server = anon <----- Add this > > ---------- > > > > Could someone please confirm this? > > > > > > ------ > > > > shiro.ini seems to be the same for 3.16.0 and 3.17.0 > > > > 3.17.0 works in Firefox but not Chrome for me. > > > > Chrome(ium) is "Ubuntu: 89.0.4389.90 (Official Build) snap (64-bit)" > > > > /$/server and /$/status go to the same place but only one is set > anon in > > shiro.ini > > > > Piotr's fix works by exposing more operations. > > > > Has it been Chrome each time? > > > > It looks like it is problem originally from JENA-1638 but as to why > > 3.16.0 is OK and 3.17.0 is not, isn't clear to me. Between 3.16.0 > and > > 3.17.0, we have had a shiro jar upgrade (1.5->1.7) and possibly CORS > > changes. > > > > Andy > > > > On 19/03/2021 08:00, Dave Iberson-Hurst wrote: > > > Piotr > > > > > > Updated my shiro.ini as you suggest and I can now get 3.17 > running. All older versions (3.16 and previous) have not required the step > you suggested. > > > > > > Thanks for the info. > > > Dave Iberson-Hurst > > > > > > > > > On 19/03/2021, 08.52, "Piotr Nowara" <piotrnow...@gmail.com> > wrote: > > > > > > Hi Neli, > > > > > > I had a similar issue (not able to add/browse datasets on > 3.17). I realized > > > there must have been some change in the security layer > related to shiro.ini > > > file (which default form is being created in the /run > subfolder when you > > > first run Fuseki). To make it work you just need to make > sure anonymous > > > access is granted to the dataset website. The easiest way to > do this is > > > make sure this line in shiro.ini is not commented: > > > > > > /$/** = anon > > > > > > So the full process would look like this now (it requires > now starting and > > > killing server making it more complex for the beginners): > > > > > > > > > 1. Download recent Apache Fuseki distribution: > > > > https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fjena.apache.org%2Fdownload%2F&data=04%7C01%7C%7C7b21b9c6e51d406cd34008d8eab89e03%7C301427c9511349b7901842bf7e6be88c%7C0%7C0%7C637517425935837689%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=J%2Fc0XTJv%2FK1tK4b4qOjvzd3%2FiXOXqBk9nMi7Pu%2F2lpU%3D&reserved=0 > > > 2. Unzip it somewhere on your machine > > > 3. Launch the Fuseki server (fuseki-server.bat file on > Windows) > > > 4. Find {Fuseki}/run/shiro.ini file and make sure this > line is not > > > commented out: /$/** = anon > > > 5. Restart Fuseki (kill the server window and launch it > again) > > > 6. Go to http://localhost:3030/manage.html and click > “Add new dataset” > > > tab > > > 7. Create your dataset > > > 8. Go to http://localhost:3030/dataset.html and use > “edit” or “upload > > > files” to add RDF data. > > > 9. Go to “query” tab and start your queries > > > > > > Cheers, > > > Piotr > > > > > > czw., 18 mar 2021 o 23:41 Zlatareva, Neli (Computer Science) > < > > > zlatar...@ccsu.edu> napisał(a): > > > > > > > Hi Andy -- I tried to send snapshots of the browser window > but they did > > > > not show up in my e-mail. I am sending them as an > attachment if this can be > > > > of any help. > > > > Thanks > > > > > > > > Neli P. Zlatareva, PhD > > > > Professor of Computer Science > > > > Department of Computer Science > > > > Central Connecticut State University > > > > New Britain, CT 06050 > > > > Phone: (860) 832-2723 > > > > Fax: (860) 832-2712 > > > > Web site: cs.ccsu.edu/~neli/ > > > > ------------------------------ > > > > *From:* Zlatareva, Neli (Computer Science) < > zlatar...@ccsu.edu> > > > > *Sent:* Thursday, March 18, 2021 6:31 PM > > > > *To:* users@jena.apache.org <users@jena.apache.org> > > > > *Subject:* Re: Fuseki v.17 seems not to work > > > > > > > > > > > > *Please be cautious: **External Email*** > > > > > > > > Hi Andy, > > > > > > > > The instructions I always give to my students are go to > > > > > https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fjena.apache.org%2Fdownload%2Findex.cgi&data=04%7C01%7C%7C7b21b9c6e51d406cd34008d8eab89e03%7C301427c9511349b7901842bf7e6be88c%7C0%7C0%7C637517425935837689%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TqFpTaSJhgPK6dlge5h2dOFrn8TrKdlUMxkhZ9m55cE%3D&reserved=0 > > > > < > https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fjena.apache.org%2Fdownload%2Findex.cgi&data=04%7C01%7C%7C7b21b9c6e51d406cd34008d8eab89e03%7C301427c9511349b7901842bf7e6be88c%7C0%7C0%7C637517425935837689%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=TqFpTaSJhgPK6dlge5h2dOFrn8TrKdlUMxkhZ9m55cE%3D&reserved=0 > > > > > > > > > > > > > > Download the latest version of > apache-jena-fuseki-3.17.0.zip (now this is > > > > the latest) unzip and so on. > > > > > > > > > > > > > > > > Add new dataset would not open, neither upload files. > > > > > > > > > > > > > > > > > > > > > > > > Thank you so much. > > > > > > > > Regards, Neli. > > > > > > > > ------------------------------ > > > > *From:* Sentient #6 > <maximilian.brod...@googlemail.com.INVALID> > > > > *Sent:* Thursday, March 18, 2021 5:27 PM > > > > *To:* users@jena.apache.org <users@jena.apache.org> > > > > *Subject:* Re: Fuseki v.17 seems not to work > > > > > > > > Please be cautious: **External Email** > > > > > > > > I had the same issue and just edit the shiro and config > file. > > > > > > > > Am Do., 18. März 2021 um 20:09 Uhr schrieb Andy Seaborne < > a...@apache.org > > > > >: > > > > > > > > > Neli, > > > > > > > > > > There are several packaging of Fuseki - which one are > you referring to? > > > > > > > > > > What does "not work" mean for you and your students? > > > > > > > > > > > It open on the local host, > > > > > > > > > > do you get the front page? > > > > > > > > > > Andy > > > > > > > > > > On 18/03/2021 18:02, Zlatareva, Neli (Computer Science) > wrote: > > > > > > Hi there, I am using Fuseki for my Linked data > engineering class. My > > > > > students were ask to download the latest version 17 > (from the website) > > > > and > > > > > it seems to not work. I tried it too -- did not work for > me either. It > > > > open > > > > > on the local host, but doesn't open any windows from > there -- can't add a > > > > > dataset, etc. > > > > > > Any advice will be greatly appreciated. > > > > > > Thank you. > > > > > > Regards, Neli. > > > > > > > > > > > > Neli P. Zlatareva, PhD > > > > > > Professor of Computer Science > > > > > > Department of Computer Science > > > > > > Central Connecticut State University > > > > > > New Britain, CT 06050 > > > > > > Phone: (860) 832-2723 > > > > > > Fax: (860) 832-2712 > > > > > > Web site: cs.ccsu.edu/~neli/ > > > > > > > > > > > > > > > > > > > > >
