Hi Pierre-Yves,
Fedora uses a servlet filter called EnforceAuthnFilter in the web.xml to
require authentication on http requests. If you want to no longer require
authentication for API-A activities, you'll need to remove the filter
mappings which send API-A methods through this filter. This is an example of
a filter mapping in the deployed Fedora web.xml:
<filter-mapping>
<filter-name>EnforceAuthnFilter</filter-name>
<servlet-name>AccessServlet</servlet-name>
</filter-mapping>
The servlets that are associated with API-A are: AccessServlet,
DescribeRepositoryServlet, FieldSearchServlet, GetObjectHistoryServlet,
ListDatastreamsServlet, ListMethodsServlet, MethodParameterResolverServlet,
OAIProviderServlet, ReportServlet, and RISearchServlet. The url pattern
associated with API-A is /services/access.
Removing the filter mappings for each of these servlets/url patterns should
allow requests to pass through without requiring authentication. You can, of
course, be more selective regarding what you allow through without
authenication, the list above is just what Fedora considers the API-A set.
Hope this helps.
Bill
2009/4/10 Pierre-Yves JALLUD <[email protected]>
> Hi all,
> with a excess of security I have installed a fedora-common server with
> API-A and API-M access with authentication. I would like to stop the
> authentication only for API-A without to re-install all the server.
> I have looked at the documentation, the files fedora.fcfg and
> tomcat/webapps/fedora/WEB-INF/web.xml. I also have tried to comment all
> lines in tomcat/webapps/fedora/WEB-INF/web-add-for-authenticated-apia.xml
> ... but there is always an authentication for the API-A.
> Does someone knows where is (are...?) the parameter(s) to authorise API-A
> without authentication?
>
> greetings
> Pierre-Yves
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by:
> High Quality Requirements in a Collaborative Environment.
> Download a free trial of Rational Requirements Composer Now!
> http://p.sf.net/sfu/www-ibm-com
> _______________________________________________
> Fedora-commons-developers mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers
>
>
------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today.
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Fedora-commons-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers
