I had that same problem a while ago. Browser was bringing a pop-up asking
for login. I instructed the users to ignore Browser's authentication
windows by pressing OK without entering login/pass. It was working
authenticating the users as “anonymous”, I think. Also I tried explicitly
entering login/pass = anonymous/some and it was working. But this dialog
was not acceptable for open access repository and I think I had some other
issues.
I had to turn off API-A. Instead I used resource based XACML rule in each
object that denies access to each datastream for all roles or users except
listed in that rule. When I remove desired datdastream from that rule the
datdastream becomes accessible for anonymous. This might not be optimal for
some scenarios.
Serhiy Polyakov
University of North Texas
On Thu, Mar 14, 2013 at 8:42 AM, Grotevant, Paul F <[email protected]> wrote:
> Good morning,
>
> We are exploring the use of XACML policies to require authentication on
> the disseminations of particular datastreams, to fulfill a project
> requirement that some kinds of content will require that the viewer be
> authenticated via our campus LDAP directory.
>
> To get started, I have created some sample XACML policies that
> successfully enforce the requirement of a particular "fedoraRole" in order
> to view a data stream with a particular ID, but I've found that if the
> user is not already authenticated when they request the datastream content
> URL, they don't get prompted to authenticate, but rather just get an empty
> page with a 401 HTTP status. If the user is already authenticated from a
> different request in the Fedora web UI, then the content gets served up
> correctly.
>
> I've seen how to require authentication for ALL API-A requests, but that's
> not what we want either, because ultimately I think the vast majority of
> objects in our repository will be public, and should not require any
> authentication.
>
> If anyone has advice on this, it would be much appreciated.
>
> Thanks,
> Paul
>
> --
> Paul Grotevant, Senior Software Developer/Analyst
> University of Texas Libraries / IT Architecture and Strategy
> [email protected]
> 512-495-4374
>
>
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_mar
> _______________________________________________
> Fedora-commons-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>
>
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
