[Dspace-tech] Running two prefixes with one handle server
Im running two Dspace instances on one machine. I registered another handle prefix for the second one, but am little confused on how to configure the handle server for two prefixes. Has anyone done this before? How should I go on about it? Thanks, Mika - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] Blocking a malicious user
Hi Sue,
pg_hba.conf only controls who can communicate with Postgres, not who can
communicate with DSpace.
Normally it is only 'applications' (e.g. DSpace) that talk to Postgres,
not users.
A user talks to DSpace, who in turn talks to Postgres. Postgres has no
idea or interest in the IP address of the user who is using DSpace, only
that of the DSpace application.
Therefore adding malicious IP address into that config file will sadly
have no effect. You have to block users higher in the stack, either at
the application level (apache or tomcat directives), or at the network
level (firewall changes).
Thanks,
Stuart
_
Gwasanaethau Gwybodaeth Information Services
Prifysgol Aberystwyth Aberystwyth University
E-bost / E-mail: [EMAIL PROTECTED]
Ffon / Tel: (01970) 622860
_
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Thornton, Susan M. (LARC-B702)[NCI INFORMATION SYSTEMS]
Sent: 31 October 2007 17:51
To: Mika Stenberg; dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Blocking a malicious user
You can block ip addresses at the postgreSQL level in the pg_hba.conf
file. Here is a person I blocked by ip address who was sending all
kinds of GET requests to our DSpace server:
hostall all malicious.ip255.255.255.255
reject
Sue Walker-Thornton
NASA Langley Research Center
ConITS Contract
757-224-4074
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mika
Stenberg
Sent: Wednesday, October 31, 2007 6:00 AM
To: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Blocking a malicious user
We've had problems like that as well. Blocking specific IP's works only
for
a while since many bots and spammers seem to change their IP frequently.
We
didnt come up with a decent solution for this, but blocking an entire
country of origin for a period of time has been on my mind. Managing the
allowed requests / timeslot for a specific IP might also do the trick.
-Mika
If they're nasty enough, though, they'll drown your Apache or Tomcat
server in replying with 403s. I've had times that I needed to be
absolutely merciless and block at the firewall level, using iptables;
then they don't even get as far as userspace.
On Tue, 2007-10-30 at 14:01 -0500, Tim Donohue wrote:
George,
We had a similar problem to this one in the past (a year or so ago).
I
just flat out blocked the IP altogether (not even specific to
/bitstream/) via this Apache configuration:
Location /
Order Allow,Deny
Deny from {malicious ip}
Allow from all
/Location
This looks similar to your config though (except it blocks all
access
from that IP).
- Tim
George Kozak wrote:
Hi...
I am having a problem with an IP that keeps sending thousands of
GET
/bitstream/... requests for the same item.
I have placed the following in my Apache.conf file:
Directory /bitstream/
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
deny from {malicious ip}
/Directory
I also placed the following in my server.xml in Tomcat:
Valve className=org.apache.catalina.valves.RemoteAddrValve
deny=xxx\.xxx\.xxx\.xx /
However, this person still seems to be getting through. My java
process is running from 50%-80% CPU usage. Does anyone have a
good
idea on how to shutout a malicious IP in DSpace?
***
George Kozak
Coordinator
Web Development and Management
Digital Media Group
501 Olin Library
Cornell University
607-255-8924
***
[EMAIL PROTECTED]
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
browser.
Download your FREE copy of Splunk now http://get.splunk.com/
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
browser.
Download your FREE copy of Splunk now http://get.splunk.com/
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] Blocking a malicious user
It has an effect if your Postgres instance isn't blocked at the
firewall, and people are actually trying to access it. Which they will,
unless you block them. As I said, probably much safer to block at the
firewall level--better protection from DOS as well.
On Thu, 2007-11-01 at 08:51 +, Stuart Lewis [sdl] wrote:
Hi Sue,
pg_hba.conf only controls who can communicate with Postgres, not who can
communicate with DSpace.
Normally it is only 'applications' (e.g. DSpace) that talk to Postgres,
not users.
A user talks to DSpace, who in turn talks to Postgres. Postgres has no
idea or interest in the IP address of the user who is using DSpace, only
that of the DSpace application.
Therefore adding malicious IP address into that config file will sadly
have no effect. You have to block users higher in the stack, either at
the application level (apache or tomcat directives), or at the network
level (firewall changes).
Thanks,
Stuart
_
Gwasanaethau Gwybodaeth Information Services
Prifysgol Aberystwyth Aberystwyth University
E-bost / E-mail: [EMAIL PROTECTED]
Ffon / Tel: (01970) 622860
_
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Thornton, Susan M. (LARC-B702)[NCI INFORMATION SYSTEMS]
Sent: 31 October 2007 17:51
To: Mika Stenberg; dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Blocking a malicious user
You can block ip addresses at the postgreSQL level in the pg_hba.conf
file. Here is a person I blocked by ip address who was sending all
kinds of GET requests to our DSpace server:
hostall all malicious.ip255.255.255.255
reject
Sue Walker-Thornton
NASA Langley Research Center
ConITS Contract
757-224-4074
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mika
Stenberg
Sent: Wednesday, October 31, 2007 6:00 AM
To: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Blocking a malicious user
We've had problems like that as well. Blocking specific IP's works only
for
a while since many bots and spammers seem to change their IP frequently.
We
didnt come up with a decent solution for this, but blocking an entire
country of origin for a period of time has been on my mind. Managing the
allowed requests / timeslot for a specific IP might also do the trick.
-Mika
If they're nasty enough, though, they'll drown your Apache or Tomcat
server in replying with 403s. I've had times that I needed to be
absolutely merciless and block at the firewall level, using iptables;
then they don't even get as far as userspace.
On Tue, 2007-10-30 at 14:01 -0500, Tim Donohue wrote:
George,
We had a similar problem to this one in the past (a year or so ago).
I
just flat out blocked the IP altogether (not even specific to
/bitstream/) via this Apache configuration:
Location /
Order Allow,Deny
Deny from {malicious ip}
Allow from all
/Location
This looks similar to your config though (except it blocks all
access
from that IP).
- Tim
George Kozak wrote:
Hi...
I am having a problem with an IP that keeps sending thousands of
GET
/bitstream/... requests for the same item.
I have placed the following in my Apache.conf file:
Directory /bitstream/
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
deny from {malicious ip}
/Directory
I also placed the following in my server.xml in Tomcat:
Valve className=org.apache.catalina.valves.RemoteAddrValve
deny=xxx\.xxx\.xxx\.xx /
However, this person still seems to be getting through. My java
process is running from 50%-80% CPU usage. Does anyone have a
good
idea on how to shutout a malicious IP in DSpace?
***
George Kozak
Coordinator
Web Development and Management
Digital Media Group
501 Olin Library
Cornell University
607-255-8924
***
[EMAIL PROTECTED]
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a
browser.
Download your FREE copy of Splunk now http://get.splunk.com/
___
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] trouble running video files in Dspace
Hi I have uploaded a video file(.WMV) format to our dspace and it uploaded successfully, but when i try to open it ,the windows media player give the error say the source filter not found what should i do to run the video file correctly in dspace Any idea how to resolve this Thanks ASIM Wichita state University,USA __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] ANNOUNCE: IRStats statistics package beta
Dear all, We are happy to announce the beta release of the IRStats package - a tool for analysing usage of institutional repositories. http://trac.eprints.org/projects/irstats/wiki Please see the examples page for demonstrations of IRStats: http://trac.eprints.org/projects/irstats/wiki/Examples Headline features: - Repository agnostic design - currently supports DSpace and GNU EPrints - Aggressive filtering of robots and other automated agents (using AWStats and bespoke techniques) - Analyse groups of eprints based on a simple CSV-format specification - by-author, by-school etc. IRStats is released as Open Source under a BSD license. If you experience any problems using IRStats please get in contact. I'm keen to get contributions from the DSpace community - I believe there's a number of existing statistics activities going on for DSpace and I'm happy to discuss how best to make use of your experience. Tim Brody - http://www.eprints.org/ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] Index-all taking a long time.
Recently we had a citation where our postgres db was consuming our space allocation of 30 GB. This did not seem right, and we realized that we had never run vacuum --full. When this was run, tons of memory was freed-up. Today, I'm running index-all, and the portion that Indexes all items in Dspace... has been running now for close to 4 hours. Last week when I ran index-all, this portion of the script took about 1 hour to run. I'm getting a bit concerned. Does this make sense to any one? Unfortunately, when this portion of index-all runs there are no writes to log the file ( I have INFO set, not DEBUG ), so I have no idea if things are progressing smoothly or not. Thanks for any thoughts on this. Jose - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] [announcement] OAI-ORE Open Meeting (03 March 2008, Johns Hopkins Univ)
Forwarded for Carl Lagoze and Herbert Van de Sompel: = Apologies for cross-posting A meeting will be held on March 3, 2008 at Johns Hopkins University to roll-out the first beta release of the OAI-ORE specifications. These specifications describe a data model to identify and describe aggregations of web resources, and the encoding of the data model in the XML-based Atom syndication format. Additional details are available at: - The full press release for this event: http://www.openarchives.org/ore/documents/ore-hopkins-press-release.pdf - The registration site for the meeting: http://www.regonline.com/oai-ore Note that registration is required and space is limited. Carl Lagoze and Herbert Van de Sompel - Carl Lagoze Cornell Information Science 301 College Ave. Ithaca, NY 14850 WWW: http://www.cs.cornell.edu/lagoze Phone: +1-607-255-6046 FAX: +1-607:255-5196 - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] trouble running video files in Dspace
Hello, Am 01.11.2007 um 17:43 schrieb asim naseem: I have uploaded a video file(.WMV) format to our dspace and it uploaded successfully, but when i try to open it ,the windows media player give the error say the source filter not found what should i do to run the video file correctly in dspace Any idea how to resolve this Do a request on the bitstream by telnet and check the header mimetype designation. I guess the file extension does not get changed, so it should not be the offending aspect. If you run DSpace through apache, it should be possible to register the mimetype the mediaplayer ex- pects for the file type in /etc/httpd/mime.types. This file is used for mimetype lookup if your apache uses mod_mime. Or enable mod_mime_magic to support the file type. I have not tried this, but I guess your problem has to do with this. If you have trouble to do these things and your server is public, then post us a link to the bitstream in question. Then, give us the section with the lines starting LoadModule and AddModule of your httpd.conf to find which modules you use. Third, google for the wmv and mime to find the required setting. We will probably be able to solve this on the list. Bye, Christian - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] Email Problem
Hi, We're looking at dspace here and I'm running into a problem with the email servlet. Whenever I try to send an email, an exception is raised in the dspace.log file for org.dspace.app.webui.servlet.FeedbackServlet @...error_mailing_feedback: javax.mail.NoSuchProviderException: smtp ... Any thoughts on what's going on? TIA, Wayne -- /** * Wayne Graham * Earl Gregg Swem Library * PO Box 8794 * Williamsburg, VA 23188 * 757.221.3112 * http://swem.wm.edu/blogs/waynegraham/ */ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] Email Problem
Hello, Am 01.11.2007 um 20:34 schrieb Wayne Graham: We're looking at dspace here and I'm running into a problem with the email servlet. Whenever I try to send an email, an exception is raised in the dspace.log file for org.dspace.app.webui.servlet.FeedbackServlet @...error_mailing_feedback: javax.mail.NoSuchProviderException: smtp ... Any thoughts on what's going on? Try this: Log in as user dspace or whatever unix user your tomcat runs as and send a mail outbound to one of your mail accounts using mailx. Your mail server might also block this based on your mail.from.address or it runs on a different machine, it requires a username and password and you forgot to configure the lines 75ff. in your dspace.cfg? If sending mail works from the terminal but not from within the application, then I am lost. Bye, Christian - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] (no subject)
So sorry I forgot the subject... Douglas Ramiro 2007/11/1, Douglas Ramiro [EMAIL PROTECTED]: Hello everybody. My name is Douglas Ramiro, I'm from Brazil. I'm in trouble with dspace to send email. I set up the file dspace.cfg with # SMTP mail server mail.server=smtp.gmail.com # SMTP mail server authentication username and password (if required) mail.server.username = dougemay mail.server.password = mypassword # From address for mail mail.from.address = [EMAIL PROTECTED] # Currently limited to one recipient! feedback.recipient = [EMAIL PROTECTED] but I 'm not receiving any email. Example, when i register an e-person, nothing comes to me. What can I do? Does any body have the same problem? Best Regards -- Douglas Ramiro (+55xx61) 8416-0903 - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech -- Douglas Ramiro (+55xx61) 8416-0903 Consultor Voip - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] (no subject)
Hello everybody. My name is Douglas Ramiro, I'm from Brazil. I'm in trouble with dspace to send email. I set up the file dspace.cfg with # SMTP mail server mail.server=smtp.gmail.com # SMTP mail server authentication username and password (if required) mail.server.username = dougemay mail.server.password = mypassword # From address for mail mail.from.address [EMAIL PROTECTED] # Currently limited to one recipient! feedback.recipient = [EMAIL PROTECTED] but I 'm not receiving any email. Example, when i register an e-person, nothing comes to me. What can I do? Does any body have the same problem? Best Regards -- Douglas Ramiro (+55xx61) 8416-0903 - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] Export Import - URI
Hi! I was trying to export a collection from one server and import into another dspace server. The ingestion process was fine but the URI: appears twice one below the other. Is there any specific reason for the uri to get displayed twice? How to get this displayed only once. Please suggest URI: http://hdl.handle.net/123456789/1793 http://hdl.handle.net/123456789/1793 - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
