Re: [Dspace-tech] recognise user by IP address
François Parmentier / INIST-CNRS On Tue, Dec 2, 2008 at 8:53 AM, Claudia Jürgen [EMAIL PROTECTED] wrote: Hi Andrew, you can add ip based authentication to the authentication stack in DSpace and define authentication rules via the config parameter authentication.ip.GROUPNAME = iprange[, iprange ...]. Claudia Jürgen Thanks for that. It will certainly do for starters. But, as someone else has already said, this requirement is commonly expressed by publishing houses. The idea is that they don't want each and every member of a large institution to have to register and login. But sometimes these institutions are so large they don't want to register individual IP address ranges either. They would like to be able to wildcard them with specifiers such as 110.12.10-120.*, 150.60.5-100.1-90 etc etc.Is this sort of thing possible please? -- Regards, Andrew M. -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] recognise user by IP address
On Sun, Dec 7, 2008 at 7:02 PM, Claudia Juergen [EMAIL PROTECTED] wrote: Hi Andrew, it is possible to use wildcards and/or ranges. you can add ip based authentication to the authentication stack in DSpace and define authentication rules via the config parameter authentication.ip.GROUPNAME = iprange[, iprange ...]. Thanks again! This is really interesting. This made me go and look at the source, where I found IPMatcher.java. This does indeed do the job. It also confirms something I have been thinking about this last week. I was tasked with implementing something similar only using data stored in a relational DB. The DB access is via the ORM tool Hibernate. The table in question is populated with rows that correspond to the expanded definition given by the initial IP address range specifier. A very early thought of mine was that it would be much more efficient and much simpler to just expand the specifier and compare against an incoming IP address without using a table. Unfortunately this idea was rejected. I was told that using the DB should present no performance problems and might even be quicker than what I was going to do. They may have been right with my implementation. Mine did not make use of the netmask optimisation like IPMatcher does. But using netmask I think the IPMatcher approach will be beat any DB implementation hands down! I wonder if the syntax accepted by IPMatcher could be extended. At the moment you can say 12.34.56 which means 12.34.56.0 to 12.34.56.255. How about using hyphens for ranges, e.g 12.34.56.0-255. '*' would be a synonym for 0-255 so you could also say 12.34.56.*. But you could say 12.34.56.0-100 for a slightly more restrcted range. Do people think this might be useful? -- Regards, Andrew M. -- SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] recognise user by IP address
We want here to use IP authentication, but for version 1.4.2 of DSpace. Is it possible? I know there was a patch in SourceForge: https://sourceforge.net/tracker2/index.php?func=detailaid=1566820group_id=19984atid=319984but I was unable to use it correctly, when I looked at it (perhaps due to problems in the database). I also found that: http://www.krugle.org/examples/p-5DFWGqOOSydqcBnH/IPAuthentication.java but did not have time to look further... What's the right way? -- François Parmentier / INIST-CNRS On Tue, Dec 2, 2008 at 8:53 AM, Claudia Jürgen [EMAIL PROTECTED] wrote: Hi Andrew, you can add ip based authentication to the authentication stack in DSpace and define authentication rules via the config parameter authentication.ip.GROUPNAME = iprange[, iprange ...]. Claudia Jürgen Andrew Marlow schrieb: Hello, please excuse my ignorance about dspace, I am new here. What do people think to the idea of identifying users by their IP address? This would be an alternative to logging in via the traditional username+password. This would be associated with an administrative function that registered user groups with IP address ranges. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
[Dspace-tech] recognise user by IP address
Hello, please excuse my ignorance about dspace, I am new here. What do people think to the idea of identifying users by their IP address? This would be an alternative to logging in via the traditional username+password. This would be associated with an administrative function that registered user groups with IP address ranges. -- Regards, Andrew M. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] recognise user by IP address
Hi Andrew, please excuse my ignorance about dspace, I am new here. What do people think to the idea of identifying users by their IP address? This would be an alternative to logging in via the traditional username+password. This would be associated with an administrative function that registered user groups with IP address ranges. As Allen pointed out in a previous reply, for general single user authentication (e.g. allowing a user to submit items in a particular collection) it would not make a good choice. However for more general authentication (e.g. allowing all users on your university campus to read items in a protected collection) it would make a good authentication method as it would mean that many users can get away without the need for a DSpace account - they can be given access because because of the machine they are using. This is a commonly used method by publishers of electronic materials to grant access to subscribing institutions. DSpace has a stackable authentication system making it easy to add new authentication methods and enable users to choose which method they log in with. An IP authentication method has been distributed with DSpace since version 1.5. See: http://www.dspace.org/1_5_1Documentation/DSpace-Manual.pdf page 83. However at present I believe there are a few issues with it, such as: https://sourceforge.net/tracker/?func=detailatid=119984aid=2088431group_i d=19984 If you try it out, we'd love to hear your feedback about it in order that we can improve it. Thanks, Stuart _ Gwasanaethau Gwybodaeth Information Services Prifysgol Aberystwyth Aberystwyth University E-bost / E-mail: [EMAIL PROTECTED] Ffon / Tel: (01970) 622860 _ - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
Re: [Dspace-tech] recognise user by IP address
Hi Andrew, you can add ip based authentication to the authentication stack in DSpace and define authentication rules via the config parameter authentication.ip.GROUPNAME = iprange[, iprange ...]. Claudia Jürgen Andrew Marlow schrieb: Hello, please excuse my ignorance about dspace, I am new here. What do people think to the idea of identifying users by their IP address? This would be an alternative to logging in via the traditional username+password. This would be associated with an administrative function that registered user groups with IP address ranges. - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100url=/ ___ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
