Page History

...

Disabling auth in Fedora does not preclude the use of container authentication to secure Fedora. However, container roles are not used for any further authorization within Fedora. All requests are treated as superusers.

Tomcat

Add an entry to your $CATALINA_HOME/conf/server.xml that instructs the webapp to load a different web.xml. Assuming Fedora is deployed as the fcrepo webapp, the entry should look like this:

<Server>
  ...
  <Service>
    ...
    <Engine>
      ...
      <Host>
        <Context docBase="fcrepo" altDDName="webapps/fcrepo/WEB-INF/no-auth-web.xml" />
        ...
      </Host>
    </Engine>
  </Service>
</Server>

Jetty

1. Save a copy of the no-auth-web.xml (insert link) to $JETTY_BASE/etc/fcrepo-no-auth-web.xml.
2. Add an entry to your $JETTY_BASE/webapp/fcrepo.xml, instructing Jetty to load a different web.xml:

...

...

To disable authorization simple set the fcrepo.auth.enabled configuration property to false, using either a configuration file or -D argument.