Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

3. You should see something like this:

          [cid:B04FD653-4707-4CDE-A496-3A08E3BA064A@localhost]

 

Setting XACML Policies

Install required polices, remove some restrictive policies.

Fedora
Repository Information View
Repository Name: Fedora Repository

Base URL:     http://localhost:8080/fedora
Version:     3.7.0
PID Namespace:     changeme
PID Delimiter:     :
Sample PID:     changeme:100
Retain PID Namespace:     *
OAI Namespace:     example.org
OAI Delimiter:     :
Sample OAI Identifier:     oai:example.org:changeme:100
Sample Search URL:     http://localhost:8080/fedora/objects
Sample Access URL:     http://localhost:8080/fedora/objects/demo:5
Sample OAI URL:     http://localhost:8080/fedora/oai?verb=Identify
Admin Email:     bob@example.org
Admin Email:     sally@example.org

Setting XACML Policies

Install required polices, remove some restrictive policies.

  1. First stop your Fedora instance by running:$FEDORA_HOME/tomcat/bin/shutdown.sh
  2. Remove they deny-purge policies:

    Code Block
  3. First stop your Fedora instance by running:$FEDORA_HOME/tomcat/bin/shutdown.sh
  4. Remove they deny-purge policies:

    Code Block
    languagebash
    titleCommand Line to remove "deny-purge" policies
    $ rm -v /usr/local/fedora/data/fedora-xacml-policies/repository-policies/default/deny-purge-*
  5. Navigate to the Fedora "repository-policies" directory:

    Code Block
    languagebash
    titleCommand Line to create islandora specific remove "deny-purge" policies
    $ rm cd-v /usr/local/fedora/data/fedora-xacml-policies/repository-policies/default/deny-purge-*
  6. Navigate to the Fedora "repository-policies" directory:Download / Clone the Islandora specific XACML policies from the Islandora GitHub XACML Policies repo

    Code Block
    languagebash
    titleCommand Line to create islandora specific policies
    $ cd /usr/local/fedora/data/fedora-xacml-policies/repository-policies/
  7. Download / Clone the Islandora specific XACML policies from the Islandora GitHub XACML Policies repo

    Code Block
    languagebash
    $ git clone git clone https://github.com/Islandora/islandora-xacml-policies.git islandora

...

  1. Open the $FEDORA_HOME/data/fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml in your favorite editor
  2. Locate the text:

    Code Block
    languagebash
    &lt;AttributeValue DataType="<a href="http://www.w3.org/2001/XMLSchema#string">http://www.w3.org/2001/XMLSchema#string</a>"&gt;127.0.0.1&lt;/AttributeValue&gt;
  3. Duplicate this line for every IP address you wish to access Fedora from (i.e. your Islandora Drupal server, your desktop computer, etc).
    For example

    Code Block
    languagebash
    <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">127.0.0.1</AttributeValue>
    <AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">192.168.56.1</AttributeValue>
    Note

    The Fedora default XACML policies can be restored to their default state at any time by simply removing the 'default' directory, and stopping/starting Fedora. Always backup your polices first before doing this!

    Start up Fedora by using the startup command from step 8:

    Code Block

    . Always backup your polices first before doing this!

  4. Start up Fedora by using the startup command from step 8:

    Code Block
    $FEDORA_HOME/tomcat/bin/startup.sh
  5. Access the Fedora Web Administrator: http://localhost:8080/fedora/admin and ensure you can ingest and purge objects.

Create a milestone 1 snapshot backup:

Code Block
# $FEDORA_HOME/tomcat/bin/shutdown.sh
# /etc/init.d/mysql stop
# /usr/local 
# tar -cvzf fedora-milestone1.tar.gz fedora
# cd /var/lib 
# tar -cvzf mysql-milestone1.tar.gz mysql
# /etc/init.d/mysql start
# $FEDORA_HOME/tomcat/bin/startup.sh

...

 

...

For information on using Fedora, make use of the tutorials at the Fedora Commons site.

...