headers
Schoppet, Chuck | 17 May 2013 15:44
Favicon

[fcrepo-user] Using fedora-rebuild.sh on remote Mulgara 2.1.13 triple-store

Are there any known issues with running fedora-rebuild.sh on Mulgara 2.1.13?

 

We have setup Mulgara 2.1.13 in its own JVM on the same server as Fedora.

 

The fedora program to rebuild the Mulgara triple-store (fedora-rebuild.sh)  builds the triple-store without displaying warnings or errors.  Fedora’s tomcat starts up and the triples can be viewed and changed using fedora REST interfaces: admin  and risearch.

 

However, the Mulgara data directory (/app/local/mulgara/fedora/) is now empty.  Using the find command, I did not find any active “lucene” directories on the file system.  After Fedora and Mulgara are shut down and restarted, the triples are gone.

 

When an object is changed through the admin interface, Mulgara builds the data directory with lucene, temp, xaStatementStore and xaStringPool directories. After restarting Fedora and Mulgara , the triples in the triple-store remain.  

 

Chuck

 

 





This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately. 
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@...
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
Permalink | Reply | 0 comments |
headers
Carol Minton Morris | 17 May 2013 14:48
Favicon

[fcrepo-user] Fwd: Final version of press release

FOR IMMEDIATE RELEASE

May 17, 2013
Read it online: http://bit.ly/YOlSyI

Fedora Futures Project Welcomes New Technical Lead

Winchester, MA  The DuraSpace organization and the Fedora Futures Project are pleased to announce that Andrew Woods will take over as the new Technical Lead for Fedora effective May 15, 2013. In this role he will provide technical leadership for the Fedora Futures Project. Woods joined the DuraSpace organization in early 2009 as a Fedora committer. Since then he has helped establish the D.C. Area Fedora Users Group, been a project co-lead on DuraCloud, and worked in various technical and advisory capacities within DPN, APTrust, Chronopolis, and NDSA.

The Fedora Futures project is currently underway with Edwin Shin, MediaShelf, coordinating development leading up to a planned alpha Fedora 4 release this summer. Recent work has been focused on running Fedora in a cluster to provide greater durability and performance.

"We are thrilled to have Andrew Woods on board as our new Technical Lead for Fedora. Andrew brings impressive technical and leadership skills to Fedora that will be invaluable in advancing the goals of our Fedora Futures Project. We also want to thank Edwin Shin who served as Interim Project Manager and was instrumental in advancing the development of a planned alpha Fedora 4 release, expected in Summer 2013." said Robert Cartolano, AVP for Digital Programs and Technology Services Columbia University Libraries/Information Services.

The fast-moving Fedora Futures initiative was started by members of the Fedora community to preserve the strengths of the Fedora architecture and community, address the need for robust and full-featured repository services, and to provide a successful platform for the next 5-10 years. Read more on the Fedora Futures blog: http://fcrepo.org/blog/2013/03/18/welcome-to-the-future/

Michele Kimpton, CEO DuraSpace said, "Andrew Woods is the best possible choice to lead Fedora into the next generation of services.  He has established himself in the community as a respected technical contributor and collaborator on projects such as APTrust and DPN.  His expertise and knowledge in the repository application space and deep knowledge of Fedora will make his transition to his new role seamless."

The Fedora Futures Steering Committee is looking for project sponsors and in-kind contributions of developer time to meet project goals over the next three years. If you are interested in finding out about how to get involved please contact Jonathan Markow at jjmarkow-db6tg5YPMqnNLxjTenLetw@public.gmane.org.

About DuraSpace

DuraSpace (http://duraspace.org) is an independent 501(c)(3) not-for-profit organization providing leadership and innovation for open technologies that promote durable, persistent access to digital data. We collaborate with academic, scientific, cultural, and technology communities by supporting projects and creating services to help ensure that current and future generations have access to our collective digital heritage. Our values are expressed in our organizational byline, "Committed to our digital future."

DuraSpace supported open technology projects provide long-term, durable access to and discovery of digital assets. DSpace and Fedora are two of the most widely-used repository solutions in the world with more than fifteen hundred institutions that use and help develop these open source software repository platforms.
 
DuraSpace also provides innovative solutions for the digital preservation community to meet today’s access and preservation challenges with subscription services that include DuraCloud, an easy and cost effective way to archive, share and manage content in the cloud and DSpaceDirect, a low-cost, hosted repository service due to launch in the summer of 2013.

--
Carol Minton Morris
DuraSpace
Director of Marketing and Communications
cmmorris-RMZ2BmOfPoTNLxjTenLetw@public.gmane.org
Skype: carolmintonmorris
607 592-3135
Twitter <at> DuraSpace
Twitter <at> DuraCloud
http://DuraSpace.org 
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@...
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
Permalink | Reply | 0 comments |
headers
Stefano Cossu | 16 May 2013 22:39
Favicon

Re: [fcrepo-user] Fedora-commons-users Digest, Vol 75, Issue 10

I guess I'll have to dig more into the FeSL documentation on how to 
write a custom filter - but thanks, that is a great starting point.
We need to check authorization against an external application because 
that's where the permissions system has always been kept, and it's so 
complex that we cannot replicate it.
Stefano

p.s. Sorry for the messy chain, I was getting these e-mails in digests.

On 5/16/13 11:59 AM,
fedora-commons-users-request@... 
wrote:
> Stefano-
>    Depending on how much you need to have both XACML and the external
> authorization, you could probably just implement alternative authorization
> filters and wire them into the Spring configuration. With a couple of
> noteworthy exceptions, FESL expects the filters to do the authZ work (and
> deal directly with the XACML machinery).
>
> - Ben
>
>
>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
Permalink | Reply | 0 comments |
headers
Yott, Patrick | 16 May 2013 21:08

[fcrepo-user] Northeast Fedora User Group Unconference

Please excuse the provincial nature of this post,…

Please join us Monday, June 3, for a full-day unconference to share ideas, techniques, and solutions with fellow Fedora users. NEFUG welcomes content managers, metadata specialists, programmers, and anyone involved in curating, managing, and delivering digital content in a Fedora-based environment. Details about the day are available at http://blogs.lib.uconn.edu/nefug/nefug2013/
Thanks to Five Colleges, Inc., and with additional support from Northeastern University and the University of Connecticut, there is no registration fee, and morning coffee/snacks and lunch will be provided. So that we can insure adequate meeting space and provide enough food for everyone, please register by May 29th.

We look forward to seeing you!
-NEFUG 2013 Organizers (Greg Colati, Erin Fahy, Kelcy Shepherd, Patrick Yott)


Patrick Yott
Associate Dean for Digital Strategies and Services
Northeastern University Libraries
360 Huntington Ave, SL 327
Boston, MA 02117
p.yott-JmejyYbYXtk@public.gmane.org
617.373.4194
617.373.5409 (fax)

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@...
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
Permalink | Reply | 0 comments |
headers
Stefano Cossu | 16 May 2013 18:59
Favicon

Re: [fcrepo-user] [NEWBIE] Accessing external resource with HTTP

I eventually opted for having all the data streams managed, mostly due 
to an unpredictable structure of the source URIs.
It is good to know that I can have the HTTP auth option though. I was 
also testing Fedora's capabilities...
Thanks,
Stefano

On 5/16/13 11:17 AM,
fedora-commons-users-request@... 
wrote:
>
> Stefano,
>
> I assume that some sort of access control in Fedora (a policy) will be
> applied to the Fedora external datastream or object, or that the
> repository itself will not be publicly exposed?  Otherwise, Fedora
> basically becomes an open back window to access content that's protected
> by a locked front door.
>
> I think the primary reason why this issue hasn't come up before is
> because most repository owners have direct control over the objects
> within their repository, and can manage the authnz architecture to suit
> their own needs.  If you have some degree of control over who can access
> the images on the backend webserver, then the simplest solution would be
> to configure the backend web server to allow requests from the Fedora
> host to pass through unimpeded, using IP access control.
>
> I took a look at the source code, and the method that makes the actual
> request is
>
> https://github.com/fcrepo/fcrepo/blob/master/fcrepo-server/src/main/java/org/fcrepo/server/storage/DefaultExternalContentManager.java
>
> line 280:  private MIMETypedStream getFromWeb(ContentManagerParams params)
>
> Rich is correct:  populating ContentManagerParams would get the
> credentials injected for you.  I don't recall how those parameters get
> populated, though.
>
> Turning debug logging on will give you  *a lot* of information about the
> handling of the request.
>
> -- Scott
>
> On 05/09/2013 04:02 PM, Stefano Cossu wrote:
>>  <at> Scott: I can't afford to have this datastream managed by Fedora,
>> because  it's several megabytes large and there are over a million of them.
>>
>>  <at> Rich: the http://user <at> pass:/resource syntax works with cURL too, that's
>> why I gave it a shot even though I don't know what Fedora actually uses
>> to connect to remote servers.
>> Your source link is very interesting though. I'll give it a look. I
>> wonder how this hasn't been brought up before. Accessing resources
>> through authentication seems like quite a common task to me, and I hoped
>> I could do it without hacking the Fedora code.
>>
>> Thanks
>> sc
>>
>>
>> Stefano Cossu
>> Director of Application Services, Collections
>>
>> The Art Institute of Chicago
>> 116 S. Michigan Ave.
>> Chicago, IL 60603
>> 312-499-4026
>>
>>
>> On 5/9/13 3:45 PM,
fedora-commons-users-request@... wrote:
>>> Send Fedora-commons-users mailing list submissions to
>>> 	fedora-commons-users@...
>>>
>>> To subscribe or unsubscribe via the World Wide Web, visit
>>> 	https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>> or, via email, send a message with subject or body 'help' to
>>> 	fedora-commons-users-request@...
>>>
>>> You can reach the person managing the list at
>>> 	fedora-commons-users-owner@...
>>>
>>> When replying, please edit your Subject line so it is more specific
>>> than "Re: Contents of Fedora-commons-users digest..."
>>>
>>>
>>> Today's Topics:
>>>
>>>       1. Re: [NEWBIE] Accessing external resource with HTTP
>>>          authentication (Benjamin Armintor)
>>>
>>>
>>> ----------------------------------------------------------------------
>>>
>>> Message: 1
>>> Date: Thu, 9 May 2013 16:45:16 -0400
>>> From: Benjamin Armintor <armintor@...>
>>> Subject: Re: [fcrepo-user] [NEWBIE] Accessing external resource with
>>> 	HTTP	authentication
>>> To: "Support and info exchange list for Fedora users."
>>> 	<fedora-commons-users@...>
>>> Message-ID:
>>> 	<CADQQ8TPFxo8va7uB2nCb6XvbJzCbf1s7UnU7hfTCqhpntWBHwg@...>
>>> Content-Type: text/plain; charset="iso-8859-1"
>>>
>>> Yes, in that sense it would be straightforward- though this question of
>>> where the credentials would be stored was one of things that derailed the
>>> feature in the first place!
>>>
>>>
>>> On Thu, May 9, 2013 at 4:40 PM, Rich d'Rich <rich.d.rich@...> wrote:
>>>
>>>> AFAIK the username:password <at>  syntax is a browser artefact that the Java
>>>> HTTP access libraries (apache commons httpclient) that Fedora uses doesn't
>>>> support.
>>>>
>>>> This also means that you can't do a server-server import where the source
>>>> Fedora server requires authentication, and it causes problems with
>>>> disseminators.
>>>>
>>>> However, looking at the code, most of the "wiring" is there:
>>>>
>>>> https://github.com/fcrepo/fcrepo/blob/master/fcrepo-server/src/main/java/org/fcrepo/server/access/DefaultAccess.java
>>>>
>>>> it just needs getDatastreamDissemination (around line 1145) to extract a
>>>> username and password from somewhere and put it into ContentManagerParams.
>>>> Ideally, there would be a configured table of known external servers and
>>>> credentials that could be kept secure so passwords aren't bandied about.
>>>>
>>>> I may be wrong though and there's already a way to do this :-)
>>>>
>>>>
>>>> On 10 May 2013 06:36, Scott Prater <prater@...> wrote:
>>>>
>>>>> Stefano --
>>>>>
>>>>> Are you ingesting the datastreams as managed datastreams, or as redirect
>>>>> or external datastreams?
>>>>>
>>>>> If the former, once Fedora ingests the FOXML, the object is referred to
>>>>> by its internal Fedora URI, and no source URLs or passwords are exposed
>>>>> in any object export.
>>>>>
>>>>> If the datastreams are managed, then you may want to take a compromise
>>>>> approach: fetch them to the local machine using curl or some such tool,
>>>>> then ingest the local file.  Once it's ingested, you can delete the
>>>>> local file.
>>>>>
>>>>> Managed datastreams are usually preferred to external or redirect
>>>>> datastreams;  there are use cases for external and redirect datastreams
>>>>> (which is why they exist), but the normal case is to store datastreams
>>>>> as managed.
>>>>>
>>>>> -- Scott
>>>>>
>>>>> On 05/09/2013 01:08 PM, Benjamin Armintor wrote:
>>>>>> Stefano-
>>>>>>       I remember some conversation a couple of years ago about supporting
>>>>>> BASIC auth in services, but as far as I know they didn't go anywhere.
>>>>>>      Maybe another committer remembers something?  In any case, I don't see
>>>>>> why storing the credentials like that wouldn't work, if you can accept
>>>>>> the plain-text issues you cite.
>>>>>>
>>>>>> As far as certs, Im afraid you're on your own.  I will warn you that
>>>>>> Java errs on the side of verification unless you instruct it not to, so
>>>>>> invalid certs will cause other problems.
>>>>>>
>>>>>> - Ben
>>>>>>
>>>>>>
>>>>>> On Thu, May 9, 2013 at 12:32 PM, Stefano Cossu <scossu@...
>>>>>> <mailto:scossu@...>> wrote:
>>>>>>
>>>>>>        Hi there,
>>>>>>        I'm starting to tinker with Fedora and trying to write a CMA
>>>>> workflow.
>>>>>>        I'm building a digital object that should grab an image datastream
>>>>> from
>>>>>>        an HTTPS server which requires basic authentication.
>>>>>>        I tried inserting the authentication data in the URL for the
>>>>> datastream,
>>>>>>        but now I have 2 problems:
>>>>>>        1) Username and password are stored in plain text in the FOXML,
>>>>> visible
>>>>>>        by everyone who looks up that record in Fedora, as well as all over
>>>>> the
>>>>>>        logs.
>>>>>>        2) I still can't connect to the server this way. The server's
>>>>>>        certificate is expired, I don't know if that plays a role.
>>>>>>
>>>>>>        Fedora throws this error:
>>>>>>
>>>>>>        ERROR 2013-05-09 11:04:28.618 [http-8080-1] (BaseRestResource)
>>>>>>        Unexpected error fulfilling REST API request
>>>>>>        org.fcrepo.server.errors.HttpServiceNotFoundException:
>>>>>>        [DefaultExternalContentManager] returned an error.  The underlying
>>>>> error
>>>>>>        was a org.fcrepo.server.errors.GeneralException  T
>>>>>>        he message was  "Error getting
>>>>>>        https://username:password <at> imageserver/myHugePicture" .
>>>>>>                  at
>>>>>>
>>>>> org.fcrepo.server.storage.DefaultExternalContentManager.getExternalContent(DefaultExternalContentManager.java:152)
>>>>>>        ~[fcrepo-server-3.6.2.jar:na]
>>>>>>                  at
>>>>>>
>>>>> org.fcrepo.server.access.DefaultAccess.getDatastreamDissemination(DefaultAccess.java:1148)
>>>>>>        ~[fcrepo-server-3.6.2.jar:na]
>>>>>>                  at
>>>>>>
>>>>> org.fcrepo.server.rest.DatastreamResource.getDatastream(DatastreamResource.java:247)
>>>>>>        ~[fcrepo-server-3.6.2.jar:na]
>>>>>>        [...]
>>>>>>
>>>>>>        And the image server's Apache error log:
>>>>>>
>>>>>>        Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection to
>>>>>>        child 0 established (server imageserver:443)
>>>>>>        [Thu May 09 11:04:25 2013] [info] Seeding PRNG with 144 bytes of
>>>>> entropy
>>>>>>        [Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] SSL library
>>>>> error
>>>>>>        1 in handshake (server imageserver:443)
>>>>>>        [Thu May 09 11:04:25 2013] [info] SSL Library Error: 336151608
>>>>>>        error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal
>>>>> error
>>>>>>        [Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection
>>>>> closed
>>>>>>        to child 0 with abortive shutdown (server imageserver:443)
>>>>>>        [...]
>>>>>>
>>>>>>        Of course, I can always use a redirect datastream and let the client
>>>>>>        deal with authentication and SSL, but I'd like to hide the source
>>>>> URI if
>>>>>>        possible.
>>>>>>
>>>>>>
>>>>>>        Below is the FOXML representation of my object:
>>>>>>
>>>>>>        <foxml:digitalObject VERSION="1.1" PID="test:dervPub_obj"
>>>>>>        xsi:schemaLocation="info:fedora/fedora-system:def/foxml#
>>>>>>        http://www.fedora.info/definitions/1/0/foxml1-1.xsd">
>>>>>>              <foxml:objectProperties>
>>>>>>                  <foxml:property
>>>>>>        NAME="info:fedora/fedora-system:def/model#state" VALUE="Active"/>
>>>>>>                  <foxml:property
>>>>>>        NAME="info:fedora/fedora-system:def/model#label" VALUE="Disseminator
>>>>>>        object"/>
>>>>>>                  <foxml:property
>>>>>>        NAME="info:fedora/fedora-system:def/model#ownerId"
>>>>> VALUE="fedoraAdmin"/>
>>>>>>                  <foxml:property
>>>>>>        NAME="info:fedora/fedora-system:def/model#createdDate"
>>>>>>        VALUE="2013-05-09T15:37:41.708Z"/>
>>>>>>                  <foxml:property
>>>>>>        NAME="info:fedora/fedora-system:def/view#lastModifiedDate"
>>>>>>        VALUE="2013-05-09T15:37:41.892Z"/>
>>>>>>              </foxml:objectProperties>
>>>>>>              <foxml:datastream ID="AUDIT" STATE="A" CONTROL_GROUP="X"
>>>>>>        VERSIONABLE="false">
>>>>>>                  <foxml:datastreamVersion ID="AUDIT.0" LABEL="Audit Trail
>>>>> for
>>>>>>        this object" CREATED="2013-05-09T15:37:41.708Z" MIMETYPE="text/xml"
>>>>>>        FORMAT_URI="info:fedora/fedora-system:format/xml.fedora.audit">
>>>>>>                      <foxml:xmlContent>
>>>>>>                          <audit:auditTrail>
>>>>>>                              <audit:record ID="AUDREC1">
>>>>>>                                  <audit:process type="Fedora API-M"/>
>>>>>>        <audit:action>addDatastream</audit:action>
>>>>>>        <audit:componentID>SOURCE_IMG</audit:componentID>
>>>>>>        <audit:responsibility>fedoraAdmin</audit:responsibility>
>>>>>>        <audit:date>2013-05-09T15:37:41.892Z</audit:date>
>>>>>>                                  <audit:justification/>
>>>>>>                              </audit:record>
>>>>>>                          </audit:auditTrail>
>>>>>>                      </foxml:xmlContent>
>>>>>>                  </foxml:datastreamVersion>
>>>>>>              </foxml:datastream>
>>>>>>              <foxml:datastream ID="DC" STATE="A" CONTROL_GROUP="X"
>>>>>>        VERSIONABLE="true">
>>>>>>                  <foxml:datastreamVersion ID="DC1.0" LABEL="Dublin Core
>>>>> Record
>>>>>>        for this object" CREATED="2013-05-09T15:37:41.708Z"
>>>>> MIMETYPE="text/xml"
>>>>>>        FORMAT_URI="http://www.openarchives.org/OAI/2.0/oai_dc/"
>>>>> SIZE="388">
>>>>>>                      <foxml:xmlContent>
>>>>>>                          <oai_dc:dc
>>>>>>        xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/
>>>>>>        http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
>>>>>>                              <dc:title>Disseminator object</dc:title>
>>>>>>        <dc:identifier>test:dervPub_obj</dc:identifier>
>>>>>>                          </oai_dc:dc>
>>>>>>                      </foxml:xmlContent>
>>>>>>                  </foxml:datastreamVersion>
>>>>>>              </foxml:datastream>
>>>>>>              <foxml:datastream ID="RELS-EXT" STATE="A" CONTROL_GROUP="X"
>>>>>>        VERSIONABLE="false">
>>>>>>                  <foxml:datastreamVersion ID="RELS-EXT.0"
>>>>> LABEL="Relationships"
>>>>>>        CREATED="2013-05-09T15:37:41.837Z" MIMETYPE="application/rdf+xml"
>>>>>>        FORMAT_URI="info:fedora/fedora-system:FedoraRELSExt-1.0" SIZE="273">
>>>>>>                      <foxml:xmlContent>
>>>>>>                          <rdf:RDF>
>>>>>>                              <rdf:Description
>>>>>>        rdf:about="info:fedora/test:dervPub_obj">
>>>>>>                                  <hasModel
>>>>>>        rdf:resource="info:fedora/test:dervPub_CModel"/>
>>>>>>                              </rdf:Description>
>>>>>>                          </rdf:RDF>
>>>>>>                      </foxml:xmlContent>
>>>>>>                  </foxml:datastreamVersion>
>>>>>>              </foxml:datastream>
>>>>>>              <foxml:datastream ID="SOURCE_IMG" STATE="A" CONTROL_GROUP="E"
>>>>>>        VERSIONABLE="true">
>>>>>>                  <foxml:datastreamVersion ID="SOURCE_IMG.0" LABEL="full
>>>>> sized
>>>>>>        image" CREATED="2013-05-09T15:37:41.892Z" MIMETYPE="image/jpeg">
>>>>>>                      <foxml:contentLocation TYPE="URL"
>>>>>>        REF="https://username:password <at> imageserver/myHugePicture"/>
>>>>>>                  </foxml:datastreamVersion>
>>>>>>              </foxml:datastream>
>>>>>>
>>>>>>        I would really appreciate your help.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>>>        Learn Graph Databases - Download FREE O'Reilly Book
>>>>>>        "Graph Databases" is the definitive new guide to graph databases and
>>>>>>        their applications. This 200-page book is written by three acclaimed
>>>>>>        leaders in the field. The early access version is available now.
>>>>>>        Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>>>>        _______________________________________________
>>>>>>        Fedora-commons-users mailing list
>>>>>>        Fedora-commons-users@...
>>>>>>        <mailto:Fedora-commons-users@...>
>>>>>>        https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>>> Learn Graph Databases - Download FREE O'Reilly Book
>>>>>> "Graph Databases" is the definitive new guide to graph databases and
>>>>>> their applications. This 200-page book is written by three acclaimed
>>>>>> leaders in the field. The early access version is available now.
>>>>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>>>>
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Fedora-commons-users mailing list
>>>>>> Fedora-commons-users@...
>>>>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>>>
>>>>> --
>>>>> Scott Prater
>>>>> Shared Development Group
>>>>> General Library System
>>>>> University of Wisconsin - Madison
>>>>> prater@...
>>>>> 5-5415
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Learn Graph Databases - Download FREE O'Reilly Book
>>>>> "Graph Databases" is the definitive new guide to graph databases and
>>>>> their applications. This 200-page book is written by three acclaimed
>>>>> leaders in the field. The early access version is available now.
>>>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>>> _______________________________________________
>>>>> Fedora-commons-users mailing list
>>>>> Fedora-commons-users@...
>>>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Learn Graph Databases - Download FREE O'Reilly Book
>>>> "Graph Databases" is the definitive new guide to graph databases and
>>>> their applications. This 200-page book is written by three acclaimed
>>>> leaders in the field. The early access version is available now.
>>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>> _______________________________________________
>>>> Fedora-commons-users mailing list
>>>> Fedora-commons-users@...
>>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>
>>>>
>>> -------------- next part --------------
>>> An HTML attachment was scrubbed...
>>>
>>> ------------------------------
>>>
>>> ------------------------------------------------------------------------------
>>> Learn Graph Databases - Download FREE O'Reilly Book
>>> "Graph Databases" is the definitive new guide to graph databases and
>>> their applications. This 200-page book is written by three acclaimed
>>> leaders in the field. The early access version is available now.
>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>
>>> ------------------------------
>>>
>>> _______________________________________________
>>> Fedora-commons-users mailing list
>>> Fedora-commons-users@...
>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>
>>>
>>> End of Fedora-commons-users Digest, Vol 75, Issue 7
>>> ***************************************************
>>
>> ------------------------------------------------------------------------------
>> Learn Graph Databases - Download FREE O'Reilly Book
>> "Graph Databases" is the definitive new guide to graph databases and
>> their applications. This 200-page book is written by three acclaimed
>> leaders in the field. The early access version is available now.
>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>> _______________________________________________
>> Fedora-commons-users mailing list
>> Fedora-commons-users@...
>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>
>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
Permalink | Reply | 0 comments |
headers
Stefano Cossu | 16 May 2013 18:17
Favicon

[fcrepo-user] Two authorization questions

Hi there,
My team and I are building a Fedora repository and we are starting to 
wrap our heads around FeSL and the XACML specifications.

The repository we are building has to necessarily rely on an external 
application to apply some of its policies. The external application 
should be accessed via HTTP request with something like: "Can user John 
Doe read the EXIF data for image 12345ABC?" and receive a positive or 
negative outcome which will determine the result of the authorization 
policy. I have looked around on how to do this, but I'm not sure about 
how to approach the problem.

Any suggestions?

Thanks
Stefano

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
Permalink | Reply | 2 comments |
headers
Wolff, Robert | 10 May 2013 15:56
Favicon

[fcrepo-user] Web developer position available

Please excuse any cross-posting. 

The University of New Hampshire Library seeks an experienced and self-motivated Web Developer for its
Library Information Technology (LIT) unit. LIT provides desktop client support, hardware and software
procurement and management, server administration, and web design and development in support of the
Library's services to the University community. 
The Web Developer/Coder will be responsible for writing back-end code to support new web applications and
search services for end users and Library staff under the direction of the Systems Librarian.

Responsibilities: 
*	All aspects of web application development, including defining requirements, writing code, testing,
deployment, maintenance, and security
*	Auditing existing Library code for adherence to University IT security policy and best practices
*	Following department project management and prioritization methods
*	Developing and maintaining awareness of trends in web development generally and Library computing in particular
*	Providing end user and Library staff technical support as part of a customer-service-oriented team

Required qualifications: 
*	Bachelor's degree and four years of experience, Associate's degree and six years, or combination of
education and experience equal to eight years 
*	Demonstration of experience in web application development using PHP or another language, e.g., an
online portfolio
*	Linux server administration experience
*	Experience with manipulating XML via XSLT 
*	Experience in information technology specialty areas including XHTML/HTML, CSS, PHP, SQL/database
familiarity and Drupal.
*	Experience with LAMP and WIMP stacks (PHP/MySQL)
*	Understanding of and adherence to web standards (HTML, CSS, DOM, Javascript); REST and SOAP service
framework experience
*	Ability to independently manage time between multiple, concurrent projects and support requests
*	Willingness to explore and learn new and emerging technologies 
*	Good oral and written communication skills, particularly with audiences with varying levels of
experience with technology

Preferred qualifications:
*	Apache Lucene search library and Solr search server experience
*	Drupal module/plugin development experience
*	Fedora Commons digital asset management software experience
*	Experience with version control systems
*	Skill using and maintaining open source projects
*	Work experience in libraries and/or higher education 

Please go to https://jobs.usnh.edu for more details.

The University of New Hampshire is an Equal Opportunity/Equal Access/Affirmative Action institution.
The university seeks excellence through diversity among its administrators, faculty, staff, and
students. The university prohibits discrimination on the basis of race, color, religion, sex, age,
national origin, sexual orientation, gender identity or expression, disability, veteran status, or
marital status. Application by members of all underrepresented groups is encouraged.  

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
Permalink | Reply | 0 comments |
headers
Stefano Cossu | 9 May 2013 23:02
Favicon

Re: [fcrepo-user] [NEWBIE] Accessing external resource with HTTP authentication

 <at> Scott: I can't afford to have this datastream managed by Fedora, 
because  it's several megabytes large and there are over a million of them.

 <at> Rich: the http://user <at> pass:/resource syntax works with cURL too, that's 
why I gave it a shot even though I don't know what Fedora actually uses 
to connect to remote servers.
Your source link is very interesting though. I'll give it a look. I 
wonder how this hasn't been brought up before. Accessing resources 
through authentication seems like quite a common task to me, and I hoped 
I could do it without hacking the Fedora code.

Thanks
sc

Stefano Cossu
Director of Application Services, Collections

The Art Institute of Chicago
116 S. Michigan Ave.
Chicago, IL 60603
312-499-4026

On 5/9/13 3:45 PM,
fedora-commons-users-request@... wrote:
> Send Fedora-commons-users mailing list submissions to
> 	fedora-commons-users@...
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
> or, via email, send a message with subject or body 'help' to
> 	fedora-commons-users-request@...
>
> You can reach the person managing the list at
> 	fedora-commons-users-owner@...
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Fedora-commons-users digest..."
>
>
> Today's Topics:
>
>     1. Re: [NEWBIE] Accessing external resource with HTTP
>        authentication (Benjamin Armintor)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 9 May 2013 16:45:16 -0400
> From: Benjamin Armintor <armintor@...>
> Subject: Re: [fcrepo-user] [NEWBIE] Accessing external resource with
> 	HTTP	authentication
> To: "Support and info exchange list for Fedora users."
> 	<fedora-commons-users@...>
> Message-ID:
> 	<CADQQ8TPFxo8va7uB2nCb6XvbJzCbf1s7UnU7hfTCqhpntWBHwg@...>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Yes, in that sense it would be straightforward- though this question of
> where the credentials would be stored was one of things that derailed the
> feature in the first place!
>
>
> On Thu, May 9, 2013 at 4:40 PM, Rich d'Rich <rich.d.rich@...> wrote:
>
>> AFAIK the username:password <at>  syntax is a browser artefact that the Java
>> HTTP access libraries (apache commons httpclient) that Fedora uses doesn't
>> support.
>>
>> This also means that you can't do a server-server import where the source
>> Fedora server requires authentication, and it causes problems with
>> disseminators.
>>
>> However, looking at the code, most of the "wiring" is there:
>>
>> https://github.com/fcrepo/fcrepo/blob/master/fcrepo-server/src/main/java/org/fcrepo/server/access/DefaultAccess.java
>>
>> it just needs getDatastreamDissemination (around line 1145) to extract a
>> username and password from somewhere and put it into ContentManagerParams.
>> Ideally, there would be a configured table of known external servers and
>> credentials that could be kept secure so passwords aren't bandied about.
>>
>> I may be wrong though and there's already a way to do this :-)
>>
>>
>> On 10 May 2013 06:36, Scott Prater <prater@...> wrote:
>>
>>> Stefano --
>>>
>>> Are you ingesting the datastreams as managed datastreams, or as redirect
>>> or external datastreams?
>>>
>>> If the former, once Fedora ingests the FOXML, the object is referred to
>>> by its internal Fedora URI, and no source URLs or passwords are exposed
>>> in any object export.
>>>
>>> If the datastreams are managed, then you may want to take a compromise
>>> approach: fetch them to the local machine using curl or some such tool,
>>> then ingest the local file.  Once it's ingested, you can delete the
>>> local file.
>>>
>>> Managed datastreams are usually preferred to external or redirect
>>> datastreams;  there are use cases for external and redirect datastreams
>>> (which is why they exist), but the normal case is to store datastreams
>>> as managed.
>>>
>>> -- Scott
>>>
>>> On 05/09/2013 01:08 PM, Benjamin Armintor wrote:
>>>> Stefano-
>>>>     I remember some conversation a couple of years ago about supporting
>>>> BASIC auth in services, but as far as I know they didn't go anywhere.
>>>>    Maybe another committer remembers something?  In any case, I don't see
>>>> why storing the credentials like that wouldn't work, if you can accept
>>>> the plain-text issues you cite.
>>>>
>>>> As far as certs, Im afraid you're on your own.  I will warn you that
>>>> Java errs on the side of verification unless you instruct it not to, so
>>>> invalid certs will cause other problems.
>>>>
>>>> - Ben
>>>>
>>>>
>>>> On Thu, May 9, 2013 at 12:32 PM, Stefano Cossu <scossu@...
>>>> <mailto:scossu@...>> wrote:
>>>>
>>>>      Hi there,
>>>>      I'm starting to tinker with Fedora and trying to write a CMA
>>> workflow.
>>>>      I'm building a digital object that should grab an image datastream
>>> from
>>>>      an HTTPS server which requires basic authentication.
>>>>      I tried inserting the authentication data in the URL for the
>>> datastream,
>>>>      but now I have 2 problems:
>>>>      1) Username and password are stored in plain text in the FOXML,
>>> visible
>>>>      by everyone who looks up that record in Fedora, as well as all over
>>> the
>>>>      logs.
>>>>      2) I still can't connect to the server this way. The server's
>>>>      certificate is expired, I don't know if that plays a role.
>>>>
>>>>      Fedora throws this error:
>>>>
>>>>      ERROR 2013-05-09 11:04:28.618 [http-8080-1] (BaseRestResource)
>>>>      Unexpected error fulfilling REST API request
>>>>      org.fcrepo.server.errors.HttpServiceNotFoundException:
>>>>      [DefaultExternalContentManager] returned an error.  The underlying
>>> error
>>>>      was a org.fcrepo.server.errors.GeneralException  T
>>>>      he message was  "Error getting
>>>>      https://username:password <at> imageserver/myHugePicture" .
>>>>                at
>>>>
>>> org.fcrepo.server.storage.DefaultExternalContentManager.getExternalContent(DefaultExternalContentManager.java:152)
>>>>      ~[fcrepo-server-3.6.2.jar:na]
>>>>                at
>>>>
>>> org.fcrepo.server.access.DefaultAccess.getDatastreamDissemination(DefaultAccess.java:1148)
>>>>      ~[fcrepo-server-3.6.2.jar:na]
>>>>                at
>>>>
>>> org.fcrepo.server.rest.DatastreamResource.getDatastream(DatastreamResource.java:247)
>>>>      ~[fcrepo-server-3.6.2.jar:na]
>>>>      [...]
>>>>
>>>>      And the image server's Apache error log:
>>>>
>>>>      Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection to
>>>>      child 0 established (server imageserver:443)
>>>>      [Thu May 09 11:04:25 2013] [info] Seeding PRNG with 144 bytes of
>>> entropy
>>>>      [Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] SSL library
>>> error
>>>>      1 in handshake (server imageserver:443)
>>>>      [Thu May 09 11:04:25 2013] [info] SSL Library Error: 336151608
>>>>      error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal
>>> error
>>>>      [Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection
>>> closed
>>>>      to child 0 with abortive shutdown (server imageserver:443)
>>>>      [...]
>>>>
>>>>      Of course, I can always use a redirect datastream and let the client
>>>>      deal with authentication and SSL, but I'd like to hide the source
>>> URI if
>>>>      possible.
>>>>
>>>>
>>>>      Below is the FOXML representation of my object:
>>>>
>>>>      <foxml:digitalObject VERSION="1.1" PID="test:dervPub_obj"
>>>>      xsi:schemaLocation="info:fedora/fedora-system:def/foxml#
>>>>      http://www.fedora.info/definitions/1/0/foxml1-1.xsd">
>>>>            <foxml:objectProperties>
>>>>                <foxml:property
>>>>      NAME="info:fedora/fedora-system:def/model#state" VALUE="Active"/>
>>>>                <foxml:property
>>>>      NAME="info:fedora/fedora-system:def/model#label" VALUE="Disseminator
>>>>      object"/>
>>>>                <foxml:property
>>>>      NAME="info:fedora/fedora-system:def/model#ownerId"
>>> VALUE="fedoraAdmin"/>
>>>>                <foxml:property
>>>>      NAME="info:fedora/fedora-system:def/model#createdDate"
>>>>      VALUE="2013-05-09T15:37:41.708Z"/>
>>>>                <foxml:property
>>>>      NAME="info:fedora/fedora-system:def/view#lastModifiedDate"
>>>>      VALUE="2013-05-09T15:37:41.892Z"/>
>>>>            </foxml:objectProperties>
>>>>            <foxml:datastream ID="AUDIT" STATE="A" CONTROL_GROUP="X"
>>>>      VERSIONABLE="false">
>>>>                <foxml:datastreamVersion ID="AUDIT.0" LABEL="Audit Trail
>>> for
>>>>      this object" CREATED="2013-05-09T15:37:41.708Z" MIMETYPE="text/xml"
>>>>      FORMAT_URI="info:fedora/fedora-system:format/xml.fedora.audit">
>>>>                    <foxml:xmlContent>
>>>>                        <audit:auditTrail>
>>>>                            <audit:record ID="AUDREC1">
>>>>                                <audit:process type="Fedora API-M"/>
>>>>      <audit:action>addDatastream</audit:action>
>>>>      <audit:componentID>SOURCE_IMG</audit:componentID>
>>>>      <audit:responsibility>fedoraAdmin</audit:responsibility>
>>>>      <audit:date>2013-05-09T15:37:41.892Z</audit:date>
>>>>                                <audit:justification/>
>>>>                            </audit:record>
>>>>                        </audit:auditTrail>
>>>>                    </foxml:xmlContent>
>>>>                </foxml:datastreamVersion>
>>>>            </foxml:datastream>
>>>>            <foxml:datastream ID="DC" STATE="A" CONTROL_GROUP="X"
>>>>      VERSIONABLE="true">
>>>>                <foxml:datastreamVersion ID="DC1.0" LABEL="Dublin Core
>>> Record
>>>>      for this object" CREATED="2013-05-09T15:37:41.708Z"
>>> MIMETYPE="text/xml"
>>>>      FORMAT_URI="http://www.openarchives.org/OAI/2.0/oai_dc/"
>>> SIZE="388">
>>>>                    <foxml:xmlContent>
>>>>                        <oai_dc:dc
>>>>      xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/
>>>>      http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
>>>>                            <dc:title>Disseminator object</dc:title>
>>>>      <dc:identifier>test:dervPub_obj</dc:identifier>
>>>>                        </oai_dc:dc>
>>>>                    </foxml:xmlContent>
>>>>                </foxml:datastreamVersion>
>>>>            </foxml:datastream>
>>>>            <foxml:datastream ID="RELS-EXT" STATE="A" CONTROL_GROUP="X"
>>>>      VERSIONABLE="false">
>>>>                <foxml:datastreamVersion ID="RELS-EXT.0"
>>> LABEL="Relationships"
>>>>      CREATED="2013-05-09T15:37:41.837Z" MIMETYPE="application/rdf+xml"
>>>>      FORMAT_URI="info:fedora/fedora-system:FedoraRELSExt-1.0" SIZE="273">
>>>>                    <foxml:xmlContent>
>>>>                        <rdf:RDF>
>>>>                            <rdf:Description
>>>>      rdf:about="info:fedora/test:dervPub_obj">
>>>>                                <hasModel
>>>>      rdf:resource="info:fedora/test:dervPub_CModel"/>
>>>>                            </rdf:Description>
>>>>                        </rdf:RDF>
>>>>                    </foxml:xmlContent>
>>>>                </foxml:datastreamVersion>
>>>>            </foxml:datastream>
>>>>            <foxml:datastream ID="SOURCE_IMG" STATE="A" CONTROL_GROUP="E"
>>>>      VERSIONABLE="true">
>>>>                <foxml:datastreamVersion ID="SOURCE_IMG.0" LABEL="full
>>> sized
>>>>      image" CREATED="2013-05-09T15:37:41.892Z" MIMETYPE="image/jpeg">
>>>>                    <foxml:contentLocation TYPE="URL"
>>>>      REF="https://username:password <at> imageserver/myHugePicture"/>
>>>>                </foxml:datastreamVersion>
>>>>            </foxml:datastream>
>>>>
>>>>      I would really appreciate your help.
>>>>
>>>>
>>>>
>>>>
>>> ------------------------------------------------------------------------------
>>>>      Learn Graph Databases - Download FREE O'Reilly Book
>>>>      "Graph Databases" is the definitive new guide to graph databases and
>>>>      their applications. This 200-page book is written by three acclaimed
>>>>      leaders in the field. The early access version is available now.
>>>>      Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>>      _______________________________________________
>>>>      Fedora-commons-users mailing list
>>>>      Fedora-commons-users@...
>>>>      <mailto:Fedora-commons-users@...>
>>>>      https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>
>>>>
>>>>
>>>>
>>>>
>>> ------------------------------------------------------------------------------
>>>> Learn Graph Databases - Download FREE O'Reilly Book
>>>> "Graph Databases" is the definitive new guide to graph databases and
>>>> their applications. This 200-page book is written by three acclaimed
>>>> leaders in the field. The early access version is available now.
>>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Fedora-commons-users mailing list
>>>> Fedora-commons-users@...
>>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>>
>>>
>>> --
>>> Scott Prater
>>> Shared Development Group
>>> General Library System
>>> University of Wisconsin - Madison
>>> prater@...
>>> 5-5415
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Learn Graph Databases - Download FREE O'Reilly Book
>>> "Graph Databases" is the definitive new guide to graph databases and
>>> their applications. This 200-page book is written by three acclaimed
>>> leaders in the field. The early access version is available now.
>>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>>> _______________________________________________
>>> Fedora-commons-users mailing list
>>> Fedora-commons-users@...
>>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>>
>>
>>
>> ------------------------------------------------------------------------------
>> Learn Graph Databases - Download FREE O'Reilly Book
>> "Graph Databases" is the definitive new guide to graph databases and
>> their applications. This 200-page book is written by three acclaimed
>> leaders in the field. The early access version is available now.
>> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>> _______________________________________________
>> Fedora-commons-users mailing list
>> Fedora-commons-users@...
>> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>>
>>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and
> their applications. This 200-page book is written by three acclaimed
> leaders in the field. The early access version is available now.
> Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
>
> ------------------------------
>
> _______________________________________________
> Fedora-commons-users mailing list
> Fedora-commons-users@...
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
>
>
> End of Fedora-commons-users Digest, Vol 75, Issue 7
> ***************************************************

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
Permalink | Reply | 2 comments |
headers
Stefano Cossu | 9 May 2013 18:32
Favicon

[fcrepo-user] [NEWBIE] Accessing external resource with HTTP authentication

Hi there,
I'm starting to tinker with Fedora and trying to write a CMA workflow.
I'm building a digital object that should grab an image datastream from 
an HTTPS server which requires basic authentication.
I tried inserting the authentication data in the URL for the datastream, 
but now I have 2 problems:
1) Username and password are stored in plain text in the FOXML, visible 
by everyone who looks up that record in Fedora, as well as all over the 
logs.
2) I still can't connect to the server this way. The server's 
certificate is expired, I don't know if that plays a role.

Fedora throws this error:

ERROR 2013-05-09 11:04:28.618 [http-8080-1] (BaseRestResource) 
Unexpected error fulfilling REST API request
org.fcrepo.server.errors.HttpServiceNotFoundException: 
[DefaultExternalContentManager] returned an error.  The underlying error 
was a org.fcrepo.server.errors.GeneralException  T
he message was  "Error getting 
https://username:password <at> imageserver/myHugePicture" .
         at

org.fcrepo.server.storage.DefaultExternalContentManager.getExternalContent(DefaultExternalContentManager.java:152) 
~[fcrepo-server-3.6.2.jar:na]
         at 
org.fcrepo.server.access.DefaultAccess.getDatastreamDissemination(DefaultAccess.java:1148) 
~[fcrepo-server-3.6.2.jar:na]
         at 
org.fcrepo.server.rest.DatastreamResource.getDatastream(DatastreamResource.java:247) 
~[fcrepo-server-3.6.2.jar:na]
[...]

And the image server's Apache error log:

Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection to 
child 0 established (server imageserver:443)
[Thu May 09 11:04:25 2013] [info] Seeding PRNG with 144 bytes of entropy
[Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] SSL library error 
1 in handshake (server imageserver:443)
[Thu May 09 11:04:25 2013] [info] SSL Library Error: 336151608 
error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal error
[Thu May 09 11:04:25 2013] [info] [client 10.80.25.47] Connection closed 
to child 0 with abortive shutdown (server imageserver:443)
[...]

Of course, I can always use a redirect datastream and let the client 
deal with authentication and SSL, but I'd like to hide the source URI if 
possible.

Below is the FOXML representation of my object:

<foxml:digitalObject VERSION="1.1" PID="test:dervPub_obj" 
xsi:schemaLocation="info:fedora/fedora-system:def/foxml# 
http://www.fedora.info/definitions/1/0/foxml1-1.xsd">
     <foxml:objectProperties>
         <foxml:property 
NAME="info:fedora/fedora-system:def/model#state" VALUE="Active"/>
         <foxml:property 
NAME="info:fedora/fedora-system:def/model#label" VALUE="Disseminator 
object"/>
         <foxml:property 
NAME="info:fedora/fedora-system:def/model#ownerId" VALUE="fedoraAdmin"/>
         <foxml:property 
NAME="info:fedora/fedora-system:def/model#createdDate" 
VALUE="2013-05-09T15:37:41.708Z"/>
         <foxml:property 
NAME="info:fedora/fedora-system:def/view#lastModifiedDate" 
VALUE="2013-05-09T15:37:41.892Z"/>
     </foxml:objectProperties>
     <foxml:datastream ID="AUDIT" STATE="A" CONTROL_GROUP="X" 
VERSIONABLE="false">
         <foxml:datastreamVersion ID="AUDIT.0" LABEL="Audit Trail for 
this object" CREATED="2013-05-09T15:37:41.708Z" MIMETYPE="text/xml" 
FORMAT_URI="info:fedora/fedora-system:format/xml.fedora.audit">
             <foxml:xmlContent>
                 <audit:auditTrail>
                     <audit:record ID="AUDREC1">
                         <audit:process type="Fedora API-M"/>
<audit:action>addDatastream</audit:action>
<audit:componentID>SOURCE_IMG</audit:componentID>
<audit:responsibility>fedoraAdmin</audit:responsibility>
<audit:date>2013-05-09T15:37:41.892Z</audit:date>
                         <audit:justification/>
                     </audit:record>
                 </audit:auditTrail>
             </foxml:xmlContent>
         </foxml:datastreamVersion>
     </foxml:datastream>
     <foxml:datastream ID="DC" STATE="A" CONTROL_GROUP="X" 
VERSIONABLE="true">
         <foxml:datastreamVersion ID="DC1.0" LABEL="Dublin Core Record 
for this object" CREATED="2013-05-09T15:37:41.708Z" MIMETYPE="text/xml" 
FORMAT_URI="http://www.openarchives.org/OAI/2.0/oai_dc/" SIZE="388">
             <foxml:xmlContent>
                 <oai_dc:dc 
xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/ 
http://www.openarchives.org/OAI/2.0/oai_dc.xsd">
                     <dc:title>Disseminator object</dc:title>
<dc:identifier>test:dervPub_obj</dc:identifier>
                 </oai_dc:dc>
             </foxml:xmlContent>
         </foxml:datastreamVersion>
     </foxml:datastream>
     <foxml:datastream ID="RELS-EXT" STATE="A" CONTROL_GROUP="X" 
VERSIONABLE="false">
         <foxml:datastreamVersion ID="RELS-EXT.0" LABEL="Relationships" 
CREATED="2013-05-09T15:37:41.837Z" MIMETYPE="application/rdf+xml" 
FORMAT_URI="info:fedora/fedora-system:FedoraRELSExt-1.0" SIZE="273">
             <foxml:xmlContent>
                 <rdf:RDF>
                     <rdf:Description 
rdf:about="info:fedora/test:dervPub_obj">
                         <hasModel 
rdf:resource="info:fedora/test:dervPub_CModel"/>
                     </rdf:Description>
                 </rdf:RDF>
             </foxml:xmlContent>
         </foxml:datastreamVersion>
     </foxml:datastream>
     <foxml:datastream ID="SOURCE_IMG" STATE="A" CONTROL_GROUP="E" 
VERSIONABLE="true">
         <foxml:datastreamVersion ID="SOURCE_IMG.0" LABEL="full sized 
image" CREATED="2013-05-09T15:37:41.892Z" MIMETYPE="image/jpeg">
             <foxml:contentLocation TYPE="URL" 
REF="https://username:password <at> imageserver/myHugePicture"/>
         </foxml:datastreamVersion>
     </foxml:datastream>

I would really appreciate your help.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
Permalink | Reply | 5 comments |
headers
Carol Minton Morris | 7 May 2013 15:35
Favicon

[fcrepo-user] Fwd: NEWS RELEASE: DuraSpace Launches Sponsorship Campaign: Invest in Our Digital Future

FOR IMMEDIATE RELEASE

May 7, 2013

Read it online: http://bit.ly/10g4XkX

Do Your Part to Invest in Our Digital Future: Become a Sponsor of DuraSpace

Winchester, MA  Today the DuraSpace organization announced the launch of the 2013 Sponsorship Program encouraging users of DSpace and Fedora technologies for durable access to invest in our digital future by becoming DuraSpace sponsors. The annual campaign raises funds to support the continued advancement of the DSpace and Fedora open source software which is available free of charge. DuraSpace relies on financial support from the organizations that directly benefit from using DSpace and Fedora to continue to meet the changing needs of our communities.

“The challenge of preserving academic content is too great for any one institution to tackle alone”, says Karin Wittenborg, University Librarian, University of Virginia. “DuraSpace fosters collaborative activities and open-source solutions to ensure that knowledge will be accessible to future generations."

DuraSpace Community Sponsorship information:  http://duraspace.org/sponsors

Looking into the Future of Fedora and DSpace

A new Platinum category of sponsorship has been added for members of the community who are DuraSpace Sponsors and want to contribute directly to the Fedora Futures (Fedora Futures blog) project.  Platinum sponsors receive all the benefits of becoming a Gold Sponsor and in addition are represented on the Fedora Advisory Board. 

This community initiative began in late 2012 (read more here) and now has nine founding sponsors who are providing funds, developers, and oversight to make significant improvements to the Fedora platform over the next three years. Other DuraSpace Sponsors have joined the effort to offer similar support and form an Advisory Board that will influence the ongoing direction of the work.

A similar DSpace community initiative is underway following the March 2013 DuraSpace Summit meeting. A group of institutional library managers will create the first draft of a vision and high-level roadmap statement to inform the future direction of the DSpace project. At the same time a group of DSpace sponsors will be working on plans for improving governance and funding.  

Leadership, outreach and strategic partnerships

The combined benefits of technical leadership, outreach and professional development, collaborations and strategic partnerships on behalf of DuraSpace communities have resulted in ongoing development and deployment of open source technologies that are used to provide durable, persistent access to digital data. Community collaborators in these efforts include highly respected academic institutions, government agencies, and scientific and cultural organizations.

DuraSpace works directly with open source software projects, advocacy groups and corporate partners to build the capacity to preserve our shared digital heritage. DuraSpace is an active participant in the Academic Preservation Trust (APTrust), Digital Preservation Network (DPN), International Open Repositories Conference, Internet2, and the National Digital Stewardship Alliance (NDSA).

For more information about what DuraSpace does for the digital access and preservation communities, visit http://duraspace.org/whatwedoprojects. Please feel free to contact Michele Kimpton at mkimpton-db6tg5YPMqnNLxjTenLetw@public.gmane.org or Valorie Hollister, Director of Community Programs at vhollister-db6tg5YPMqnNLxjTenLetw@public.gmane.org with questions about the DuraSpace 2013 Community Sponsorship Program.

About DuraSpace

DuraSpace (http://duraspace.org) is an independent 501(c)(3) not-for-profit organization providing leadership and innovation for open technologies that promote durable, persistent access to digital data. We collaborate with academic, scientific, cultural, and technology communities by supporting projects and creating services to help ensure that current and future generations have access to our collective digital heritage. Our values are expressed in our organizational byline, "Committed to our digital future."

DuraSpace supported open technology projects provide long-term, durable access to and discovery of digital assets. DSpace and Fedora are two of the most widely-used repository solutions in the world with more than fifteen hundred institutions that use and help develop these open source software repository platforms. 

DuraSpace also provides innovative solutions for the digital preservation community to meet today’s access and preservation challenges with subscription services that include DuraCloud, an easy and cost effective way to archive, share and manage content in the cloud and DSpaceDirect, a low-cost, hosted repository service due to launch in the summer of 2013.

--
Carol Minton Morris
DuraSpace
Director of Marketing and Communications
cmmorris-RMZ2BmOfPoTNLxjTenLetw@public.gmane.org
Skype: carolmintonmorris
607 592-3135
Twitter <at> DuraSpace
Twitter <at> DuraCloud
http://DuraSpace.org 

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@...
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users
Permalink | Reply | 0 comments |
headers
Mark Leggott | 6 May 2013 22:10
Picon
Gravatar

[fcrepo-user] Open Repositories 2013 Conference Coming Soon to an Island Near You

Dear Repository Community,

Open Repositories 2013 is coming up soon - July 8-12 in beautiful Prince Edward Island. We had an awesome
response to the request for proposals and an initial list of sessions is available at:

 http://or2013.net/content/accepted-sessions

We are also getting final details in place for the Hackfest and Dev Challenge, but in the meantime we have an
initial information page available at:

 http://or2013.net/content/or-2013-dev-challenge-event

The Conference team is working hard on making sure the facilities are ready and that you also have an
engaging set of social activities to meet with your colleagues and have fun. We want to encourage you to
take advantage of our Early Bird registration, valid until May 10, after which the fee will go from $450 to
$495. We would also encourage you to book your flights and accommodation as soon as you can to make sure you
get a front row seat for what is shaping up to be a great conference. The main conference hotel (The Delta)
will be releasing room held back for OR attendees by May 10, so if you wish to stay at the Conference hotel
this is your chance to guarantee that will happen.

 http://or2013.net/content/loc/accommodations

We look forward to seeing you in PEI!

Sincerely,

Jon Dunn, Sarah Shreeves (Program Co-Chairs) and Mark Leggott (Conference Chair)
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
Permalink | Reply | 0 comments |

Gmane