Uploaded image for project: 'Fedora Repository Project (LEGACY)'
  1. Fedora Repository Project (LEGACY)
  2. FCREPO-940

APIA requires authentication regardless of configuration

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: Fedora 3.5
    • Component/s: None
    • Labels:
      None
    • Roadmap Theme:
      Disseminators, Security: Authentication

      Description

      Scott Prater reports:

      "I've been doing some tests on Fedora 3.5 (checked out yesterday from github, the master branch), and right out of the gate I ran into an issue in which API-A operations require authentication, despite Fedora being configured to not require authentication for API-A requests.

      To confirm that this is a problem that has crept into the 3.5 codebase and is not a configuration issue, I ran a simple experiment: I performed two clean, fresh, untouched installs of Fedora 3.4.2 and Fedora 3.5 side-by-side, using virtually identical installer.properties files, then sent a "describe" request to the two servers.

      I downloaded the 3.4.2 fcrepo-installer jar for the 3.4.2 install, and built the fcrepo-installer-3.5-SNAPSHOT jar from a fresh download of the master branch source on github, using "mvn install".

      Attached are two installer.properties files, one for Fedora 3.4.2, and one for Fedora 3.5. As you can see, they are very simple installs; XACML policy authentication is turned on, FeSL is turned off, and apia.auth.required is set to false. I do not perform any post-install configuration or policy tweaks."

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            sprater Scott Prater
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: