Tech List

[index] [prev] [next] [options] [help]
See the Mailing Lists Page for how to subscribe and unsubscribe.

eprints_tech messages

Please note: this page shows emails that have been sent to the eprints_tech mailing list. Some of these may be spam emails we have failed to filter.

[EP-tech] Re: Restricting Creation of Accounts

From: Francis Jayakanth <franc AT ncsi.iisc.ernet.in>
Date: Wed, 29 Oct 2008 11:33:38 +0530 (IST)


Threading: [EP-tech] Restricting Creation of Accounts from franc AT ncsi.iisc.ernet.in
      • This Message

*** http://www.eprints.org/tech.php/id/%(ID)s
*** EPrints community wiki - http://wiki.eprints.org/


On Fri, 17 Oct 2008, John Salter wrote:

> *** 
http://www.eprints.org/tech.php/id/%3C9F617F4F3E257A4DBBD1E5FC7F57F7CA41CBA9%40HERMES2.ds.leeds.ac.uk%3E
> *** EPrints community wiki - http://wiki.eprints.org/
>
> You might want to set up a 403 ErrorDocument
> http://httpd.apache.org/docs/2.0/mod/core.html#errordocument
>
> Cheers,
> John

John, Thanks very much for your suggestion. Our IR now displays a 
customized error message when there is an access to the restricted file. 
We did it by inserting the ErrorDocument directive in the auto-apache.conf 
file.

  - Francis


>
> -----Original Message-----
> From: owner-eprints-tech AT ecs.soton.ac.uk
> [mailto:owner-eprints-tech AT ecs.soton.ac.uk] On Behalf Of Francis
> Jayakanth
> Sent: 17 October 2008 06:12
> To: Arnoud Jippes
> Cc: EPrints.org Technical List
> Subject: Re: [EP-tech] Restricting Creation of Accounts
>
> ***
> http://www.eprints.org/tech.php/id/%3CPine.LNX.4.64.0810171032370.7350%4
> 0ncsi.iisc.ernet.in%3E
> *** EPrints community wiki - http://wiki.eprints.org/
>
> Yes, Arnoud. Thanks to Ben Wheeler, he had suggested that the Location
> directive might work. I tried it and it works fine for us. This is the
> entry I have in my /Archiveid/var/auto-apache.conf:
>
> <Location  "/cgi/register">
>       Order deny,allow
>       Deny from all
>       Allow from 10.
>     </Location>
>
> What is happening now is that any request coming from other than
> Intranet, Forbidden message is displayed. I would actually like to
> display our own error message. I'm not quite sure how it implement this.
> Any suggestion on this are most welcome.
>
> Many thanks,
>
>  - Francis
>
>
> On Thu, 16 Oct 2008, Arnoud Jippes wrote:
>
>> Did you find a solution Francis?
>>
>> I would like to restrict /cgi/user to our intranet by ip ranges, but
>> the perl handler seems to override my deny all en allow from?
>>
>> Thanks,
>>
>>  Arnoud.
>>
>>> For our repository, we want to restrict creation of user accounts
>>> only to requests coming from the machines on our Intranet. I have
>>> been trying to implement this by inserting the <Files> 
Directive in
> the 'auto-apache.conf'
>>> file, but so far I have not been successful. I would appreciate if
>>> somebody can let me know the right approach to implement this
> feature.
>>>
>>> The location of 'auto-apache.conf is:
>>>
>>> /opt/eprints3/archives/ArchiveID/var
>>>
>>> The 'auto-apache.conf' file  already has the following entries:
>>>
>>> <Directory "/opt/eprints3/cgi">
>>>    SetHandler perl-script
>>>    PerlHandler ModPerl::Registry
>>>    PerlSendHeader Off
>>>    Options ExecCGI FollowSymLinks
>>> </Directory>
>>>
>>> I have introduced the <Files> directive and the 
<Directory> entry now
>
>>> reads as below:
>>>
>>> <Directory "/opt/eprints3/cgi">
>>>    SetHandler perl-script
>>>    PerlHandler ModPerl::Registry
>>>    PerlSendHeader Off
>>>    Options ExecCGI FollowSymLinks
>>>    <Files  "register">
>>>     Order deny,allow
>>>     Deny from all
>>>     Allow from 10.0.0
>>>    </Files>
>>> </Directory>
>>>
>>> Introducing the <Files> directive in the main apache 
configuration
>>> file has also not helped. We are using Apache 2.2.4 and Eprints 
3.1
>>>
>>> Thanks very much for your attention.
>>>
>>>  - Francis
>>>
>>> NCSI, IISc
>>> Bengaluru, India
>>>
>>> --
>>> This message has been scanned for viruses and dangerous content by
>>> MailScanner, and is believed to be clean.
>>>
>>>
>>
>> --
>> This message has been scanned for viruses and dangerous content by
>> MailScanner, and is believed to be clean.
>>
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is believed to be clean.
>
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


FOOTER (%(LIST)s)


[index] [prev] [next] [options] [help]