Tech List

[index] [prev] [next] [options] [help]
See the Mailing Lists Page for how to subscribe and unsubscribe.

eprints_tech messages

Please note: this page shows emails that have been sent to the eprints_tech mailing list. Some of these may be spam emails we have failed to filter.

RE: [EP-tech] Restricting Creation of Accounts

From: "John Salter" <J.Salter AT leeds.ac.uk>
Date: Fri, 17 Oct 2008 09:15:18 +0100


Threading: [EP-tech] Restricting Creation of Accounts from franc AT ncsi.iisc.ernet.in
      • This Message

*** 
http://www.eprints.org/tech.php/id/%3C9F617F4F3E257A4DBBD1E5FC7F57F7CA41CBA9%40HERMES2.ds.leeds.ac.uk%3E
*** EPrints community wiki - http://wiki.eprints.org/

You might want to set up a 403 ErrorDocument
http://httpd.apache.org/docs/2.0/mod/core.html#errordocument

Cheers,
John 

-----Original Message-----
From: owner-eprints-tech AT ecs.soton.ac.uk
[mailto:owner-eprints-tech AT ecs.soton.ac.uk] On Behalf Of Francis
Jayakanth
Sent: 17 October 2008 06:12
To: Arnoud Jippes
Cc: EPrints.org Technical List
Subject: Re: [EP-tech] Restricting Creation of Accounts

***
http://www.eprints.org/tech.php/id/%3CPine.LNX.4.64.0810171032370.7350%4
0ncsi.iisc.ernet.in%3E
*** EPrints community wiki - http://wiki.eprints.org/

Yes, Arnoud. Thanks to Ben Wheeler, he had suggested that the Location
directive might work. I tried it and it works fine for us. This is the
entry I have in my /Archiveid/var/auto-apache.conf:

<Location  "/cgi/register">
       Order deny,allow
       Deny from all
       Allow from 10.
     </Location>

What is happening now is that any request coming from other than
Intranet, Forbidden message is displayed. I would actually like to
display our own error message. I'm not quite sure how it implement this.
Any suggestion on this are most welcome.

Many thanks,

  - Francis


On Thu, 16 Oct 2008, Arnoud Jippes wrote:

> Did you find a solution Francis?
>
> I would like to restrict /cgi/user to our intranet by ip ranges, but 
> the perl handler seems to override my deny all en allow from?
>
> Thanks,
>
>  Arnoud.
>
>> For our repository, we want to restrict creation of user accounts 
>> only to requests coming from the machines on our Intranet. I have 
>> been trying to implement this by inserting the <Files> Directive 
in
the 'auto-apache.conf'
>> file, but so far I have not been successful. I would appreciate if 
>> somebody can let me know the right approach to implement this
feature.
>>
>> The location of 'auto-apache.conf is:
>>
>> /opt/eprints3/archives/ArchiveID/var
>>
>> The 'auto-apache.conf' file  already has the following entries:
>>
>> <Directory "/opt/eprints3/cgi">
>>    SetHandler perl-script
>>    PerlHandler ModPerl::Registry
>>    PerlSendHeader Off
>>    Options ExecCGI FollowSymLinks
>> </Directory>
>>
>> I have introduced the <Files> directive and the 
<Directory> entry now

>> reads as below:
>>
>> <Directory "/opt/eprints3/cgi">
>>    SetHandler perl-script
>>    PerlHandler ModPerl::Registry
>>    PerlSendHeader Off
>>    Options ExecCGI FollowSymLinks
>>    <Files  "register">
>>     Order deny,allow
>>     Deny from all
>>     Allow from 10.0.0
>>    </Files>
>> </Directory>
>>
>> Introducing the <Files> directive in the main apache 
configuration 
>> file has also not helped. We are using Apache 2.2.4 and Eprints 3.1
>>
>> Thanks very much for your attention.
>>
>>  - Francis
>>
>> NCSI, IISc
>> Bengaluru, India
>>
>> --
>> This message has been scanned for viruses and dangerous content by 
>> MailScanner, and is believed to be clean.
>>
>>
>
> --
> This message has been scanned for viruses and dangerous content by 
> MailScanner, and is believed to be clean.
>

--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.



[index] [prev] [next] [options] [help]