EPrints Technical Mailing List Archive

See the EPrints wiki for instructions on how to join this mailing list and related information.

Message: #10083

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

Re: [EP-tech] Hi and help

Hi,

From a purely Apache 2.4.x perspective, you will need to modify the configuration in various places from:

order allow,deny
allow from all
satisfy any
 
to:

require all granted

I have updated the wiki page to that effect but I have not tested it, so it would be useful to get your feedback. 

The login_required_for_XXX configuration settings you have not got quite right.  Instead of:

$c->{login_required_for_cgi_enable} = 1;
$c->{login_required_for_eprints_enable} = 1;
$c->{login_required_for_views_enable} = 1;

they should be:
$c->{login_required_for_cgi}->{enable} = 1;
$c->{login_required_for_eprints}->{enable} = 1;
$c->{login_required_for_views}->{enable} = 1;

Also you want to make sure you also include the following two lines of configuration.  First to add some exception to CGI URLs that can be accessed as you might cause redirect loops otherwise and second to specify what URL to use for logins (it won't revert to the standard login URL, so you need to set it, I shall update the miscellaneous configuration wiki page to reflect this):

$c->{login_required_for_cgi}->{exceptions} = [ "users/login", "handle_404" ];
$c->{login_required_url} = "/cgi/users/login";

I don't think you need both Apache configuration and EPrints configuration.  However, if there may be extra things you want to hide from those not logged in like static pages (e.g. /information.html) or possibly even the homepage.  Then you may need to make some modifications to the Apache configuration to hide those as well.

Regards

David Newman

On 18/04/2025 1:25 pm, kralizeck@gmail.com wrote:
CAUTION: This e-mail originated outside the University of Southampton.
CAUTION: This e-mail originated outside the University of Southampton.

Hi everyone.
Greetings to all.

I'm relatively new to EPrints, and I'm currently in the process of migrating a login-only site:

  • OLD site: EPrints 3.3.12, Ubuntu 12, Apache 2.2.22

  • NEW site: EPrints 3.4.6, AlmaLinux 9.5, Apache 2.4.62

The old site used the instructions from https://wiki.eprints.org/w/Login-Only_Repository (last edited on 2010), and it worked well. However, those instructions no longer seem to work with the newer Apache version.

After many attempts and trial-and-error testing, I haven't been able to make it work as it did before.

I found new configuration options (like login_required...),  but they don’t seem to have any effect — or I might not be using them correctly:
https://wiki.eprints.org/w/Miscellaneous_Config_Options#L

I created the file archives/myrepo/cfg/cfg.d/z_login_required.pl with the following content:

$c->{login_required_for_cgi_enable} = 1;
$c->{login_required_for_eprints_enable} = 1;
$c->{login_required_for_views_enable} = 1;

Then I restarted Apache and regenerated statics, views, abstracts, etc., but no luck. The site is still not login-only like it was before.

Any suggestions would be greatly appreciated.

Thanks and best regards.


*** Options: https://wiki.eprints.org/w/Eprints-tech_Mailing_List
*** Archive: https://www.eprints.org/tech.php/
*** EPrints community wiki: https://wiki.eprints.org/