Hi Jakob Thanks, for your help.
I couldn't successfully set `security.profile = restricted`. I only found one `system-config.properties` in the directory: ./build/archetypes/marmotta-archetype-webapp/target/test-classes/projects/basic/project/test/target/archetype-it-marmotta-home/system-config.properties Is it the right file? I couldn't find a line with `security.profile = simple`, so I added (at the bottom of the document) the line `security.profile = restricted`. I relaunched marmotta, but the security configuration didn't change. In the UI `security.profile` is still set to `simple. I also tried `curl -X POST -H "Content-Type: application/json" -d '["standard"]' http://<HOST>:<PORT>/marmotta/config/data/security.profile` but with the same result. Thanks Francesco -- Francesco Bailo Postdoctoral Fellow in Digital Media Methods Department of Media and Communications Faculty of Arts and Social Sciences THE UNIVERSITY OF SYDNEY Rm S208, A20 - John Woolley Building | The University of Sydney | NSW | 2006 | Australia Phone +61 2 8627 6895| Twitter @FrBailo Email francesco.ba...@sydney.edu.au | Website www.francescobailo.net On 27 March 2018 at 17:16, Jakob Frank <jakob.fr...@redlink.co> wrote: > Hi Francesco, > > the default security profile only allows write-operations from localhost > [1], so if you have marmotta running on a remote server, you need to > manually set the security profile to "standard" or "restricted" before. > Simplest way is to update the 'security.profile = restricted' in the > system-config.properties file and restart marmotta. > > Hope that helps, > Jakob > > [1] http://marmotta.apache.org/platform/security-module.html > > On Tue, 27 Mar 2018 at 00:38 Francesco Bailo <m...@francescobailo.net> wrote: >> >> Thanks, Xavier. >> >> I managed to install the development version. Still, the authentication >> doesn't work as expected. I managed to log in as admin but I couldn't change >> any setting or add a new user. As soon as I try to edit something, the app >> will ask me again to authenticate (Although I'm already authenticated as >> admin). And I can't access the SPARQL query service. Since it's not a local >> install do I need to change/tweak something before I can authenticate via >> web? >> >> The install is online at http://130.56.250.79:8080/. >> >> Thanks >> >> Best >> Francesco >> >> -- >> >> Francesco Bailo >> >> Postdoctoral Fellow in Digital Media Methods >> >> >> Department of Media and Communications >> Faculty of Arts and Social Sciences >> THE UNIVERSITY OF SYDNEY >> Rm S208, A20 - John Woolley Building | The University of Sydney | NSW | >> 2006 | Australia >> Phone +61 2 8627 6895| Twitter @FrBailo >> Email francesco.ba...@sydney.edu.au | Website www.francescobailo.net >> >> On 27 March 2018 at 01:35, Xavier Sumba <xavier.sumb...@ucuenca.ec> wrote: >>> >>> Hi Francesco, >>> >>> >>> >>> On Sun, Mar 25, 2018 at 11:52 PM, Francesco Bailo <m...@francescobailo.net> >>> wrote: >>>> >>>> Hi Sergio and Xavier, >>>> >>>> It might seem a stupid question but how do I install the 3.4.0-SNAPSHOT? >>>> >>>> Should I `git checkout develop` once I've cloned the repository and >>>> before I do `mvn clean install`? >>>> >>> >>> Yes, you should compile the develop branch. After that you can execute >>> Marmotta in the following ways: >>> >>> Execute the marmotta-webapp(launchers/marmotta-webapp), if you are >>> executing from an IDE, e.g. >>> Deploy the marmotta.war in your own server (tomcat7) >>> Install locally using the installer in launchers/marmotta-installer (java >>> -jar target/marmotta-installer-x.x.x.jar), >>> Deploy using maven (mvn tomcat7:run), useful for dev environments. >>> There is a docker image [1] in docker hub, you can pull and run it. If >>> you want the latest changes of dev branch, you can build your own container >>> using the Dockerfile provided in [2]. >>> >>> I think I am not missing other option to deploy Marmotta. Hope it helps! >>> >>> Best, >>> Xavier. >>> >>> >>> [1] https://hub.docker.com/r/apache/marmotta/ >>> [2] https://github.com/apache/marmotta/blob/develop/Dockerfile >>> >>>> Thanks. >>>> >>>> Best >>>> Francesco >>>> >>>> -- >>>> >>>> Francesco Bailo >>>> >>>> Postdoctoral Fellow in Digital Media Methods >>>> >>>> >>>> Department of Media and Communications >>>> Faculty of Arts and Social Sciences >>>> THE UNIVERSITY OF SYDNEY >>>> Rm S208, A20 - John Woolley Building | The University of Sydney | NSW | >>>> 2006 | Australia >>>> Phone +61 2 8627 6895| Twitter @FrBailo >>>> Email francesco.ba...@sydney.edu.au | Website www.francescobailo.net >>>> >>>> On 11 January 2018 at 01:31, Sergio Fernández <wik...@apache.org> wrote: >>>>> >>>>> Hi Francesco, >>>>> >>>>> 3.3.x comes with a very annoying bug regarding login: >>>>> https://issues.apache.org/jira/browse/MARMOTTA-534 >>>>> >>>>> It's going to be fixed in 3.4.0 if we find time to finally cast the >>>>> release. >>>>> >>>>> So, in the meantime, I guess you have three options (I summarize them >>>>> to have it documented): >>>>> >>>>> 1) Changing user.admin.pwhash in your configuration file (requires >>>>> restarting). >>>>> >>>>> 2) If you installation is not public and/or you don't care much about >>>>> security, you can disable it. >>>>> >>>>> You have two ways of doing that: >>>>> >>>>> 2a) Changing security.enabled = false in your configuration file, as >>>>> Xavier told you (requires restarting). >>>>> >>>>> 2b) Executing the following request from the same machine where >>>>> Marmotta is running (allowed _only_ from localhost with the default simple >>>>> profile): >>>>> >>>>> curl -X POST -H "Content-Type: application/json" -d '["false"]' >>>>> http://localhost:8080/marmotta/config/data/security.enabled >>>>> >>>>> 3) Migrate to 3.4.0-SNAPSHOT, which currently can be considered a >>>>> release candidate (the release is just blocked by a bug in the installer). >>>>> Actually I'd recommend this last option for any new installation. >>>>> >>>>> I hope that helps. Apologize for all inconveniences. >>>>> >>>>> Cheers, >>>>> >>>>> >>>>> >>>>> >>>>> On Tue, Jan 9, 2018 at 11:06 PM, Francesco Bailo >>>>> <m...@francescobailo.net> wrote: >>>>>> >>>>>> Hi Xavier >>>>>> >>>>>> No, no error. I tried to add the line `user.admin.pwhash = >>>>>> :sha1::myhashpasword` in the file `system-config.properties` file. The >>>>>> line >>>>>> was actually missing. This solved the problem of logging in with my local >>>>>> installation (on a Mac) but not on the Ubuntu server. >>>>>> >>>>>> Thanks >>>>>> >>>>>> Best >>>>>> Francesco >>>>>> >>>>>> m: +61 416 860 221 >>>>>> e: m...@francescobailo.net >>>>>> >>>>>> On 10 January 2018 at 08:35, Xavier Sumba <xavier.sumb...@ucuenca.ec> >>>>>> wrote: >>>>>>> >>>>>>> Hi Francesco, >>>>>>> >>>>>>> That interface is a little tricky. Do you have any error on the >>>>>>> console browser or maybe in a log file? >>>>>>> >>>>>>> Some points that I hope help you out. >>>>>>> >>>>>>> You can change the default password [1]. >>>>>>> You can disable the security by changing security.enabled = false in >>>>>>> your configuration file. >>>>>>> >>>>>>> Cheers, >>>>>>> Xavier. >>>>>>> >>>>>>> [1] >>>>>>> https://wiki.apache.org/marmotta/Maintenance#Change_the_admin_password >>>>>>> >>>>>>> On Tue, Jan 9, 2018 at 3:46 PM, Francesco Bailo >>>>>>> <bailo.france...@gmail.com> wrote: >>>>>>>> >>>>>>>> Hello, >>>>>>>> >>>>>>>> I have installed (standalone) and correctly started Apache Marmotta >>>>>>>> 3.3.0 on an Ubuntu server. But I can't log in with the default admin >>>>>>>> password (admin/pass123). Navigating to my host:8080, I get to access >>>>>>>> the >>>>>>>> configuration interface. But I can't change anything. >>>>>>>> >>>>>>>> I both tried using Chrome and Safari. By clicking on the login >>>>>>>> button (top/right) I don't get to log in. If I try to change something >>>>>>>> through the configuration interface, I'm prompted by the browser with >>>>>>>> an >>>>>>>> "authentication required" form. Still, the admin/pass123 combination >>>>>>>> doesn't >>>>>>>> work. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> Francesco >>>>>>> >>>>>>> >>>>>> >>>>> >>>> >>> >> > -- > Jakob Frank > | http://redlink.at > | m: +43 699 10588742 | e: jakob.fr...@redlink.at > | http://at.linkedin.com/in/jakobfrank
