[fcrepo-user] Internal Authorization Problem?

[Mateusz Pabiś]

Hi,

I've made an installation of Fedora 3.4.1. And I've run into weird
problem with REST API access.

I got this error when invoking:
http://<myserver>/fedora/objects/city%3Alocations/datastreams/LIST/content

However, if I invoke troublesome link (see log file below) I see correct
data in the web browser.
I mean 'curl -g
"http://<myserver>/fedora/get/city:locations/city:Collection/list"' gets
me desired data.

Moreover, when I invoke this via Java API all works just fine.

Where did I go wrong?
I would like to have access for all objects only for specified
user/password.

In the fedora.log @ DEBUG level I have this error log:

DEBUG 2011-09-07 13:32:09.412 [http-8081-1]
(DefaultExternalContentManager) in getExternalContent(),
url=http://<myserver>/fedora/get/city:locations/city:Collection/list
ERROR 2011-09-07 13:32:09.415 [http-8081-1] (DatastreamResource)
Unexpected error fulfilling REST API request
org.fcrepo.server.errors.HttpServiceNotFoundException:
[DefaultExternalContentManager] returned an error. The underlying error
was a java.lang.NullPointerException The message was "null" .
at
org.fcrepo.server.storage.DefaultExternalContentManager.getExternalContent(DefaultExternalContentManager.java:155)
[fcrepo-server-3.4.1.jar:na]
at
org.fcrepo.server.access.DefaultAccess.getDatastreamDissemination(DefaultAccess.java:1160)
[fcrepo-server-3.4.1.jar:na]
at
org.fcrepo.server.rest.DatastreamResource.getDatastream(DatastreamResource.java:232)
[fcrepo-server-3.4.1.jar:na]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[na:1.6.0_27]
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[na:1.6.0_27]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[na:1.6.0_27]
at java.lang.reflect.Method.invoke(Method.java:597) [na:1.6.0_27]
at
com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:175)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:67)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:163)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:111)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:71)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:111)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:63)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:689)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:647)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:638)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:309)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:425)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:590)
[jersey-bundle-1.0.3.1.jar:1.0.3.1]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:na]
at
org.fcrepo.server.security.servletfilters.FilterRestApiFlash.doFilter(FilterRestApiFlash.java:79)
[fcrepo-server-3.4.1.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:na]
at
org.fcrepo.server.security.jaas.AuthFilterJAAS.doFilter(AuthFilterJAAS.java:295)
[fcrepo-security-jaas-3.4.1.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:na]
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
[catalina.jar:na]
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina.jar:na]
at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:525)
[catalina.jar:na]
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
[catalina.jar:na]
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[catalina.jar:na]
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina.jar:na]
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
[catalina.jar:na]
at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
[tomcat-coyote.jar:na]
at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
[tomcat-coyote.jar:na]
at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
[tomcat-coyote.jar:na]
at java.lang.Thread.run(Thread.java:662) [na:1.6.0_27]
Caused by: java.lang.NullPointerException: null
at
org.fcrepo.server.storage.DefaultExternalContentManager.getFromWeb(DefaultExternalContentManager.java:307)
[fcrepo-server-3.4.1.jar:na]
at
org.fcrepo.server.storage.DefaultExternalContentManager.getExternalContent(DefaultExternalContentManager.java:149)
[fcrepo-server-3.4.1.jar:na]
... 39 common frames omitted


--
Mateusz Pabiś

[Asger Askov Blekinge]

Your problem is in the backedSecurity module. When fedora resolves a url
that seem to point back into fedora, it does so with some hardcoded
credentials. I would assume you have removed the internal call users
from the fedura-users.xml or in some other way disabled the backend
security. Tells us more about your specific setup, and if we determine
that this is wrongful behaivour, I will report a bug.

Regards
Asger
Committer

[Mateusz Pabiś]

Hi,

Right, when I restored to default user configuration it seems to work.
Thanks.

--
Mateusz

> ------------------------------------------------------------------------------
> Doing More with Less: The Next Generation Virtual Desktop
> What are the key obstacles that have prevented many mid-market businesses
> from deploying virtual desktops? How do next-generation virtual desktops
> provide companies an easier-to-deploy, easier-to-manage and more affordable
> virtual desktop model.http://www.accelacomm.com/jaw/sfnl/114/51426474/
> _______________________________________________
> Fedora-commons-users mailing list
> Fedora-com...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/fedora-commons-users