[Dspace-tech] How do I turn my DSpace repository into a "dark archive"?

[Carl Andersson]

Hello everyone,

 

How do I turn my DSpace repository into a "dark archive"? I want a repository not public at all. I want to restrict the use of the repository to one specific user.

 

Thank you!

 

/Greetings from Carl

[Bram Luyten]

Hi Carl,

here are 2 possible ways to do this:

-> Pull up an .htaccess authentication in front of your repository http://httpd.apache.org/docs/current/howto/htaccess.html
-> Keep your repository restricted to your intranet. Instead of serving it online, you can run it on your internal network within your organization. Even if your user needs remote access, you could achieve this through VPN access.

If these methods don't fit your specific use case, please feel free to elaborate on the expected behavior.

best regards,

Bram Luyten

@mire

Technologielaan 9 - 3001 Heverlee - Belgium

2888 Loker Avenue East, Suite 305 - Carlsbad, CA 92010 - USA

atmire.com - Institutional Repository Solutions

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network
management toolset available today.  Delivers lowest initial
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

[Pottinger, Hardy J.]

Hi, Carl, Bram had some good responses to your request. I would also
suggest avoiding the use of a handle server, as having public, citable
URLs for items in your dark archive is of dubious value. The dspace.cfg
file has comments on how to do this, but my main hint would be to look for
and use the Canonical Handle URL prefix (handle.canonical.prefix), and set
it to ${dspace.url}/handle/ (there are comments in the config file that
direct you as to how to do this, follow the examples in there).
--
HARDY POTTINGER <potti...@umsystem.edu>
University of Missouri Library Systems
http://lso.umsystem.edu/~pottingerhj/
"No matter how far down the wrong road you've gone,
turn back." --Turkish proverb

[Lemann, Alexander Bernard]

Without jumping to Apache httpd, you can look at Tomcat’s RemoteAddrValve to limit access to specific IP addresses in your server.xml (this could also be handled at a lower level---OS, network---as well) and security-constraints in your web.xml to add HTTP Basic Authentication.  Also, using a keystore for your Connector in server.xml to use SSL might be important depending on the sensitivity of your repository.

 

You may want to limit access once someone has access to the DSpace instance by changing the DEFAULT_ITEM_READ and DEFAULT_BITSTREAM_READ policies on your collections before uploads begin.

 

Hope this helps.

 

Regards,

Alex Lemann

[helix84]

On Tue, Apr 26, 2011 at 9:07 AM, Carl Andersson
<carl.ma....@gmail.com> wrote:
> How do I turn my DSpace repository into a "dark archive"? I want a repository not public at all. I want to restrict the use of the repository to one specific user.

Hello Carl,

here's another question, but the answers are similiar - an overview of
approaches you can take.

http://www.mail-archive.com/dspac...@lists.sourceforge.net/msg13434.html

Regards,
~~helix84