[Building Sakai] HostsFilter - Sakai Demo

[Steve Swinsburg]

Of course don't use the .* in production as that will allow anyone, anywhere to access your web services.

You can provide a list of hosts and IP addresses with the following syntax:
webservices.allow=localhost,127\.0\.0\.1,192\.168\.[0-9.]+,domain\.somewhere\.ac\.uk,123\.45\.678\.90

Note that you need to escape the dots via a backslash for the list of addresses.

In 2.6.x+ you can also log authorised and denied attempts via:
webservices.log-allowed=true
webservices.log-denied=true

Reference: http://steve-on-sakai.blogspot.com/2009/05/enabling-web-services-in-sakai-and.html

cheers,
Steve


On 13/08/2010, at 3:07 AM, Stephen Marquard wrote:

> Add to your sakai.properties:
> 
> # Request filter (SAK-13689)
> webservices.allow = .*
> 
> The value is a regular expression for allowed IP addresses (yes, you'd expect to be able to give a list of CIDR network addresses, but sadly you can't).
> 
> Regards
> Stephen 
> 
>>>> Matt Clare <Matt.Clare at BrockU.CA> 8/12/2010 6:26 PM >>> 
> Hello Sakai-dev community,
> 
> 	I'm attempting to do some work with the Rutgers link tool against a Sakai-demo instance but I'm not able to call back to the web service from anywhere other than the localhost.  I'm hoping someone could point me towards a solution.
> 
> 	Here are the logs/catalina.out  messages
> 
> HostFilter - Access granted (127\.0\.0\.1): 127.0.0.1/127.0.0.1
> 2010-08-12 09:23:26,523  INFO http-8080-Processor18 org.sakaiproject.util.RemoteHostFilter - Access granted (127\.0\.0\.1): 127.0.0.1/127.0.0.1
> 2010-08-12 09:23:43,137  INFO http-8080-Processor19 org.sakaiproject.util.RemoteHostFilter - Access denied (implicit): 139.57.65.192/139.57.65.192
> 2010-08-12 09:23:43,144  INFO http-8080-Processor18 org.sakaiproject.util.RemoteHostFilter - Access denied (implicit): 139.57.65.192/139.57.65.192
> 2010-08-12 09:23:55,139  INFO http-8080-Processor19 org.sakaiproject.util.RemoteHostFilter - Access denied (implicit): 139.57.65.192/139.57.65.192
> 
> 	I've read the source at http://builds.sakaiproject.org/source_html/kernel_trunk_(1.1-SNAPSHOT)/org/sakaiproject/util/RemoteHostFilter.java.html  but don't know enough about the framework to figure out where it's loading the allow and/o deny properties from.
> 
> 	Thanks for any insight you have,
> 
> 	.\.\att
> 
>  ::  Matt Clare
> --------------------------------------------------------------
> Educational Technology Support Specialist,
> Centre for Teaching Learning and Educational Technologies (CTLET)
> Part-time Instructor, Interactive Arts and Sciences
> Brock University, Ontario, Canada
> www.brocku.ca/ctlet  905 688 5550 xt 4734   Office: SBH315
> 
> Sakai Question?  http://kumu.brocku.ca/sakai/FAQ
> 
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
> 
> 
> 
> 
> 
> ###
> UNIVERSITY OF CAPE TOWN 
> 
> This e-mail is subject to the UCT ICT policies and e-mail disclaimer published on our website at http://www.uct.ac.za/about/policies/emaildisclaimer/ or obtainable from +27 21 650 4500. This e-mail is intended only for the person(s) to whom it is addressed. If the e-mail has reached you in error, please notify the author. If you are not the intended recipient of the e-mail you may not use, disclose, copy, redirect or print the content. If this e-mail is not related to the business of UCT it is sent by the sender in the sender's individual capacity.
> 
> ###
> 
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20100813/a2e6a3ca/attachment.html