You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jena.apache.org by "Brian McBride (JIRA)" <ji...@apache.org> on 2011/06/24 13:10:47 UTC
[jira] [Created] (JENA-74) Enable Fuseki to only requests from a
specified host.
Enable Fuseki to only requests from a specified host.
-----------------------------------------------------
Key: JENA-74
URL: https://issues.apache.org/jira/browse/JENA-74
Project: Jena
Issue Type: Improvement
Components: Fuseki
Reporter: Brian McBride
Priority: Minor
A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
This allows a server to be fired up so that it will only accept connections from localhost.
Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Brian McBride (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Brian McBride updated JENA-74:
------------------------------
Attachment: Fuseki.patch
This patch implements the proposed improvement.
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Brian McBride (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13054498#comment-13054498 ]
Brian McBride commented on JENA-74:
-----------------------------------
You are right. I misunderstood what the Jetty host thing did :(.
What I was trying to do was to expose the Jetty functionality so that I could do the trick with an Apache front end for access. The code has done that and I see you corrected the description in the usage info.
So - suggest close.
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Assignee: Andy Seaborne
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Closed] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Andy Seaborne (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andy Seaborne closed JENA-74.
-----------------------------
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Assignee: Andy Seaborne
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Andy Seaborne (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andy Seaborne reassigned JENA-74:
---------------------------------
Assignee: Andy Seaborne
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Assignee: Andy Seaborne
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Andy Seaborne (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13054488#comment-13054488 ]
Andy Seaborne commented on JENA-74:
-----------------------------------
Patch applied because it does do the "restrict to localhost" case.
Dev build done.
JENA-74 left open for now.
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Assignee: Andy Seaborne
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Andy Seaborne (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andy Seaborne resolved JENA-74.
-------------------------------
Resolution: Fixed
Patch achieves effect (restrict Fuseki to talking to localhost - specifically, an Apache front end)
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Assignee: Andy Seaborne
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (JENA-74) Enable Fuseki to only requests from a
specified host.
Posted by "Andy Seaborne (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/JENA-74?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13054482#comment-13054482 ]
Andy Seaborne commented on JENA-74:
-----------------------------------
I tried the patch but it didn't do what I expected
--host=localhost seems to mean that the server can only be called via localhost, not 192.168.1.10, it's IPv4 address
--host=192.168.1.10 seems to mean that the server can only be called via 192.168.1.10, not localhost.
This is the same (local) bowser.
If I read the documentation correctly, Jetty's Connector.setHost() affects which local network interface the server listens on, not which hosts it will accept connections from.
That can be used to only listen to local connections, which is the main use case for the feature, but it isn't restricting to one client host.
IPv6 addresses work if written in [] e.g. localhost is [::1] like 127.0.0.1
> Enable Fuseki to only requests from a specified host.
> -----------------------------------------------------
>
> Key: JENA-74
> URL: https://issues.apache.org/jira/browse/JENA-74
> Project: Jena
> Issue Type: Improvement
> Components: Fuseki
> Reporter: Brian McBride
> Priority: Minor
> Attachments: Fuseki.patch
>
>
> A simple fix to add an optional --host=hostnameOrIP to the fuseki-server command line arguments. If set Fuseki will only accept connections from the specified host.
> This allows a server to be fired up so that it will only accept connections from localhost.
> Further, an Apache server can be configured with a Fuseki server as a virtual host and Apache can apply access controls such as requiring basic authentication. This provides a mechanism for providing a limit form of access control to a Fuseki instance.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira