Date: Thu, 28 Mar 2024 11:15:15 -0400 (EDT) Message-ID: <1512032957.27962.1711638915102@lyrasis1-roc-mp1> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_27961_1896172352.1711638915102" ------=_Part_27961_1896172352.1711638915102 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
Fedora, along with Drupal, is one of the core technologies behind Island= ora. This chapter will cover the basic steps for installing Fedora - for mo= re information, please see the FedoraCommons documentation.
Fedora is available under the terms of the = Apache License and has a very active open source community produci= ng additional tools, applications and utilities. Islandora currently uses F= edora version 3.5.
Fedora requires the following to be set-up and running prior to beginnin= g your installation:
1. Downloa= d the latest release of Fedora from Fedora = Commons (3.5 is the latest tested for use with Islandora).
2. Read through the online guide to ensure the pre-installation system p= re-requisites are met.
3. Prepare your local environment variables by modifying the .bash_profi= le or .profile file in the home directory of the fedora user.=E2=80=A8=E2= =80=A8 Fedora will need to be given variables to find the main fedora direc= tory, the main tomcat directory, and the location of your Java installation= (JDK 6).
The following example assumes Java is installed in /opt/java and Fedora is=
installed in /usr/local/fedora:
PATH=3D= /opt/java/bin:$PATH:$HOME/bin export FEDORA_HOME=3D/usr/local/fedora export CATALINA_HOME=3D/usr/local/fedora/tomcat export JAVA_OPTS=3D"-Xms1024m -Xmx1024m -XX:MaxPermSize=3D128m -Djavax.net.= ssl.trustStore=3D/usr/local/fedora/server/truststore -Djavax.net.ssl.trustStorePassword=3Dtomcat" export JAVA_HOME=3D/opt/java
4. Before beginning your Fedora installation, create a database for Fedo= ra to use. This is not the same database that you used for= your Drupal installation.
5. To start the installer, navigate to the directory where the install f= ile (fcrepo-installer-3.5.jar) was downloaded and run the following command= :
java -j= ar fcrepo-installer-3.5.jar
6. Select the CUSTOM INSTALL.
It is important to select the Custom Install as it will enable the resou= rce index by default, which is the backbone of Islandora's collection views= and other functionality.
7. The Fedora installer script will ask you a series of questions:
Once the script has collected your answers and configured Fedora on your= system, the values are written to the install.properties file located in $= FEDORA_HOME/install.
An output of a sample install.properties file is included here to guide = you through the installation. To use this file, copy the full content= s of the textbox below into a text editor, and where applicable change the = database name, database user, database password and database port number, a= nd server host to match your database configuration (these items are noted = in square brackets), and save the edited file as install.properties to the = same directory where the fcrepo jar is stored. Fedora can now be inst= alled by entering
java -j= ar fcrepo-installer-3.5.jar install.properties
An example of an install.properties file (specific to an OSX environment=
):
Install= ation type - custom home directory - /usr/local/fedora Password - [fedora_password] server host - localhost [could be a domain name etc depending on your envir= onment] app server context - default API-A - default false ssl avail - true ssl required for api-a - default false ssl required for api-m - false servlet included - default included tomcat home -default tomcat http port - 8080 default tomcat shutdown - 8005 default tomcat ssl - 8443 default keystore file - included databse - mysql mysql driver - default database username - [fedora_database_user] database password - [password] jdbc url - default jdbc class- default Enable FESL authn - true Enable FESL authz - false policy enforcement - true low level storage - default akubra-fs resource index - true messaging - true messaging provider - default deploy local services - true
8. Once the installation script has completed and Fedora is installed, y= ou should start your Fedora instance by running:
$FEDORA= _HOME/tomcat/bin/startup.sh
9. To verify that Fedora has successfully started:
a. $FEDORA_HOME/tomcat/logs/catalina.out should contain no errors.=
b. View your Fedora instance through a web browser: htt=
p://localhost:8080/fedora/ or http://[yourdomain]:8443/fedora
10. Install required polices, re= move some restrictive policies.
First stop your Fedora instance by running:$FEDORA_HOME/tomcat/bin/shutdo= wn.sh
Remove they deny-purge policies.
rm /usr/local/fedora/data/fedora-x= acml-policies/repository-policies/default/deny-purge-*=
Create a folder for islandora spe= cific policies.
cd /usr/local/fedora/data/fedora-xacml-policies/repository-policies/<= /span>
mkdir islandora
Then copy= all the policies included with islandora into the newly created "islandora= " folder located here "/= usr/local/fedora/data/fedora-xacml-policies/repository-policies/".
These pol= icies will be located in the policies folder of the islandora module, here. There should be at least these 4 pol= icies:
permit-apim-to-authenticated-user.xml
permit-getDatastream-unrestricted.xml
permit-getDatastreamHistory-unrestricted.xml
permit-upload-to-authenticated-user.xml
11. Navigate to=
$FEDORA_HOME/data/fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.x=
ml
 =
;
Go to =
where you see <AttributeValue DataType=3D"http://www.w=
3.org/2001/XMLSchema#string">127.0.0.1</AttributeValue>=
<=
br>insert addition=
al entries below for IPs that need to access fedora admin example your own =
machine or other admins. Also might want to add the systems actual IP Examp=
le:
&nbs=
p;
<Att= ributeValue DataType=3D"http://www.w3.org/2001/XMLSchema#string">192.168= .56.1</AttributeValue>
12. Restart Fedora by using the startup command from step 8:
$FEDORA= _HOME/tomcat/bin/startup.sh
13. Access the Fedora Web Administrator: http://localh= ost:8080/fedora/admin and ensure you can ingest and purge obj= ects.
14. For information on using Fedora, make use of the tutorials at the Fedora Commons site.
There are two global policies that block/override purge rights. This beh= aviour is correct as it assumes that items will be set to a status of "dele= ted" rather than being purged directly. By default it assumes that if an ob= ject or Datastream is set to active or inactive, then only the "administrat= or" role can purge.
To resolve this, you can simply remove these policies in $FEDORA_HOME/da= ta/fedora-xacml-policies/repository-policies/default/:
= p>