FeSL Installation

Note: these are preliminary build notes for early testing and development. Feel free to add your own notes
2009-12-09 note: these instructions, while valid for the moment, will change as FeSL gets integrated into Fedora's trunk

Test environment:

• Mac OS X 10.6 (Snow Leopard)
  • Java 1.5
  • Maven 2.0.9
• Fedora 3.3
  • Tomcat 6.0.20

fedora

svn co https://fedora-commons.svn.sourceforge.net/svnroot/fedora-commons/fedora/trunk fedora
cd fedora
mvn install -P fedora-installer
java -jar installer/target/installer-1.0.0-fedora-installer.jar

Select "custom" and accept all defaults and "included" options except for "Enable FeSL" which should be "true" and "Enable Resource Index" which should be "true".

Oracle Berkeley DB XML

adapted from: http://www.muradora.org/muradora/wiki/InstallingRampPDP

1. dbxml (versions prior to 2.5 include xerces-c 2.x, which does not build correctly in OS X 10.6)

   ./buildall.sh --prefix=/usr/local/dbxml-2.5.13 --enable-java
   

   Note: this is a quite lengthy build. Take the dog for a walk and come back.

1. set environment variables

   export DBXML_HOME=/usr/local/dbxml-2.5.13
   export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:${DBXML_HOME}/lib
   export DYLD_LIBRARY_PATH=${DBXML_HOME}/lib:$DYLD_LIBRARY_PATH
   

2. Build and install melcoe-pdp 

   svn co http://www.muradora.org/svn/muradora-project/melcoe-pdp/trunk melcoe-pdp
   cd melcoe-pdp
   ant install
   ant load-policies
   cp dist/axis2.war $CATALINA_HOME/webapps/
   

3. Start Tomcat, e.g.:

   $CATALINA_HOME/bin/startup.sh
   

4. Sanity check: verify that http://localhost:8080/axis2/services/listServices lists the PolicyDataManagerService and PDP services.

MelcoePDP : http://localhost:8080/pdp/services/MelcoePDP
Available Operations

• evaluateBatch
• evaluate

PolicyDataManagerService : http://localhost:8080/pdp/services/PolicyDataManagerService
Available Operations

• listPolicies
• updatePolicy
• deletePolicy
• lastUpdate
• addPolicy
• getPolicy
• findPolicies

melcoe-pep

1. Sanity check: verify that http://localhost:8080/fedora/search works for fedoraAdmin, but returns authorization denied for a valid, but non-adminstrator role (create one in $FEDORA_HOME/server/config/fedora-users.xml)
2. Replace the $CATALINA_HOME/webapps/fedora/WEB-INF/web.xml with this version. This version has the melcoe-pep and fedora-jaas configuration already set. You will need to set the 'fedora.home' parameters though.

fedora-jaas

1. Copy the config/jaas.conf file to $FEDORA_HOME/server/config.
2. Configure the config/jaas.conf file.
3. View the fedora-jaas documentation: FESL Authentication Module