Time
S
Nick
Message
09:58 j-n-c joined #dataverse
10:51 j-n-c
Hi, I was looking into the Local Vs Remote authentication section of the documentation and got confused about the 'admin' endpoint
10:52 j-n-c
from my understanding, if the admin endpoint is blocked, then no operation involving this endpoint should be available
10:53 j-n-c
It seems that I have blocked the admin endpoint:
10:54 j-n-c
curl http://localhost:8080/api/admin/settings/:BlockedApiEndpoints returns {"status":"OK","data":{"message":"admin,test"}}
10:57 j-n-c
however, getting the blocked endpoints is using the admin enpoint
10:57 j-n-c
is this correct?
10:58 j-n-c
does blocking the admin endpoint have the meaning that the :BlockedApiPolicy is set to 'localhos-only'?
11:37 donsizemore joined #dataverse
11:39 donsizemore
@j-n-c hi =) we set our BlockedApiPolicy to localhost-only, which (hopefully still) restricts any API call beneath /api/admin to localhost
11:40 donsizemore
@j-n-c now that i re-read the updated documentation, i might add 'builtinusers' to our BlockedApiEndpoints as well
12:04 pdurbin
donsizemore: do it
12:05 donsizemore
@pdurbin well, i'm not a superuser, so when i need to mess with anything i use dataverseAdmin's token then immediately regenerate it
12:05 pdurbin
At https://dev2.dataverse.org/guides/en/4.15.1/api/intro.html#sysadmins (temporary URL for tweaks to the API Guide I'm making) I ask sysadmins to start by looking at how to block APIs. :)
12:06 donsizemore
well, look at your new documentation!
12:07 pdurbin
I only have two problems listed under https://dev2.dataverse.org/guides/en/4.15.1/admin/troubleshooting.html#using-dataverse-apis-to-troubleshoot-and-fix-problems ... Maybe you and j-n-c and others here can help me think of other problems. :)
12:07 pdurbin
These are the two items so far:
12:07 pdurbin
- My Dataset Is Locked And Cannot Be Edited or Published
12:07 pdurbin
- Someone Created Spam Datasets and I Need to Delete Them
12:07 pdurbin
Hmm, maybe that should say "my user's dataset is locked" rather than "my dataset".
12:08 donsizemore
Someone Needs a Password Reset and SORBS Blocks Their Crappy ISP
12:08 donsizemore
(though I don't know there's an endpoint for that)
12:10 pdurbin
Tell 'em to use Shibboleth or OAuth... that way their password isn't your problem. :)
12:10 donsizemore
in this case the lady was no longer affiliated with an institution
12:10 donsizemore
but OAuth against $Goog or GitHub would be nice
12:11 pdurbin
Oh, you're saying they fill out https://dataverse.unc.edu/passwordreset.xhtml but the email never comes?
12:18 pdurbin
That's a bummer, man. (Guess who just watched a certain movie as his local theater last night: https://coolidge.org/films/big-lebowski )
12:19 donsizemore
you know, people quote that movie all the time and i've never seen it
12:20 pdurbin
Next year you're coming with me. I won't make you dress up.
12:24 donsizemore
people dress up? i mean, except for rocky horror?
12:25 pdurbin
And they bowl on stage.
12:29 pdurbin
Speaking of docs, how does the screenshot in this comment look? https://github.com/IQSS/dataverse/issues/6086#issuecomment-522657409
12:48 j-n-c
@donsizemore and @pdurbin: thks
12:49 donsizemore
@pdurbin looks great. do you need quotes around the X-Dataverse header?
12:50 j-n-c
I was looking into the Auth modes section in the and found that there are some open issues that target this page e.g. https://github.com/IQSS/dataverse/issues/5665
12:51 j-n-c
may I have a go trying to update the doc?
12:52 j-n-c
https://github.com/IQSS/dataverse/issues/2974 is closed and the docs state that it is still open
12:53 j-n-c
the API are not remotely accessible by default as stated, but rather only available from localhost (granted that in dev installations, access rights may be more open)
13:10 pdurbin
donsizemore: I'll test with and without quotes. Thanks. I'm trying to make the variables show in purple. However, the entire string is blue when it's in quotes. :(
13:10 pdurbin
j-n-c: it would be absolutely fantastic if you start a branch to improve our docs on auth modes.
13:13 j-n-c
@pdurbin: sure. by creating a branch, You mean to create one in my local fork, commiting to it and making a pull request, right?
13:48 pdurbin
j-n-c: yes, exactly. The main thing is to use the lates from "develop" under IQSS as your starting point (to hopefully avoid merge conflicts).
13:50 j-n-c
ok. thks! will use branch 5665-fix-doc-auth-modes
13:53 pdurbin
Cool. I don't see it at https://github.com/j-n-c/dataverse/branches yet but no rush. :)
14:33 stefankasberger joined #dataverse
16:39 dataverse-user joined #dataverse
16:39 dataverse-user
I have 4 charges through my bank are charges I have not made,
16:41 pdurbin
dataverse-user: I'm going to guess you're talking about Dataverse Entertainment games. This channel is for Dataverse, the data repository: https://dataverse.org
16:55 j-n-c
pdurbin: I created the branch and made a pull request
16:55 j-n-c
https://github.com/IQSS/dataverse/pull/6105
16:55 j-n-c left #dataverse
16:56 pdurbin
awesome, I added it to the right project to move it to code review
18:01 pdurbin
donsizemore: works fine without the quotes. The API token.
18:01 pdurbin
(phew)
18:02 donsizemore
cool. kevin triggered another build (it died, different test, i was hoping to catch it in the act)
18:02 donsizemore
i also need to look at danny's note about externaltools, which makes no sense
18:02 donsizemore
(the described symptoms, not danny)
18:02 pdurbin
hmm? which note :)
18:03 donsizemore
https://github.com/IQSS/dataverse-ansible/issues/98
18:04 donsizemore
i personally found that multiple externaltools in 4.11 didn't produce the drop-down but instead only an "explore" button which launched by contenttype
18:08 pdurbin
He's say if you go to http://ec2-3-80-234-144.compute-1.amazonaws.com/file.xhtml?fileId=250&datasetVersionId=38 and click "Data Explorer" it launches Whole Tale. But where's the bug?
18:09 donsizemore
yowch SEVERE Exception while visiting META-INF/versions/9/javax/xml/bind/ModuleUtil.class
18:10 donsizemore
then a bunch of Exception while visiting META-INF/versions/9/module-info.class
18:11 donsizemore
@pdurbin i'm spinning up an instance in vagrant to try to reproduce and poke around
18:12 donsizemore
but the most recent round of tests run in Jenkins from Kevin's merge just got much more interesting
18:15 pdurbin
interesting is good :)
18:17 donsizemore
https://jenkins.dataverse.org/job/IQSS-dataverse-develop/ws/conf/docker-aio/server.log
18:17 donsizemore
i wanna compare those SEVEREs against whatever comes up in vagrant on my buildbox
18:18 donsizemore
oh, and our informal meeting tomorrow afternoon? i've got a 2pm-4pm to do a TRSA walk-through
18:24 pdurbin
I need to meet an electrician at home at 3:30 but Gustavo might be available.
18:24 donsizemore
eh, i'm gonna wait on vagrant to finish, will report back
18:25 donsizemore
p.s. is now when i start quoting national lampoon's christmas vacation?
18:26 pdurbin
now that's a movie I haven't heard about in a long time, a long time
18:27 donsizemore
famous electrical scene and all
18:28 pdurbin
with a cat
18:37 donsizemore
short answer: those SEVEREs appear in my Vagrant stand-up as well, but there are drastically fewer of them
18:39 pdurbin
You're running the api test suite against Datavese running in Vagrant?
18:45 donsizemore
i'm not, but Glassfish is throwing those errors in my little Vagrant stand-up
18:45 donsizemore
does my response to Danny make sense? https://github.com/IQSS/dataverse-ansible/issues/98
20:16 pdurbin
stefankasberger: it's pretty late for you. You're still here? :)
