[UCIMC-Tech] help/advice for RFU website
Josh King
josh at ucimc.org
Thu May 20 19:30:44 CDT 2010
No, in my scenario it would be accessible on the external networks as
well (though it would be just as easy to limit it to internal if we
wanted). Why are we putting it in the WRFU website and authenticating it
if we only want it available inside the IMC? Isn't it already? Sorry,
I'm just really confused now and probably shouldn't have weighed in
without a better idea of what the project was.
On 05/20/2010 07:25 PM, Chris Ritzo wrote:
> I just installed feedAPI and set up a new content type "Show Recording".
> Currently only admins have access to create & access this content type-
> WRFU can decide which roles can access it after we get stuff set up.
>
> My mistake on the path- reading a little closer it makes sense.
>
> Feeds/FeedAPI looks for a network location for the feed file. So if
> there were a CSV file available somewhere it would work out fine. The
> one issue with this that Joe raised was that this content shouldn't be
> public web accessible. If I understand correctly Josh, in your scenario
> recordings.wrfu.net <http://recordings.wrfu.net> would only be visible
> on the internal IMC networks. This is a fine a path as any... Once we
> have a CSV file and the subdomain I'll test out the feedAPI to generate
> recording nodes.
>
> -chris
>
> On Thu, May 20, 2010 at 7:17 PM, Josh King <josh at ucimc.org
> <mailto:josh at ucimc.org>> wrote:
>
> Sorry, I shouldn't have said path. Instead of a filesystem path, I
> mean a request URI path. For instance, at OJC I've made it so that
> http://virtualwindows.proxy.ojctech.com forward to our virtual
> server at 192.168.1.99 on the internal network. We could set it up
> so that, say, http://recordings.wrfu.net or
> http://wrfu.net/recordings forward to the lighttpd instance on
> grimlock.i.chambana.net <http://grimlock.i.chambana.net> on the
> internal network, but I'm not sure how that works with Feeds/FeedAPI
> (Chris, you probably have more experience than me with that). Also
> note that it only works with HTTP traffic, but I believe that's what
> we'd be using and is way easier to set up than port forwarding.
>
>
> On 05/20/2010 06:56 PM, Chris Ritzo wrote:
>
> I'd say something like..
> /usr/local/www/docs/aegir/platforms/wrfu.net/files/recordings
> <http://wrfu.net/files/recordings>
> <http://wrfu.net/files/recordings>
>
>
> However, a slight hiccup- just logged into wrfu.net- it's on
> drupal 5.x
> & Feeds is a 6.x module.
>
> Should we upgrade to 6 or use FeedAPI
> http://drupal.org/project/feedapi
> (predecessor to feeds, I believe.)
>
> -C
>
>
> On Thu, May 20, 2010 at 6:31 PM, Josh King <josh at ucimc.org
> <mailto:josh at ucimc.org>
> <mailto:josh at ucimc.org <mailto:josh at ucimc.org>>> wrote:
>
> In that case, I think the easiest thing would be to use Apache's
> mod_proxy on fixx0 to forward connections on a particular
> (sub)domain or path to port 80 on grimlock. I recently used
> something similar at work to forward web requests from an
> external
> web host to an internal. I can work on setting that up;
> suggestions
> for the subdomain or path that should be used?
>
>
> On 05/20/2010 04:43 PM, Joe Futrelle wrote:
>
> from Brian:
>
> me: quick q how are other hosts mounting grimlock's
> recordings?
> Brian: there aren't any network filesystems available
> from grimlock.
> right now it's running lighttpd with a symlink to
> /home/jfutrelle/recordings in the document root
> --
> Joe Futrelle
> Person
>
>
> On Thu, May 20, 2010 at 4:36 PM, Joe Futrelle
> <joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>>>
>
> wrote:
>
> Rock and roll.
>
> Thanks x 10^6 Chris, I will get the csv script
> written as
> soon as I
> have the free time (possibly tonight)
>
> IIRC grimlock is not public-facing. Its internal DNS
> name is
> grimlock.i.chambana.net <http://grimlock.i.chambana.net>
> <http://grimlock.i.chambana.net>
> <http://grimlock.i.chambana.net>. Not sure
>
> about how other hosts are mounting it.
>
> --
> Joe Futrelle
> Person
>
>
>
> On Thu, May 20, 2010 at 3:33 PM, Chris Ritzo
> <chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>>>
>
> wrote:
>
> I should have a user account on the wrfu site-
> critzo
> probably.
> If you someone could make me an admin, I'll install
> Feeds and
> get it ready, set up a new content type. Joe,
> when you
> have a
> sample csv let me know what the field names are.
> I can
> also ssh
> into fixx0 and see about getting the mount set
> up. I'm
> guessing
> that would be at the file system level, instead
> of through
> apache or drupal. We put a mount point in
> fixx0's fstab
> and then
> a symlink to it from inside the drupal file
> structure. Then
> nodes can reference the appropriate file system
> paths
> and access
> is secured through drupal user/role permissions
>
> What's the status of grimlock? is it on an
> internal-only imc
> subnet? Is it set up to allow NFS mounts?
>
>
> -Chris
>
>
> On Thu, May 20, 2010 at 12:53 PM, Joe Futrelle
> <joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>>>
>
> wrote:
>
> I'm still hazy on how we'd do authz on the mp3's
> themselves,
> and which layer (Apache? Drupal?) would
> serve them
> from the
> mounted fs.
>
> But in any case, it sounds like we can make the
> Feeds module
> work, so I'm thinking I should go ahead and
> develop
> the code
> that generates the .csv file, putting
> whatever fields I
> think are going to be relevant into it--then
> we can
> figure
> out how to make properly-secured,
> content-bearing
> nodes out
> of it using the Feeds module and other
> Drupal features.
>
> --
> Joe Futrelle
> Person
>
>
>
> On Wed, May 19, 2010 at 5:32 PM, Chris Ritzo
> <chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>>>
>
> wrote:
>
> Yeah, that's the idea. Currently wrfu's
> site is
> using
> drupal users for auth, not querying the IMC
> ldap. But
> you bring up mounting a share from
> within the
> wrfu site,
> maybe even a link in the files/
> directory. If we
> did it
> this way we could leave auth.as
> <http://auth.as> <http://auth.as>
> <http://auth.as> is.
>
>
> More on feeds- the module let's you map
> fields
> from the
> csv to fields in drupal nodes of a
> specific.content
> type. So we create a new content type, say
> "shows" and
> the feed creates/updates nodes of that type
> based on the
> contents of the csv & the mapped fields.
>
> Josh or Brian, can you weigh in on
> mounting a
> network
> share on fixx with a ln inside the files
> directory?
>
> On May 19, 2010 3:51 PM, "Joe Futrelle"
> <joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>
> <mailto:joefutrelle at gmail.com <mailto:joefutrelle at gmail.com>>>>
>
>
> wrote:
>
> Feeds module sounds like the way to
> go. Is
> the idea to
> have a job on grimlock generate a
> feed file
> which
> Drupal, whose host would have the
> relevant
> part of
> grimlock's fs mounted, would
> periodically
> read? And
> then when the user clicks on a link
> in the
> generated
> node Drupal would serve the mp3 to them
> depending on
> some authz policy that would be
> specified
> (how? in
> what layer?) based on the user's LDAP
> identity which
> they got by authenticating to
> Drupal? Or is
> WRFU's
> Drupal authentication separate from LDAP
> authentication?
>
> --
> Joe Futrelle
> Person
>
>
>
>
> On Wed, May 19, 2010 at 2:27 PM,
> Chris Ritzo
> <chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>
> <mailto:chris.ritzo at gmail.com <mailto:chris.ritzo at gmail.com>>>>
>
> wrote:
> >
> > Interesting proje...
>
>
>
>
>
>
> --
> Josh King
>
> "I am an Anarchist not because I believe Anarchism is the final
> goal,
> but because there is no such thing as a final goal." -Rudolf
> Rocker
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
> --
>
> This message has been scanned for viruses and
> dangerous content by *MailScanner*
> <http://www.mailscanner.info/>, and is
> believed to be clean.
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the IMC-Tech
mailing list