Fedora XACML

Add policy for getDatastreamHistory unrestricted.

git clone https://github.com/Islandora/islandora-xacml-policies.git islandora-xacml-policies

mkdir /usr/local/fedora//data/fedora-xacml-policies/repository-policies/islandora
cp islandora-xacml-policies/permit-getDatastreamHistory-unrestricted.xml /usr/local/fedora/data/fedora-xacml-policies/repository-policies/islandora/
chown -R tomcat7:tomcat7  /usr/local/fedora//data/fedora-xacml-policies/repository-policies/islandora

Add back-end and front-end IP to apim policy:

nano -w /usr/local/fedora/data/fedora-xacml-policies/repository-policies/default/deny-apim-if-not-localhost.xml

	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">150.145.48.37</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">2a00:1620:0:0:0:0:0:37</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">150.145.48.38</AttributeValue>
	<AttributeValue DataType="http://www.w3.org/2001/XMLSchema#string">2a00:1620:0:0:0:0:0:38</AttributeValue>

service tomcat7 restart