This HTML5 document contains 40 embedded RDF statements represented using HTML+Microdata notation.

The embedded RDF content will be recognized by any processor of HTML5 Microdata.

Subject Item

n18:this

foaf:made

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n7:this

sioc:creator_of

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n11:item

n12:services_of

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n4:this

sioc:creator_of

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n6:VOS

sioc:container_of

n2:VirtWTDWebIdProfileDocInNamedGraph

atom:entry

n2:VirtWTDWebIdProfileDocInNamedGraph

atom:contains

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n2:VirtWTDACLTesting

sioc:links_to

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n2:VirtWTDVALACLCreation

sioc:links_to

n2:VirtWTDWebIdProfileDocInNamedGraph

Subject Item

n2:VirtWTDWebIdProfileDocInNamedGraph

rdf:type

atom:Entry sioct:Comment

dcterms:created

2018-04-13T12:09:53.503906

dcterms:modified

2019-07-11T06:58:42.863469

rdfs:label

VirtWTDWebIdProfileDocInNamedGraph

foaf:maker

n18:this n23:this

dc:title

VirtWTDWebIdProfileDocInNamedGraph

opl:isDescribedUsing

n22:rdf

sioc:has_creator

n4:this n7:this

sioc:content

%META:TOPICPARENT{name="VirtWTDStepByStepConfigGuide"}% ---++ Using Named Graph for hosting WebID Profile Document Data This document details how a RDF <code>Named Graph</code> can be used for storing the <nop>WebID Profile Document data directly in the RDF Quad Store rather than in a TTL file. 1 Generate a Software Agent X509 Certificate using [[http://ods.openlinksw.com/dataspace/doc/dav/wiki/ODS/ODSGenerateWebIDX509CertOSKeystore][OpenLink Data Spaces (ODS) X509 certificate generator]]. The OpenLink public ODS instance http://id.myopenlink.net/ods , could be used for example or a local ODS instance can be setup. 1 The generated certificate will have a <nop>WebID of <code>http://{cname}/dataspace/person/{userid}</code> i.e. http://id.myopenlink.net/dataspace/person/u2990 using the OpenLink public ODS instance for a created userid of <code>u2990</code>. The generated X509 certificate p12 file can be saved to disk or loaded into target OS or Browser Key store as appropriate. 1 The <code>:onBehalfOf</code> relations can then be added as triples to the <code>http://{cname}/dataspace</code> named graph for the ODS instance to force the generation of the required RDF statements for the ODS user i.e. http://id.myopenlink.net/dataspace for the OpenLink public ODS instance for example. *Note this named graph is not the WebID of the created ODS user* 1 For example, with a X509 generated ODS certificate with <nop>WebID of http://id.myopenlink.net/dataspace/person/u2990#this and a single delegation user of <code>wtd</code>, its required TTL profile document entries would be: <verbatim> ## Profile Document combining credentials of Software Agent and Registered Users ## ## This document leverages the portability of relative hash-based HTTP URIs as Entity Identifiers ## @prefix foaf: <http://xmlns.com/foaf/0.1/> . @prefix oplcert: <http://www.openlinksw.com/schemas/cert#> . @prefix cert: <http://www.w3.org/ns/auth/cert#>. @prefix acl: <http://www.w3.org/ns/auth/acl#> . @prefix oplacl: <http://www.openlinksw.com/ontology/acl#> ## Software Agent Credentials ## <http://id.myopenlink.net/dataspace/person/u2990#this> foaf:name "A Software Agent" ; oplcert:onBehalfOf <http://id.myopenlink.net/dataspace/person/u2990#wtd> ; cert:key [ cert:exponent "65537"^^xsd:integer ; cert:modulus "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"^^xsd:hexBinary ] . ## User Credentials (OnBehalfOf relation participants) ## <http://id.myopenlink.net/dataspace/person/u2990#wtd> oplacl:hasIdentityDelegate <http://id.myopenlink.net/dataspace/person/u2990#this> . </verbatim> %BR% Requiring the following equivalent triple entries be inserted into the http://id.myopenlink.net/dataspace ODS instance named graph: %BR% <verbatim> insert into <http://id.myopenlink.net/dataspace> { <http://id.myopenlink.net/dataspace/person/u2990#this> <http://www.openlinksw.com/schemas/cert#onBehalfOf> <http://id.myopenlink.net/dataspace/person/u2990#wtd> } insert into <http://id.myopenlink.net/dataspace> { [] <http://www.w3.org/ns/auth/cert#exponent> 65537 } insert into <http://id.myopenlink.net/dataspace> { [] <http://www.w3.org/ns/auth/cert#modulus> "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"^^<http://www.w3.org/2001/XMLSchema#hexBinary> } insert into <http://id.myopenlink.net/dataspace> {<http://id.myopenlink.net/dataspace/person/u2990#wtd> <http://www.openlinksw.com/ontology/acl#hasIdentityDelegate> <http://id.myopenlink.net/dataspace/person/u2990#this> } </verbatim> 1 Then assuming the p12 file was downloaded to a name of <code>u2990&#95;ods&#95;cert.p12</code> with a password of <code>1</code>, a <nop>WebID+TLS+Delegation connection with <code>isql</code> can be made <code>onBehalfOf<code> the <code>wtd</code> designated delation user, with the command: <verbatim> $ ./isql opllinux6.usnet.private:1113 "" 1 -X u2990_ods_cert.p12 -T ca_list_shop_2016.pem -W http://id.myopenlink.net/dataspace/person/u2990#wtd Connected to OpenLink Virtuoso Driver: 07.20.3217 OpenLink Virtuoso ODBC Driver OpenLink Interactive SQL (Virtuoso), version 07.20.3217. Type HELP; for help and EXIT; to exit. SQL> sparql SELECT * FROM <OpenPermID-bulk-assetClass-20151111_095807.ttl.gz> WHERE {?s ?p ?o}; s p o LONG VARCHAR LONG VARCHAR LONG VARCHAR _______________________________________________________________________________ #this #relatedTo #that #kingsley #knows #hugh 2 Rows. -- 95 msec. SQL> </verbatim> 1 The VAL debug trace output of the delegation connection request is as follows: <verbatim> DB.DBA.USER_CERT_LOGIN: Checking VAL ACLs for Query scope in SQL realm DB.DBA.WEBID_CHECK_DELEGATE: Looking for existence of: <http://id.myopenlink.net/dataspace/person/u2990#this> cert:onBehalfOf <http://id.myopenlink.net/dataspace/person/u2990#wtd> in <http:2A8D08FED2F735F4B178D7789DF26A16> DB.DBA.WEBID_CHECK_DELEGATE: Found onBehalfOf relation. Loading profile document http://id.myopenlink.net/dataspace/person/u2990 DB.DBA.WEBID_CHECK_DELEGATE: Found public key of software agent in delegating user's profile document DB.DBA.USER_CERT_LOGIN: Agent/WebID <http://id.myopenlink.net/dataspace/person/u2990#wtd> has SPARQL permissions: read: 1, write: 0, sponge: 0 DB.DBA.USER_CERT_LOGIN: Setting graph security callback </verbatim> ---+++Related * [[VirtWTDSoftwareAgentDocCreation][Virtuoso WebID+TLS+Delegation Step by Step Configuration Guide]] * [[VirtWTDServerSetup][Virtuoso Server WebID+TLS+Delegation Setup]] * [[VirtWTDSoftwareAgentDocCreation][Software Agent & WebID Profile Document Creation]] * [[VirtWTDVALACLCreation][WebID+TLS+Delegation VAL ACL Creation]] * [[VirtWTDACLTesting][WebID+TLS+Delegation ACL Testing]]

sioc:id

7e5dbfe87291a48e1e16ff8ce23d0a62

sioc:link

n2:VirtWTDWebIdProfileDocInNamedGraph

sioc:has_container

n6:VOS

n12:has_services

n11:item

atom:title

VirtWTDWebIdProfileDocInNamedGraph

sioc:links_to

n2:OpenLink n9:WebID n10:ODSGenerateWebIDX509CertOSKeystore n2:VirtWTDSoftwareAgentDocCreation n13:this n14:u2990 n15:dataspace n15:ods n2:VirtWTDServerSetup

atom:source

n6:VOS

atom:author

n18:this

atom:published

2018-04-13T12:09:53Z

atom:updated

2019-07-11T06:58:42Z

sioc:topic

n6:VOS