Re: [Geoserver-users] Restauring GeoServer to its Default Credentials
Hi Edit users.xml and set "password="plain:mypassword". Afterwards log in to Geoserver as admin and change the password. As a consequence you should see "password="digest1:.". Cheers On Tue, Apr 23, 2019 at 6:19 PM 1520 gis < juliermeopensourcedevelo...@gmail.com> wrote: > I also tried setting tGeoserver admin password bellow but it did not work: > password="digest1:D9miJH/hVgfxZJscMafEtbtliG0ROxhLfsznyWfG38X2pda2JOSV4POi55PQI4tw"/> > > Kind regards > > Julierme > > > On Tue, Apr 23, 2019 at 12:44 PM 1520 gis < > juliermeopensourcedevelo...@gmail.com> wrote: > >> Dear users and developers, >> >> I have faced an issue with GeoServer Credentials since I changed its >> defaults. I am running GeoNode-project master version installed via docker. >> I went to Django container @ .../security/usergroup/default/users.xml and >> I changed the admin credentials as discussed in here >> <http://osgeo-org.1560.x6.nabble.com/Forgot-the-geoserver-login-password-td5298425.html> >> , but I did not get any success. >> >> Any help on how I could achieve that will be very appreciated. >> >> Kind regards >> >> Julierme >> > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: > http://geoserver.org/comm/userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH ___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] No basic authentication behind tranparent Squid-proxy
Hi Are you sure that squid forwards the proper Http Header Attribute, as an example Authorization: Basic QWxhZGRpbjpPcGVuU2VzYW1l GeoServer basic auth depends on the proper header. Cheers On Tue, Jan 22, 2019 at 10:08 AM sulu wrote: > Hi. > > In our production system we use Geoserver behind a transparend SQUID-Proxy. > Geoserver works rather nicely but we cannot user basic authentication for > our WFS-Services. > In the squid.log the requests immediately receive a 401 Error > Example: > GET SOME_WFS_GETFEATURE_REQUEST HTTP/1.1" 401 1477 "Mozilla/5.0 > QGIS/3.4.4-Madeira" TCP_MISS:FIRST_UP_PARENT 586 1477 > > So ist seems to me that no credantials get passed to Geoserver. > > Does anyone has some experience with this problem and ist willing to share > some insight? > > I cannot find any DEBUG-Info in the geoserver-log for somethin like > "missing > credentials" > > Thanks in advance > Andy > > > > -- > Sent from: > http://osgeo-org.1560.x6.nabble.com/GeoServer-User-f3786390.html > > > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: > http://geoserver.org/comm/userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH ___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Raster load from postgis
This is a problem with your Postgres/Postgis configuration. Looks like a problem with GDAL. Time to consult somebody with Postgres/Postgis skills. Cheers On Tue, Jul 31, 2018 at 12:08 PM, Gaurav Pathak wrote: > Hi > > Thanks now my raster table seen in geoserver but when i publish the table > then error comes out > > > ERROR: rt_raster_to_gdal: Could not load the output GDAL driver > Where: PL/pgSQL function st_astiff(raster,text[],integer) line 24 at > RETURN > org.postgresql.util.PSQLException: ERROR: rt_raster_to_gdal: Could not > load the output GDAL driver > > Regards > Gaurav Pathak > > On Tue, Jul 31, 2018 at 2:55 PM Christian Mueller solutions.at> wrote: > >> Hi >> >> 1) >> >> Your file oek.pgraster.xml is not a valid XML file. It ends with >> >> > >> but should end with >> >> >> >> 2) You are using port 5433 for the db connection, I assume this is >> correct and not a typo since the default Postgres port is 5432. >> >> Cheers >> Christian >> >> >> >> >> On Tue, Jul 31, 2018 at 7:02 AM, Gaurav Pathak >> wrote: >> >>> >>> >>> -- Forwarded message - >>> From: Gaurav Pathak >>> Date: Mon, Jul 30, 2018 at 2:15 PM >>> Subject: Re: [Geoserver-users] Raster load from postgis >>> To: >>> >>> >>> Please find the zip file containing the configuration files in the >>> directory "coverages" in attachment. >>> >>> On Mon, Jul 30, 2018 at 1:50 PM Christian Mueller >> solutions.at> wrote: >>> >>>> Please stay on the user list, normally we do not answer private mails. >>>> >>>> Please send a zip file containing the configuration files in the >>>> directory "coverages". >>>> >>>> Cheers >>>> >>>> On Mon, Jul 30, 2018 at 8:19 AM, Gaurav Pathak >>> > wrote: >>>> >>>>> >>>>> Gaurav Pathak >>>>> [image: Attachments]Sat, Jul 28, 3:21 PM (2 days ago) >>>>> to ppeterpaul >>>>> Dear Christian >>>>> >>>>> I have *postgis *database, which I am using to store *latitude >>>>> ,Longitute and value* and try to render raster in geoserver using* Image >>>>> mosiac jdbc* but i got a error below. >>>>> >>>>> *Geoserver Exception:* >>>>> >>>>> Could not list layers for this store, an error occurred retrieving >>>>> them: Failed to create reader from file:coverages/oek.pgraster.xml >>>>> and hints Hints: EXECUTOR_SERVICE = java.util.concurrent. >>>>> ThreadPoolExecutor@6b48db6f[Running, pool size = 0, active threads = >>>>> 0, queued tasks = 0, completed tasks = 0] REPOSITORY = >>>>> org.geoserver.catalog.CatalogRepository@5e958e08 System defaults: >>>>> FORCE_AXIS_ORDER_HONORING = http FILTER_FACTORY = FilterFactoryImpl >>>>> FEATURE_FACTORY = org.geotools.feature.LenientFeatureFactoryImpl@3e10dc6 >>>>> FORCE_LONGITUDE_FIRST_AXIS_ORDER = true STYLE_FACTORY = >>>>> StyleFactoryImpl LENIENT_DATUM_SHIFT = true COMPARISON_TOLERANCE = 1.0E-8 >>>>> GRID_COVERAGE_FACTORY = GridCoverageFactory TILE_ENCODING = null >>>>> >>>>> *I am attaching my dataset in excel sheet.* >>>>> >>>>> *I am convert these lat long value to raster column.* >>>>> >>>>> Please help me to solve this issue. >>>>> >>>>> >>>>> On Mon, Jul 30, 2018 at 11:19 AM Christian Mueller < >>>>> christian.muel...@os-solutions.at> wrote: >>>>> >>>>>> Please post the exceptions, otherwise we have no idea about the >>>>>> reason. >>>>>> >>>>>> Cheers >>>>>> >>>>>> On Mon, Jul 30, 2018 at 6:56 AM, Gaurav Pathak < >>>>>> yash.patha...@gmail.com> wrote: >>>>>> >>>>>>> Yes >>>>>>> >>>>>>> >>>>>>> On Sun, Jul 29, 2018 at 9:43 AM Christian Mueller < >>>>>>> christian.muel...@os-solutions.at> wrote: >>>>>>> >>>>>>>> Hi >>>>>>>> >>>>>>>> Are there exceptions int the log file ? >>>>>>>> >>>>>>&g
Re: [Geoserver-users] Raster load from postgis
Hi 1) Your file oek.pgraster.xml is not a valid XML file. It ends with 2) You are using port 5433 for the db connection, I assume this is correct and not a typo since the default Postgres port is 5432. Cheers Christian On Tue, Jul 31, 2018 at 7:02 AM, Gaurav Pathak wrote: > > > -- Forwarded message - > From: Gaurav Pathak > Date: Mon, Jul 30, 2018 at 2:15 PM > Subject: Re: [Geoserver-users] Raster load from postgis > To: > > > Please find the zip file containing the configuration files in the > directory "coverages" in attachment. > > On Mon, Jul 30, 2018 at 1:50 PM Christian Mueller solutions.at> wrote: > >> Please stay on the user list, normally we do not answer private mails. >> >> Please send a zip file containing the configuration files in the >> directory "coverages". >> >> Cheers >> >> On Mon, Jul 30, 2018 at 8:19 AM, Gaurav Pathak >> wrote: >> >>> >>> Gaurav Pathak >>> [image: Attachments]Sat, Jul 28, 3:21 PM (2 days ago) >>> to ppeterpaul >>> Dear Christian >>> >>> I have *postgis *database, which I am using to store *latitude >>> ,Longitute and value* and try to render raster in geoserver using* Image >>> mosiac jdbc* but i got a error below. >>> >>> *Geoserver Exception:* >>> >>> Could not list layers for this store, an error occurred retrieving them: >>> Failed to create reader from file:coverages/oek.pgraster.xml and hints >>> Hints: EXECUTOR_SERVICE = java.util.concurrent. >>> ThreadPoolExecutor@6b48db6f[Running, pool size = 0, active threads = 0, >>> queued tasks = 0, completed tasks = 0] REPOSITORY = org.geoserver.catalog. >>> CatalogRepository@5e958e08 System defaults: FORCE_AXIS_ORDER_HONORING = >>> http FILTER_FACTORY = FilterFactoryImpl FEATURE_FACTORY = >>> org.geotools.feature.LenientFeatureFactoryImpl@3e10dc6 >>> FORCE_LONGITUDE_FIRST_AXIS_ORDER = true STYLE_FACTORY = >>> StyleFactoryImpl LENIENT_DATUM_SHIFT = true COMPARISON_TOLERANCE = 1.0E-8 >>> GRID_COVERAGE_FACTORY = GridCoverageFactory TILE_ENCODING = null >>> >>> *I am attaching my dataset in excel sheet.* >>> >>> *I am convert these lat long value to raster column.* >>> >>> Please help me to solve this issue. >>> >>> >>> On Mon, Jul 30, 2018 at 11:19 AM Christian Mueller < >>> christian.muel...@os-solutions.at> wrote: >>> >>>> Please post the exceptions, otherwise we have no idea about the reason. >>>> >>>> Cheers >>>> >>>> On Mon, Jul 30, 2018 at 6:56 AM, Gaurav Pathak >>> > wrote: >>>> >>>>> Yes >>>>> >>>>> >>>>> On Sun, Jul 29, 2018 at 9:43 AM Christian Mueller < >>>>> christian.muel...@os-solutions.at> wrote: >>>>> >>>>>> Hi >>>>>> >>>>>> Are there exceptions int the log file ? >>>>>> >>>>>> Cherers >>>>>> >>>>>> On Fri, Jul 27, 2018 at 7:07 AM, Gaurav Pathak < >>>>>> yash.patha...@gmail.com> wrote: >>>>>> >>>>>>> I am using Geoserver 2.13. I am trying to load raster file from >>>>>>> postgresql .When i try to make connection using image mosiac jdbc its >>>>>>> gave >>>>>>> error >>>>>>> >>>>>>> *log:* >>>>>>> >>>>>>> Failed to create reader from file:coverages/oek.pgraster.xml and >>>>>>> hints Hints: >>>>>>> EXECUTOR_SERVICE = java.util.concurrent. >>>>>>> ThreadPoolExecutor@147affc5[Running, pool size = 0, active threads >>>>>>> = 0, queued tasks = 0, completed tasks = 0] >>>>>>> REPOSITORY = org.geoserver.catalog. >>>>>>> CatalogRepository@2adb6515 >>>>>>> >>>>>>> >>>>>>> ---------- >>>>>>> Check out the vibrant tech community on one of the world's most >>>>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>>>>>> ___ >>>>>>> Geoserver-users mailing list >>>>>>> >>>>>>> Please make sure you read t
Re: [Geoserver-users] Raster load from postgis
Please stay on the user list, normally we do not answer private mails. Please send a zip file containing the configuration files in the directory "coverages". Cheers On Mon, Jul 30, 2018 at 8:19 AM, Gaurav Pathak wrote: > > Gaurav Pathak > [image: Attachments]Sat, Jul 28, 3:21 PM (2 days ago) > to ppeterpaul > Dear Christian > > I have *postgis *database, which I am using to store *latitude ,Longitute > and value* and try to render raster in geoserver using* Image mosiac > jdbc* but i got a error below. > > *Geoserver Exception:* > > Could not list layers for this store, an error occurred retrieving them: > Failed to create reader from file:coverages/oek.pgraster.xml and hints > Hints: EXECUTOR_SERVICE = java.util.concurrent.ThreadPoolExecutor@6b48db6f > [Running, pool size = 0, active threads = 0, queued tasks = 0, completed > tasks = 0] REPOSITORY = org.geoserver.catalog.CatalogRepository@5e958e08 > System defaults: FORCE_AXIS_ORDER_HONORING = http FILTER_FACTORY = > FilterFactoryImpl FEATURE_FACTORY = org.geotools.feature. > LenientFeatureFactoryImpl@3e10dc6 FORCE_LONGITUDE_FIRST_AXIS_ORDER = true > STYLE_FACTORY = StyleFactoryImpl LENIENT_DATUM_SHIFT = true > COMPARISON_TOLERANCE = 1.0E-8 GRID_COVERAGE_FACTORY = GridCoverageFactory > TILE_ENCODING = null > > *I am attaching my dataset in excel sheet.* > > *I am convert these lat long value to raster column.* > > Please help me to solve this issue. > > > On Mon, Jul 30, 2018 at 11:19 AM Christian Mueller solutions.at> wrote: > >> Please post the exceptions, otherwise we have no idea about the reason. >> >> Cheers >> >> On Mon, Jul 30, 2018 at 6:56 AM, Gaurav Pathak >> wrote: >> >>> Yes >>> >>> >>> On Sun, Jul 29, 2018 at 9:43 AM Christian Mueller >> solutions.at> wrote: >>> >>>> Hi >>>> >>>> Are there exceptions int the log file ? >>>> >>>> Cherers >>>> >>>> On Fri, Jul 27, 2018 at 7:07 AM, Gaurav Pathak >>> > wrote: >>>> >>>>> I am using Geoserver 2.13. I am trying to load raster file from >>>>> postgresql .When i try to make connection using image mosiac jdbc its gave >>>>> error >>>>> >>>>> *log:* >>>>> >>>>> Failed to create reader from file:coverages/oek.pgraster.xml and >>>>> hints Hints: >>>>> EXECUTOR_SERVICE = >>>>> java.util.concurrent.ThreadPoolExecutor@147affc5[Running, >>>>> pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 0] >>>>> REPOSITORY = org.geoserver.catalog.CatalogRepository@2adb6515 >>>>> >>>>> >>>>> >>>>> -- >>>>> Check out the vibrant tech community on one of the world's most >>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>>>> ___ >>>>> Geoserver-users mailing list >>>>> >>>>> Please make sure you read the following two resources before posting >>>>> to this list: >>>>> - Earning your support instead of buying it, but Ian Turton: >>>>> http://www.ianturton.com/talks/foss4g.html#/ >>>>> - The GeoServer user list posting guidelines: >>>>> http://geoserver.org/comm/userlist-guidelines.html >>>>> >>>>> If you want to request a feature or an improvement, also see this: >>>>> https://github.com/geoserver/geoserver/wiki/Successfully- >>>>> requesting-and-integrating-new-features-and-improvements-in-GeoServer >>>>> >>>>> >>>>> Geoserver-users@lists.sourceforge.net >>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>>>> >>>>> >>>> >>>> >>>> -- >>>> DI Christian Mueller MSc (GIS), MSc (IT-Security) >>>> OSS Open Source Solutions GmbH >>>> >>>> >> >> >> -- >> DI Christian Mueller MSc (GIS), MSc (IT-Security) >> OSS Open Source Solutions GmbH >> >> -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Raster load from postgis
Hi Are there exceptions int the log file ? Cherers On Fri, Jul 27, 2018 at 7:07 AM, Gaurav Pathak wrote: > I am using Geoserver 2.13. I am trying to load raster file from > postgresql .When i try to make connection using image mosiac jdbc its gave > error > > *log:* > > Failed to create reader from file:coverages/oek.pgraster.xml and hints > Hints: > EXECUTOR_SERVICE = java.util.concurrent.ThreadPoolExecutor@147affc5[Running, > pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 0] > REPOSITORY = org.geoserver.catalog.CatalogRepository@2adb6515 > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully- > requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Login Message: Invalid username/password combination.
8-04-04 08:34:40.473:INFO:oejsh.ContextHandler:main: Started
> o.e.j.w.WebAppContext@1829d67{/geoserver,file:/C:/Program%
> 20Files%20(x86)/GeoServer%202.11.4/webapps/geoserver/,AVAILABLE}{C:\Program
> Files (x86)\GeoServer 2.11.4\webapps\geoserver}
> 2018-04-04 08:34:40.489:INFO:oejs.ServerConnector:main: Started
> ServerConnector@19d106c{HTTP/1.1}{0.0.0.0:8080}
> 2018-04-04 08:34:40.489:INFO:oejs.Server:main: Started @9201ms
>
> -Original Message-
> From: Ben Caradoc-Davies [mailto:b...@transient.nz]
> Sent: Tuesday, April 3, 2018 3:25 PM
> To: Cindy Copp <ci...@cnt.org>; geoserver-users@lists.sourceforge.net
> Subject: Re: [Geoserver-users] Login Message: Invalid username/password
> combination.
>
> Cindy,
>
> are you trying to log in as "admin" but might have forgotten your
> password? Do you have root access on the server? If so, you can:
>
> - Change the admin password by editing
> security/usergroup/default/users.xml on the server to change the user
> entry to:
>
>
> - Restart GeoServer
>
> - Login as "admin" with password "your_temporary_password"
>
> - Change your password to something stronger. GeoServer will update the
> users.xml file to include something like password="digest1:D9miJH/
> hVgfxZJscMafEtbtliG0ROxhLfsznyWfG38X2pda2JOSV4POi55PQI4tw"
>
> Kind regards,
> Ben.
>
>
> On 04/04/18 02:35, Cindy Copp wrote:
> > Hello there. My login to the web admin page is no longer working. How
> can I get back on and access my files?
> >
> > Thanks much.
> >
> > Cindy
> >
> >
> >
> >
> > --
> > Check out the vibrant tech community on one of the world's
> > most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> >
> >
> >
> > ___
> > Geoserver-users mailing list
> >
> > Please make sure you read the following two resources before posting to
> this list:
> > - Earning your support instead of buying it, but Ian Turton:
> > http://www.ianturton.com/talks/foss4g.html#/
> > - The GeoServer user list posting guidelines:
> > http://geoserver.org/comm/userlist-guidelines.html
> >
> > If you want to request a feature or an improvement, also see this:
> > https://github.com/geoserver/geoserver/wiki/Successfully-requesting-an
> > d-integrating-new-features-and-improvements-in-GeoServer
> >
> >
> > Geoserver-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/geoserver-users
> >
>
> --
> Ben Caradoc-Davies <b...@transient.nz>
> Director
> Transient Software Limited <https://transient.nz/> New Zealand
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines: http://geoserver.org/comm/
> userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-
> requesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Geoserver-users mailing list
Please make sure you read the following two resources before posting to this
list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html
If you want to request a feature or an improvement, also see this:
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] cannot login to geoserver
Hi is correct. Do you see some java stack trace in catalina.out when you try to login ? Cheers On Mon, Mar 26, 2018 at 11:20 AM, William Graves <grave...@gmail.com> wrote: > Hi Christian, > > We did make the following substitution for test purposes: no joy. > > For the file: <../webapps>geoserver>data>security>usergroup>default> > users.xml > --->Content: > > > > we substituted: > > > > So we tried. Did we get the in the wrong place or something? > > From the Tomcat manager, after a couple of attempts, we could stop the > geoserver, but it was more difficult (i.e., took a few tries) before it > would restart again. > Bill > > > > > > On Mon, Mar 26, 2018 at 1:36 AM, Christian Mueller <christian.mueller@os- > solutions.at> wrote: > >> Hi >> >> Did you add the plain text password with the proper prefix plain: like >> so >> >> plain:mypassword >> >> Cheers >> >> On Mon, Mar 26, 2018 at 9:35 AM, William Graves <grave...@gmail.com> >> wrote: >> >>> Thanks, Brad. I just tried it with tomcat 8.5...same behavior. Java is >>> version 8 build 161, which is passing the install filters. Machine is Win >>> 10.Pro X64 bit version. 24 GB of Ram, so that can't be it. Likewise >>> terabyte SSD as main drive, so shouldn't be problems there. We manually >>> move the <*.war> file into the directory, where it is >>> successfully recognized by the JVM resulting in the automatic creation of >>> the directory containing the data space. >>> >>> I'm unfamiliar with . Will it do anything useful if I can't >>> get by the login for geoserver? >>> >>> Bill >>> >>> >>> On Sun, Mar 25, 2018 at 11:32 PM, <br...@frogmouth.net> wrote: >>> >>>> I can’t say I’ve seen this – although not tried with Tomcat 9. Can you >>>> try it with Tomcat 8 or 8.5? >>>> >>>> >>>> >>>> Do you have any other authentication modules (e.g. geofence) loaded? >>>> >>>> >>>> >>>> Brad >>>> >>>> >>>> >>> >>> >>> >>> -- >>> Check out the vibrant tech community on one of the world's most >>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>> ___ >>> Geoserver-users mailing list >>> >>> Please make sure you read the following two resources before posting to >>> this list: >>> - Earning your support instead of buying it, but Ian Turton: >>> http://www.ianturton.com/talks/foss4g.html#/ >>> - The GeoServer user list posting guidelines: >>> http://geoserver.org/comm/userlist-guidelines.html >>> >>> If you want to request a feature or an improvement, also see this: >>> https://github.com/geoserver/geoserver/wiki/Successfully-req >>> uesting-and-integrating-new-features-and-improvements-in-GeoServer >>> >>> >>> Geoserver-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >>> >> >> >> -- >> DI Christian Mueller MSc (GIS), MSc (IT-Security) >> OSS Open Source Solutions GmbH >> >> > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] cannot login to geoserver
Hi Did you add the plain text password with the proper prefix plain: like so plain:mypassword Cheers On Mon, Mar 26, 2018 at 9:35 AM, William Graves <grave...@gmail.com> wrote: > Thanks, Brad. I just tried it with tomcat 8.5...same behavior. Java is > version 8 build 161, which is passing the install filters. Machine is Win > 10.Pro X64 bit version. 24 GB of Ram, so that can't be it. Likewise > terabyte SSD as main drive, so shouldn't be problems there. We manually > move the <*.war> file into the directory, where it is > successfully recognized by the JVM resulting in the automatic creation of > the directory containing the data space. > > I'm unfamiliar with . Will it do anything useful if I can't > get by the login for geoserver? > > Bill > > > On Sun, Mar 25, 2018 at 11:32 PM, <br...@frogmouth.net> wrote: > >> I can’t say I’ve seen this – although not tried with Tomcat 9. Can you >> try it with Tomcat 8 or 8.5? >> >> >> >> Do you have any other authentication modules (e.g. geofence) loaded? >> >> >> >> Brad >> >> >> > > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully- > requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] More struggles with imagemosaic database settings in Oracle
H Ian /gt-imagemosaic-jdbc/src/main/java/org/geotools/gce/imagemosaic/jdbc/JDBCAccessOracle.java is in the imagemosaic JDBC module but the warning is from the standard imagemosaic module. (I believe). I think you have looked at the wrong source code. lg On Mon, Feb 5, 2018 at 6:13 PM, Ian Turton <ijtur...@gmail.com> wrote: > Looking at the codebase it looks like the tables should be > created/accessed using one of the methods in /gt-imagemosaic-jdbc/src/main/ > java/org/geotools/gce/imagemosaic/jdbc/JDBCAccessOracle.java or > /gt-imagemosaic-jdbc/src/main/java/org/geotools/gce/imagemosaic/jdbc/OracleDialect.java > but I don't know enough about Oracle (or the image mosaic system) to be > able to tell what's up in there. > > Ian > > On 2 February 2018 at 14:55, Paul Wittle via Geoserver-users < > geoserver-users@lists.sourceforge.net> wrote: > >> Hi, >> >> >> >> I’m still having some confusion, is anyone able to shed some light on >> what: >> >> *WARN [imagemosaic.catalog] - This granule catalog was not properly >> dispose as it still points to:ServiceInfo description=Features from >> JDBCDataStore* >> >> actually means? >> >> >> >> I have now configured my imagemosaic to use the Oracle database, I have >> created a blank table which it can find (I think) but it is not populating >> it when I save the store. >> >> >> >> Cheers, >> >> Paul >> "This e-mail is intended for the named addressee(s) only and may contain >> information about individuals or other sensitive information and should be >> handled accordingly. Unless you are the named addressee (or authorised to >> receive it for the addressee) you may not copy or use it, or disclose it to >> anyone else. If you have received this email in error, kindly disregard the >> content of the message and notify the sender immediately. Please be aware >> that all email may be subject to recording and/or monitoring in accordance >> with relevant legislation." >> >> >> -- >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> ___ >> Geoserver-users mailing list >> >> Please make sure you read the following two resources before posting to >> this list: >> - Earning your support instead of buying it, but Ian Turton: >> http://www.ianturton.com/talks/foss4g.html#/ >> - The GeoServer user list posting guidelines: >> http://geoserver.org/comm/userlist-guidelines.html >> >> If you want to request a feature or an improvement, also see this: >> https://github.com/geoserver/geoserver/wiki/Successfully-req >> uesting-and-integrating-new-features-and-improvements-in-GeoServer >> >> >> Geoserver-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-users >> >> > > > -- > Ian Turton > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully- > requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Disable the root account ?
Hi Olivier Answers inside On Tue, Jan 30, 2018 at 10:57 PM, Olivier Dalang <olivier.dal...@gmail.com> wrote: > Dear List, > > I'm currently trying to configure Geoserver for production, and would like > to have a setup that is as secure as possible by disabling the root account > login. Am I right understand this is not possible ? > Correct, this is not possible. The only hack is to manipulate the file containing the digest for the master password, but this is not recommended. > > I get the idea of having a root password to encrypt the keystore, and I > also get the necessity for this password to be encrypted with a constant > key by default. But I fail to understand why it should be possible to login > to the live server with this password. > It is a possibility to log in if - nobody knows the admin password - you have damaged your user/group service (e.g file corrupt or lost) - your user/group service is not available (e. g your LDAP server is down). Remember, user and passwords can be stored in different user/group service implementations whilst the root/master password login works without any attached user/group service. Out of the box GeoServer uses an XML file based user/group service but many other deployments use LDAP, Tables in an SQL database and so on. > > This means that if someone gets hold of an old backup, instead of being > able only to decrypt whatever was in that old backup (which may not be too > useful provided I use digests for user passwords), he can now login the > live server, and have complete access to everything. > Not if you have your own master password provider (securing the provider is your responsibility) or the master password has changed in the meantime. Access control for backups is beyond the scope of Geoserver. > > Also it doesn't seem useful at all, as if I forget the root password and > the admin passwords, I could just reconfigure a temporary admin user, and > recover the root password from there. > Of course, if you have full access to your user/group service but this is not always the case. > > Thanks to Christian, I understood it's possible to use an external file > for the root password (outside of the data directory), which is a great > improvement in terms of security, but makes it very easy to completely > loose access to the keystore. > Hmmm, the URL master password provider requires an URL, you can fetch your master password from other backend systems as you like. It has not to be a file. > > Couldn't there be just a simple config allowing to disable login from the > root account ? Or are there workarounds ? Or is there something else I > didn't get (I'm quite new to Geoserver) ? > A simple config would be to have Y oder N in a GeoServer config file. If somebody has access to the file system it is easy to turn it on or off. > > Thank you !! > > Olivier > > Cheers Cristian -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] CLI change of master password
Hi Oliver You can change the master password with the REST API http://docs.geoserver.org/latest/en/api/#/1.0.0/security.yaml Cheers On Tue, Jan 30, 2018 at 12:00 AM, Olivier Dalang <olivier.dal...@gmail.com> wrote: > Dear List, > > I found this old thread [1] about how to change the master (root) password > with CLI. There seemed to be no solution at that time. Is that still true ? > > Patric did you find a way to achieve it ? > > Thanks you !! > > Olivier > > [1] https://sourceforge.net/p/geoserver/mailman/message/32345049/ > <https://sourceforge.net/p/geoserver/mailman/message/32345049/> > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully- > requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Fwd: Geoserver encryption problem setting up user services on postgresql
.jetty.server.HttpChannel.handle(HttpChannel.java:310) > at > org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257) > at > org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540) > at > org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635) > at > org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555) > at java.lang.Thread.run(Thread.java:745) > > > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > If you want to request a feature or an improvement, also see this: > https://github.com/geoserver/geoserver/wiki/Successfully- > requesting-and-integrating-new-features-and-improvements-in-GeoServer > > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geotools gt-jdbc-db2 library - DB2 support
Hi Sebastian I can see two possibilities First, I can create a paper containing advantages and disadvantages. This could be a base for your decision process. I think one day of work should be sufficient. Second, I could evaluate your current DB2 version (except you are running on Z/VM) against the current plugin. It is also possible to assist you in case of DB2 updates and adapt the Java code. This scenario would require a support contract. Cheers Christian On Sun, Dec 10, 2017 at 3:06 AM, Sebastián Grattarola <seba...@gmail.com> wrote: > Hi Christian, thanks for your reply. > > I will provide this info to my client and discuss with them what they want > to do. > > As they already have all their software on DB2, they wanted to keep > everything on the same dbms to keep maintenance tasks as low as possible. > We started with postgres as a GIS prototype, but now they want to move > forward with the project, so migrating to DB2 is an option. > > Can you give more details on what the commercial support may include? I > need to evaluate the alternatives in case that a new version of DB2 is > released in the future that is not supported by the current version of the > extension. > > Thanks again. > > Best, > Sebastián. > > 2017-12-09 4:57 GMT-03:00 Christian Mueller <christian.mueller@os- > solutions.at>: > >> Hi >> >> Short answer: >> >> I would not recommend to migrate to DB2 Spatial Extender. >> >> Longer answer: >> >> I have been working with DB2 SE for about ten years. Currently I am >> migrating all projects of my customer to PostGis and I am quite happy. >> The DB2 extension itself was written by myself and I am the module >> maintainer but I will not invest time and resources into further >> development. >> There is another guy (David Adler) working on the module sparely. >> >> I think you can use any DB2 since version 10 for evaluation. >> >> I can offer you commercial support if you need an evaluation paper whit a >> lot of facts. >> >> Cheers >> Christian >> >> >> >> >> >> >> On Thu, Dec 7, 2017 at 2:38 PM, Sebastián Grattarola <seba...@gmail.com> >> wrote: >> >>> Hi everyone, >>> >>> I'm evaluating the migration of a postgis/postgres database to a DB2 >>> spatial db. I know there is an extension >>> <http://docs.geoserver.org/stable/en/user/data/database/db2.html> available >>> for making the connections from Geoserver to the DB2 datasources. >>> >>> I've been looking for an up-to-date page or documentation where I can >>> find the supported versions of DB2 or the DB2 drivers >>> <http://www-01.ibm.com/support/docview.wss?uid=swg21363866> for each >>> gt-jdbc-db2 >>> <http://docs.geotools.org/latest/userguide/library/jdbc/db2.html> release >>> (the library behind the extension AFAIK), but I haven't been able to find >>> any info about this. >>> >>> In the end, what I need to know is the versions of DB2 supported by the >>> extension. Any help or tip will be appreciated. >>> Thanks in advance, >>> Sebastián. >>> >>> >>> >>> -- >>> Check out the vibrant tech community on one of the world's most >>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>> ___________ >>> Geoserver-users mailing list >>> >>> Please make sure you read the following two resources before posting to >>> this list: >>> - Earning your support instead of buying it, but Ian Turton: >>> http://www.ianturton.com/talks/foss4g.html#/ >>> - The GeoServer user list posting guidelines: >>> http://geoserver.org/comm/userlist-guidelines.html >>> >>> Geoserver-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >>> >> >> >> -- >> DI Christian Mueller MSc (GIS), MSc (IT-Security) >> OSS Open Source Solutions GmbH >> >> > > > -- > Ing. Sebastián Grattarola > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geotools gt-jdbc-db2 library - DB2 support
Hi Short answer: I would not recommend to migrate to DB2 Spatial Extender. Longer answer: I have been working with DB2 SE for about ten years. Currently I am migrating all projects of my customer to PostGis and I am quite happy. The DB2 extension itself was written by myself and I am the module maintainer but I will not invest time and resources into further development. There is another guy (David Adler) working on the module sparely. I think you can use any DB2 since version 10 for evaluation. I can offer you commercial support if you need an evaluation paper whit a lot of facts. Cheers Christian On Thu, Dec 7, 2017 at 2:38 PM, Sebastián Grattarola <seba...@gmail.com> wrote: > Hi everyone, > > I'm evaluating the migration of a postgis/postgres database to a DB2 > spatial db. I know there is an extension > <http://docs.geoserver.org/stable/en/user/data/database/db2.html> available > for making the connections from Geoserver to the DB2 datasources. > > I've been looking for an up-to-date page or documentation where I can find > the supported versions of DB2 or the DB2 drivers > <http://www-01.ibm.com/support/docview.wss?uid=swg21363866> for each > gt-jdbc-db2 > <http://docs.geotools.org/latest/userguide/library/jdbc/db2.html> release > (the library behind the extension AFAIK), but I haven't been able to find > any info about this. > > In the end, what I need to know is the versions of DB2 supported by the > extension. Any help or tip will be appreciated. > Thanks in advance, > Sebastián. > > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Using Postgis Rasters and Image Mosaic JDBC for small grid timeseries?
Hi Richard The Postgis Raster Plugin is not prepared for time series. This holds true for all image mosaic jdbc extensions including Oracle GeoRaster. Cheers On Wed, Oct 25, 2017 at 8:29 PM, Richard Duivenvoorde <rdmaili...@duif.net> wrote: > Hi All, > > We have this application which creates about 24 (hourly) small rasters > (smoke dispersion models, different size: starting small then growing...). > > After using rasters files we thought it was a good idea to put these > rasters in Postgis, adding some extra columns like: type, timestamp, > model-id etc. > Thereby giving Geoserver a way to use 'Dimensions' based on the > timestamp (in combi with a selection on the model-id). > > But, I have a hard time setting up the Image Mosaic JDBC extention in > combination with the rasters. I now have succesfully set up a store to > the postgis table with rasters (1 per record), but a wms request either > returns nothing or what only appears the no-data value... > > Questions: > > - are we using the plugin for the right problem? Because we do not > really need mosaicing (I think). But I could not find an easier way to > connect to the tableor server rasters. > > - does anybody have experience with this? And maybe some pointers to > documentation for this problem? I've found the official Geotools and > Geoserver docs, but get the feeling that those are more written for huge > rasters for which you want to create a sort of pyramid/mosaic. While we > do not need this. In our case the raster is actually a small 'feature' > (could be a small set of features too...). > > Thanks for any info or pointers. > > Regards, > > Richard Duivenvoorde > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Geoserver-users mailing list > > Please make sure you read the following two resources before posting to > this list: > - Earning your support instead of buying it, but Ian Turton: > http://www.ianturton.com/talks/foss4g.html#/ > - The GeoServer user list posting guidelines: http://geoserver.org/comm/ > userlist-guidelines.html > > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoFence https certificates
Hi Fabio I am wondering why you have an https-->https configuration. Normally, your nginx proxy should handle SSL, no need for SSL for the backend service. https-->http should be sufficient. Second, do you use a self signed certificate ?. If you do, you have to add your certificate into JRE_HOME/lib/security/cacerts Cheers On Mon, May 8, 2017 at 6:07 PM, Fabio <fabio.siniba...@isti.cnr.it> wrote: > Hi, > we're testing the adoption of standalone GeoFence (3.3.0) in order to > manage security of our GeoServers. > Problem is that when I try to register our GeoServer instance, an error is > thrown when "Test" button is pressed. Setting logs to debug, I can see the > attached error. > Our GeoServer (v 2.10) is hosted on a tomcat7 behind an nginx proxy, and > https->https redirection is in place. The certificate is a let'sencrypt one. > > GeoFence runs on a tomcat7, java version "1.8.0_121". > > I tested the same code (copied getURL from https://github.com/geoserver/g > eofence/blob/v3.3.0/src/gui/core/plugin/userui/src/main/java > /org/geoserver/geofence/gui/server/service/impl/InstancesM > anagerServiceImpl.java ) in another webapp I created and deployed on the > same tomcat7 of GeoFence, and the output seems correctly retrieved. These > are the parameters : > > URL https://geoserver1-spatial-dev.d4science.org/geoserver/rest/ > geofence/info > USER admin > PWD geoserver > > Since the jre seems to recognize the certificate (my test successfully > connects a retrieve content), my guess is that some other configuration > might be needed. > > Thanks a lot for your help, > Fabio Sinibaldi > > > -- > --- --- --- --- > Fabio Sinibaldi > CNR Istituto di Scienza e Tecnologie dell' Informazione A. Faedo > Area della Ricerca CNR > InfraScience Group http://nemis.isti.cnr.it/groups/infrascience > Via G. Moruzzi, 1 – 56124 Pisa, Italy > > Skype fabioisti > https://it.linkedin.com/in/fabio-sinibaldi-18779a18 > --- --- --- --- > > > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Possible bug GROUP_ADMIN deleting users
Hi Robert
Digest --> Strong PBE is simple not possible.
Passwords encrypted with PBE can be decrypted to plain text. Digested
passwords cannot be reverted to plain text. Digesting uses a "trap door"
function (hashing). As an example, google "md5".
Cheers
Christian
On Thu, Apr 20, 2017 at 11:38 AM, Langford, Robert <
rob.langf...@salford.gov.uk> wrote:
> Hi all,
>
>
>
> Thanks for weighing in.
>
>
>
> RE: *Issue 3:* No Recode of existing passwords Digest -> Strong PBE
>
> I’ve checked the docs and I can’t find any reference to the “Recode
> existing passwords”. You access the page by editing an existing “User
> Group Service” and then changing the “Password encryption” dropdown. It
> gives you the option to recode the existing passwords to the new encryption
> type. By looking at the XML you can see the prefixes changing from
> `crypt2:` to ` digest1` ("Strong PBE" to "Digest"). However the reverse
> doesn’t occur (going from ("Digest" to "Strong PBE").
>
>
>
> Ok, so unless I hear otherwise I’ll raise 4 tickets:
>
> 1. GROUP_ADMIN being able to disable & change non-group members,
> for:
>
> a. *Issue 1:* Disabling non-group users:
>
> b. *Issue 2:* Changing non-group users passwords
>
> 2. No Recode of existing passwords Digest -> Strong PBE
>
> a. *Issue 3:* No Recode of existing passwords Digest -> Strong PBE
>
> 3. Delete user not in different groups (unhandled exception)
>
> a. *Issue 4:* Delete user not in different groups (unhandled
> exception)
>
> 4. Delete user not in any groups
>
> a. *Issue 5:* Delete user not in any groups
>
>
>
> Thanks for your help.
>
>
>
> Rob
>
>
>
> *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at]
> *Sent:* 19 April 2017 10:08
> *To:* Justin Deoliveira <jdeol...@gmail.com>
> *Cc:* Andrea Aime <andrea.a...@geo-solutions.it>; Langford, Robert <
> rob.langf...@salford.gov.uk>; GeoServer Mailing List List <
> geoserver-users@lists.sourceforge.net>
> *Subject:* Re: [Geoserver-users] Possible bug GROUP_ADMIN deleting users
>
>
>
> Hi all
>
>
>
> Sounds like a bug.
>
>
>
> @Justin, as far as I can remember I never contributed some code to the
> Group Admin concept, I think you invented this feature for a customer.
> Maybe I am wrong here.
>
>
>
> Cheers
>
>
>
>
>
>
>
> On Wed, Apr 19, 2017 at 4:18 AM, Justin Deoliveira <jdeol...@gmail.com>
> wrote:
>
>
>
> On Tue, Apr 18, 2017 at 3:11 AM Andrea Aime <andrea.a...@geo-solutions.it>
> wrote:
>
> On Thu, Apr 6, 2017 at 1:52 PM, Rob L <rob.langf...@salford.gov.uk> wrote:
>
> Done some more testing now I'm certain I've found further issues; these
> have
> only been tested with the "Default XML user/group service"
>
> Create 2 groups:
> 1. group-1
> 2. group-2
>
> Create 3 users
> 1. group-1-user ; member of group-1 ; add role GROUP_ADMIN
> 2. group-2-user ; member of group-2
> 3. no-group-user
>
>
> *Issue 1:* Disabling non-group users:
> - Log in to webGUI as group-1-user (GROUP_ADMIN)
> - Open group-2-user
> - Un-tick the "Enabled" check box
> - Click save -> Error message: "An error occurred while saving the user:
> User [...] is member of group(s) not administered by current user and cant
> be modified."
> - Navigate back to user list (or press "Cancel")
> - group-2-user now doesn't have the "Enabled" tick and cannot log in
>
>
>
> Bug.
>
>
>
>
>
> *Issue 2:* Changing non-group users passwords (occurred when Password
> encryption=Digest, didn't affect Strong PBE):
> - Log in to webGUI as group-1-user (GROUP_ADMIN)
> - Open group-2-user
> - Change the password
> - Click save -> Error message: "An error occurred while saving the user:
> User [...] is member of group(s) not administered by current user and cant
> be modified."
> - Navigate back to user list (or press "Cancel")
> - group-2-user tries to log on and gets HTTP 500: "No password decoder
> for"
>
>
>
> This one seems to be in the same ticket as the above one.
>
>
>
>
>
> *Issue 3:* No Recode of existing passwords Digest -> Strong PBE
> - Passwords in users.xml aren't re-encoded going from "Digest" to "Strong
> PBE" (however going from "Strong PBE" to "Digest" does)
>
>
>
> I'm lost here, how does this happen? Changing the setting in the global UI
> or
>
> is it
Re: [Geoserver-users] Possible bug GROUP_ADMIN deleting users
9%200584%20166%200272> >> mob: +39 339 8844549 <+39%20339%20884%204549> >> >> http://www.geo-solutions.it >> http://twitter.com/geosolutions_it >> >> *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* >> >> Le informazioni contenute in questo messaggio di posta elettronica e/o >> nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il >> loro utilizzo è consentito esclusivamente al destinatario del messaggio, >> per le finalità indicate nel messaggio stesso. Qualora riceviate questo >> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di >> darcene notizia via e-mail e di procedere alla distruzione del messaggio >> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, >> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od >> utilizzarlo per finalità diverse, costituisce comportamento contrario ai >> principi dettati dal D.Lgs. 196/2003. >> >> >> >> The information in this message and/or attachments, is intended solely >> for the attention and use of the named addressee(s) and may be confidential >> or proprietary in nature or covered by the provisions of privacy act >> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection >> Code).Any use not in accord with its purpose, any disclosure, reproduction, >> copying, distribution, or either dissemination, either whole or partial, is >> strictly forbidden except previous formal approval of the named >> addressee(s). If you are not the intended recipient, please contact >> immediately the sender by telephone, fax or e-mail and delete the >> information in this message that has been received in error. The sender >> does not give any warranty or accept liability as the content, accuracy or >> completeness of sent messages and accepts no responsibility for changes >> made after they were sent or for other risks which arise as a result of >> e-mail transmission, viruses, etc. >> >> --- >> > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] WMS interpolation doesn't take effect
Hi Did you specify the xml scaleop element in the configuration file, see http://docs.geoserver.org/stable/en/user/tutorials/imagemosaic-jdbc/imagemosaic-jdbc_tutorial.html you should have On Tue, Jan 10, 2017 at 7:05 PM, Andrea Aime <andrea.a...@geo-solutions.it> wrote: > On Mon, Jan 9, 2017 at 10:16 PM, Gerald Fiedler <ger...@sftech.de> wrote: > >> Any ideas? Do you need more info? I will try to describe a way to >> reproduce the problem starting with a plain server. Should I open a >> ticket for this? >> > > Hi, > I cannot help with jdbc image mosaic, never worked on it as a dev or even > as a user. I think opening a ticket with a way to reproduce is still a > good idea > > Cheers > Andrea > > > -- > == > GeoServer Professional Services from the experts! Visit > http://goo.gl/it488V for more information. > == > > Ing. Andrea Aime > @geowolf > Technical Lead > > GeoSolutions S.A.S. > Via di Montramito 3/A > 55054 Massarosa (LU) > phone: +39 0584 962313 <+39%200584%20962313> > fax: +39 0584 1660272 <+39%200584%20166%200272> > mob: +39 339 8844549 <+39%20339%20884%204549> > > http://www.geo-solutions.it > http://twitter.com/geosolutions_it > > *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* > > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > --- > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Understanding stack traces
Hi Paul The Jdbc authentication provider has nothing to do with a Jdbc user group service. The Jdbc authentication provider wants an existing Oracle user and not a user contained in your user/group service. Try to remove the provider and use the default provider. Cheers Christian On Tue, Sep 13, 2016 at 10:34 AM, Paul Wittle <p.wit...@dorsetcc.gov.uk> wrote: > Hi, > > > > I do have one but it works and is needed isn't it? My appsJDBC is linked > to a user group service called application_users which works and provides a > load of users to the application. These appear fine and when you test the > connection on the application users it says it is fine. > > > > There is an option to test the connection with a username and password but > it doesn't store those credentials. > > > > I currently run a provider chain that goes appsJDBC (which runs Authkey) > then default. My understanding is that if I delete the authentication > provider then Authkey would stop working. > > > > It seems odd to have a username and password error for a section of the > GeoServer which, as far as I can see, has nowhere to actually store any > username and password? > > > > Thanks, > > Paul > > > > *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at] > *Sent:* 13 September 2016 09:03 > *To:* Paul Wittle > *Cc:* geoserver-users@lists.sourceforge.net > *Subject:* Re: [Geoserver-users] Understanding stack traces > > > > Hi > > > > Go to "Authentication", I think you will se a JDBC Authentication Provider > at the bottom of the page. Try to delete it. > > > > Cheers > > Chrilstian > > > > On Tue, Sep 13, 2016 at 9:47 AM, Paul Wittle <p.wit...@dorsetcc.gov.uk> > wrote: > > Hi folks, > > > > I get this error message frequently but everything seems to work. I assume > it is related to an old setting I no longer need but it does clog up the > log files. > > > > Is there any clue in this stack trace that would let me know which bit of > the data directory I should be looking in to find the incorrect login > details? > > > > WARN [geoserver.security] - JDBC connect error > > org.springframework.security.authentication.AuthenticationServiceException: > JDBC connect error > > at org.geoserver.security.jdbc.JDBCConnectAuthProvider. > authenticate(JDBCConnectAuthProvider.java:95) > > at org.geoserver.security.GeoServerAuthenticationProvide > r.authenticate(GeoServerAuthenticationProvider.java:58) > > at org.springframework.security.authentication. > ProviderManager.authenticate(ProviderManager.java:156) > > at org.springframework.security.web.authentication.www. > BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:168) > > at org.geoserver.security.filter.GeoServerCompositeFilter$ > NestedFilterChain.doFilter(GeoServerCompositeFilter.java:73) > > at org.geoserver.security.filter.GeoServerCompositeFilter. > doFilter(GeoServerCompositeFilter.java:92) > > at org.geoserver.security.filter. > GeoServerBasicAuthenticationFilter.doFilter(GeoServerBasicAuthenticationFi > lter.java:83) > > at org.springframework.security.web.FilterChainProxy$ > VirtualFilterChain.doFilter(FilterChainProxy.java:323) > > at org.geoserver.security.filter.GeoServerCompositeFilter$ > NestedFilterChain.doFilter(GeoServerCompositeFilter.java:69) > > at org.springframework.security.web.context. > SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilt > er.java:87) > > at org.geoserver.security.filter. > GeoServerSecurityContextPersistenceFilter$1.doFilter( > GeoServerSecurityContextPersistenceFilter.java:53) > > at org.geoserver.security.filter.GeoServerCompositeFilter$ > NestedFilterChain.doFilter(GeoServerCompositeFilter.java:73) > > at org.geoserver.security.filter.GeoServerCompositeFilter. > doFilter(GeoServerCompositeFilter.java:92) > > at org.springframework.security.web.FilterChainProxy$ > VirtualFilterChain.doFilter(FilterChainProxy.java:323) > > at org.springframework.security. > web.FilterChainProxy.doFilter(FilterChainProxy.java:173) > > at org.geoserver.security.GeoServerSecurityFilterChainPr > oxy.doFilter(GeoServerSecurityFilterChainProxy.java:135) > > at org.springframework.web.filter.DelegatingFilterProxy. > invokeDelegate(DelegatingFilterProxy.java:346) > > at
Re: [Geoserver-users] Understanding stack traces
> > at org.apache.catalina.core.ApplicationFilterChain. > doFilter(ApplicationFilterChain.java:206) > > at org.vfny.geoserver.filters.SetCharacterEncodingFilter. > doFilter(SetCharacterEncodingFilter.java:109) > > at org.apache.catalina.core.ApplicationFilterChain. > internalDoFilter(ApplicationFilterChain.java:239) > > at org.apache.catalina.core.ApplicationFilterChain. > doFilter(ApplicationFilterChain.java:206) > > at org.apache.catalina.core.StandardWrapperValve.invoke( > StandardWrapperValve.java:219) > > at org.apache.catalina.core.StandardContextValve.invoke( > StandardContextValve.java:106) > > at org.apache.catalina.authenticator. > AuthenticatorBase.invoke(AuthenticatorBase.java:501) > > at org.apache.catalina.core.StandardHostValve.invoke( > StandardHostValve.java:142) > > at org.apache.catalina.valves.ErrorReportValve.invoke( > ErrorReportValve.java:79) > > at org.apache.catalina.valves. > AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:610) > > at org.apache.catalina.core.StandardEngineValve.invoke( > StandardEngineValve.java:88) > > at org.apache.catalina.connector.CoyoteAdapter.service( > CoyoteAdapter.java:537) > > at org.apache.coyote.http11.AbstractHttp11Processor. > process(AbstractHttp11Processor.java:1085) > > at org.apache.coyote.AbstractProtocol$ > AbstractConnectionHandler.process(AbstractProtocol.java:658) > > at org.apache.coyote.http11.Http11AprProtocol$ > Http11ConnectionHandler.process(Http11AprProtocol.java:277) > > at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor. > doRun(AprEndpoint.java:2407) > > at org.apache.tomcat.util.net.AprEndpoint$SocketProcessor. > run(AprEndpoint.java:2396) > > at java.util.concurrent.ThreadPoolExecutor.runWorker( > ThreadPoolExecutor.java:1145) > > at java.util.concurrent.ThreadPoolExecutor$Worker.run( > ThreadPoolExecutor.java:615) > > at org.apache.tomcat.util.threads.TaskThread$ > WrappingRunnable.run(TaskThread.java:61) > > at java.lang.Thread.run(Thread.java:745) > > Caused by: java.sql.SQLException: ORA-01017: invalid username/password; > logon denied > > > > at oracle.jdbc.driver.T4CTTIoer. > processError(T4CTTIoer.java:447) > > at oracle.jdbc.driver.T4CTTIoer. > processError(T4CTTIoer.java:389) > > at oracle.jdbc.driver.T4CTTIoer. > processError(T4CTTIoer.java:382) > > at oracle.jdbc.driver.T4CTTIfun. > processError(T4CTTIfun.java:675) > > at oracle.jdbc.driver.T4CTTIoauthenticate.processError( > T4CTTIoauthenticate.java:448) > > at oracle.jdbc.driver.T4CTTIfun. > receive(T4CTTIfun.java:513) > > at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:227) > > at oracle.jdbc.driver.T4CTTIoauthenticate.doOAUTH( > T4CTTIoauthenticate.java:383) > > at oracle.jdbc.driver.T4CTTIoauthenticate.doOAUTH( > T4CTTIoauthenticate.java:776) > > at oracle.jdbc.driver.T4CConnection.logon( > T4CConnection.java:432) > > at oracle.jdbc.driver.PhysicalConnection.( > PhysicalConnection.java:553) > > at oracle.jdbc.driver.T4CConnection.( > T4CConnection.java:254) > > at oracle.jdbc.driver.T4CDriverExtension.getConnection( > T4CDriverExtension.java:32) > > at oracle.jdbc.driver.OracleDriver.connect( > OracleDriver.java:528) > > at java.sql.DriverManager.getConnection(DriverManager. > java:571) > > at java.sql.DriverManager.getConnection(DriverManager. > java:215) > > at org.geoserver.security.jdbc.JDBCConnectAuthProvider. > authenticate(JDBCConnectAuthProvider.java:90) > > ... 51 more > > > > Best Regards, > > > > Paul Wittle > > GIS Developer > > Ext: 710 8473 > > Tel: 01305 228473 > > > "This e-mail is intended for the named addressee(s) only and may contain > information about individuals or other sensitive information and should be > handled accordingly. Unless you are the named addressee (or authorised to > receive it for the addressee) you may not copy or use it, or disclose it to > anyone else. If you have received this email in error, kindly disregard the > content of the message and notify the sender immediately. Please be aware > that all email may be subject to recording and/or monitoring in accordance > with relevant legislation." > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Create A User Group Service With The REST API
Hi Currently there is no REST API for user groups. You can create one using the GUI and look into GEOSERVER_DATA_DIR/security/usergroup You should se a directory with the name of your user/group service. Cheers On Sun, Sep 11, 2016 at 10:43 PM, Joseph Miller <millerjos...@gmail.com> wrote: > I can see that there are a lot of useful ways to use the REST API with a > User Group Service once it has been created but I am not seeing a way to > create the JDBC service other than the web interface as described in > http://docs.geoserver.org/latest/en/user/security/ > webadmin/ugr.html#security-webadmin-usergroupservices > > Is there a way to use a REST call to create a JDBC service with a connect > string or an existing JNDI entry. If not, what configuration file could we > edit to insert the configuration during an installation? > > Thanks, > Joe Miller > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] non-admin user change it's password via REST
Hi Cannot say something about Geofence, but the the standard security subsystem has no API for password changing. Cheers Christian On Wed, Aug 31, 2016 at 9:41 PM, Christoph Eibl <ceib...@gmail.com> wrote: > Hi, is there a possibility that a non-admin user can change it's > password with a REST call, with or without using geofence? > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] authkey module in Geoserver 2.5?
Hi Chris
Please can you check using a WMS request.
I never tried with WMTS.
Cheers
Christian
On Tue, Aug 16, 2016 at 12:34 PM, Chris Buckmaster <
chris.buckmas...@runnymede.gov.uk> wrote:
> Saying that, I am now having problems being able to display the layer
> through Openlayers 3.
>
>
>
> This is probably more a question for an Openlayers 3 community discussion,
> but the issue is as follows – I presume we can use authkey with WMTS
> requests?
>
>
>
> I have used the generated authkey for my ‘test’ user and included it
> within my Openlayers 3 code to add the layer to the map, but I receive an
> HTTP 400 request error.
>
>
>
> An example request is here: http://maps.runnymede.gov.uk/
> geoserver/gwc/service/wmts?authkey=2ad648df-372f-4e29-
> 9cc1-44e3635ae07e=transport%3Aadopted_highways&
> style=adopted_highways=EPSG%3A27700&
> Service=WMTS=GetTile=1.0.0=image%
> 2Fpng=EPSG%3A27700%3A5=104=169
>
>
>
> My code is as follows:
>
>
>
> var layer118 = new ol.layer.Tile({
>
> source: new ol.source.WMTS({
>
> url: '../../geoserver/gwc/service/wmts?authkey=2ad648df-372f-
> 4e29-9cc1-44e3635ae07e',
>
> layer: 'transport:adopted_highways',
>
> style: 'adopted_highways',
>
> matrixSet: 'EPSG:27700',
>
> projection: bng,
>
> format: 'image/png',
>
> tileGrid: new ol.tilegrid.WMTS({
>
> origin: [-238375, 1376256.0],
>
> resolutions: resolutions,
>
> matrixIds: ["EPSG:27700:0", "EPSG:27700:1", "EPSG:27700:2",
> "EPSG:27700:3", "EPSG:27700:4", "EPSG:27700:5", "EPSG:27700:6",
> "EPSG:27700:7", "EPSG:27700:8", "EPSG:27700:9", "EPSG:27700:10",
> "EPSG:27700:11", "EPSG:27700:12", "EPSG:27700:13"]
>
> })
>
> }),
>
> id: 'transport:adopted_highways',
>
> name: 'layer118',
>
> label: 'Adopted Highways',
>
> visible: false
>
> });
>
> map.addLayer(layer118);
>
>
>
>
>
> Chris
>
>
>
> *From:* Chris Buckmaster
> *Sent:* 16 August 2016 09:37
> *To:* Christian Mueller
> *Cc:* geoserver-users@lists.sourceforge.net
> *Subject:* Re: [Geoserver-users] authkey module in Geoserver 2.5?
>
>
>
> Hi Christian
>
>
>
> I managed to get this working in the end – I think I wasn’t clicking the
> synchronise button at the correct time and got a bit confused with the
> procedure I needed to follow!
>
>
>
> I know have keys available to use – thank you for replying.
>
>
>
> Cheers
>
>
>
>
>
> *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at
> <christian.muel...@os-solutions.at>]
> *Sent:* 16 August 2016 09:36
> *To:* Chris Buckmaster
> *Cc:* geoserver-users@lists.sourceforge.net
> *Subject:* Re: [Geoserver-users] authkey module in Geoserver 2.5?
>
>
>
> Hi Chris, some questions
>
>
>
>
>
> Did you add your new user "default" user group service ?
>
>
>
> Then the default user/group is correct.
>
>
>
>
>
> Did you add your user to authkeys.propeties ?
>
>
>
> Cheers
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> On Fri, Aug 12, 2016 at 1:18 PM, Chris Buckmaster <
> chris.buckmas...@runnymede.gov.uk> wrote:
>
> I’ve found I needed to install the module which I have done – my next
> question!
>
>
>
> To do a basic test, I have set up a new user called ‘test’ with a new role
> called ‘TEST’ which my ‘test’ user is a part of; in my ‘Data Security’ I
> have set one layer to be accessed by the ‘TEST’ role.
>
>
>
> What I want to do is create an authkey for the user ‘test’ but I cannot
> seem to find it in the User/Group Service drop down (I only have ‘default’)
> and do not understand what the options are under ‘Authentication key to
> user mapper’.
>
>
>
> Is there documentation somewhere to explain this module, or would anyone
> know how I can create an authkey for my user ‘test’?
>
>
>
> Thanks
>
>
>
> *From:* Chris Buckmaster
> *Sent:* 12 August 2016 11:51
> *To:* geoserver-users@lists.sourceforge.net
> *Subject:* [Geoserver-users] authkey module in Geoserver 2.5?
>
>
>
> Hi
>
>
>
> I would like to explore the authkey module in Geoserver 2.5 to see if it
> is something that could be useful for my setup.
>
>
>
> After looking at the manual, I cannot seem to find the authkey
> authenti
Re: [Geoserver-users] Fwd: Can not remove rest access rule
Hi Christoph Please stay on the mailing list. If you cant see something in the log a debug session is necessary. Please create a JIRA issue and specify your two REST URLs. Cheers Christian On Tue, Aug 16, 2016 at 12:33 PM, Christoph Eibl <ceib...@gmail.com> wrote: > No, there is nothing unexpected in the log. > > Am 16.08.2016 um 10:26 schrieb Christian Mueller: > > Hi > > The URL looks correct. Did you see something in the geoserver.log file. > > Cheers > Christian > > On Tue, Aug 16, 2016 at 9:32 AM, Christoph Eibl <ceib...@gmail.com> wrote: > >> Hi, >> I have added a rest access rule with a rest command which results in an >> entry in the rest.properties file like: >>/**/workspaces/test/**;GET,POST,DELETE,PUT=test >> >> Later I want to delete this rule again with: >> http://:8080/geoserver/security/acl/rest/%2F**%2Fwork >> spaces%2Ftest%2F**;GET,POST,DELETE,PUT >> but the server responds with 404: Not Found >> >> From the user documentation I can't find my mistake. Any Idea what I am >> doing wrong? >> >> >> >> -- >> ___ >> Geoserver-users mailing list >> Geoserver-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-users >> > > > > -- > DI Christian Mueller MSc (GIS), MSc (IT-Security) > OSS Open Source Solutions GmbH > > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] querying postgis raster map
Hi If you are using the imagemosaic-jdbc module this is not possible. Cheers On Fri, Jul 22, 2016 at 4:17 PM, Ahmet Temiz <ahmettemi...@gmail.com> wrote: > hi, > > I want to query on my postgis raster map. > > I need to know: > Can parametric SQL View be used for postgis raster map in geoserver? > how can I query postgis raster map with the dynamic request? > and > Is it possible to build filtering on postgis-raster ? > > I will appreciate if you answer my question. > > regards > > -- > Ahmet Temiz > Jeoloji Müh. > Afet ve Acil Durum Yönetimi Başkanlığı > Bilgi İşlem Dairesi Başkanlığı-CBS Grubu > > > > > Ahmet Temiz > Geological Eng. > Information Systems - GIS Group > Disaster and Emergency Management > of Presidency > > > -- > What NetFlow Analyzer can do for you? Monitors network bandwidth and > traffic > patterns at an interface-level. Reveals which users, apps, and protocols > are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning > reports.http://sdm.link/zohodev2dev > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] authkey module in Geoserver 2.5?
Hi Chris, some questions Did you add your new user "default" user group service ? Then the default user/group is correct. Did you add your user to authkeys.propeties ? Cheers On Fri, Aug 12, 2016 at 1:18 PM, Chris Buckmaster < chris.buckmas...@runnymede.gov.uk> wrote: > I’ve found I needed to install the module which I have done – my next > question! > > > > To do a basic test, I have set up a new user called ‘test’ with a new role > called ‘TEST’ which my ‘test’ user is a part of; in my ‘Data Security’ I > have set one layer to be accessed by the ‘TEST’ role. > > > > What I want to do is create an authkey for the user ‘test’ but I cannot > seem to find it in the User/Group Service drop down (I only have ‘default’) > and do not understand what the options are under ‘Authentication key to > user mapper’. > > > > Is there documentation somewhere to explain this module, or would anyone > know how I can create an authkey for my user ‘test’? > > > > Thanks > > > > *From:* Chris Buckmaster > *Sent:* 12 August 2016 11:51 > *To:* geoserver-users@lists.sourceforge.net > *Subject:* [Geoserver-users] authkey module in Geoserver 2.5? > > > > Hi > > > > I would like to explore the authkey module in Geoserver 2.5 to see if it > is something that could be useful for my setup. > > > > After looking at the manual, I cannot seem to find the authkey > authentication filter within my Authentication area, only; J2EE, > Anonymouse, Remember Me, Form, X.509, HTTP Header, Basic and Digest. > > > > Do I need to configure something for the authkey option to appear? > > > > Thanks > > > -- > What NetFlow Analyzer can do for you? Monitors network bandwidth and > traffic > patterns at an interface-level. Reveals which users, apps, and protocols > are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Fwd: Can not remove rest access rule
Hi The URL looks correct. Did you see something in the geoserver.log file. Cheers Christian On Tue, Aug 16, 2016 at 9:32 AM, Christoph Eibl <ceib...@gmail.com> wrote: > Hi, > I have added a rest access rule with a rest command which results in an > entry in the rest.properties file like: >/**/workspaces/test/**;GET,POST,DELETE,PUT=test > > Later I want to delete this rule again with: > http://:8080/geoserver/security/acl/rest/%2F**% > 2Fworkspaces%2Ftest%2F**;GET,POST,DELETE,PUT > but the server responds with 404: Not Found > > From the user documentation I can't find my mistake. Any Idea what I am > doing wrong? > > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Restrict simultaneous logins for same user
Hi all WMS is a stateless service. As a consequence each request has to be authenticated. There is no session and no logout. What is the problem if a user triggers multiple WMS requests ? Cheers Christian On Fri, Jul 8, 2016 at 3:28 PM, sakis <thanostheo...@gmail.com> wrote: > Hi Jim and thank you for your answer, > > My wms service is used in autocad Map-Qgis and > i simply don't want two or more users connecting > with the same credential at the same time. > > > > Cheers all > > > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Restrict-simultaneous-logins-for-same-user-tp5275385p5275431.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > Attend Shape: An AT Tech Expo July 15-16. Meet us at AT Park in San > Francisco, CA to explore cutting-edge tech and listen to tech luminaries > present their vision of the future. This family event has something for > everyone, including kids. Get more information and register today. > http://sdm.link/attshape > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Attend Shape: An AT Tech Expo July 15-16. Meet us at AT Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Admin login access
Hi all You have to handle the admin roles in your JDBC role service since the default role service is not active. Upon defining your role service, you can map a role in your db to the geoserver admin role and another one to the geoserver group admin role. Nevertheless, if you want to use "admin" for logging in, you have to define an "admin" user in your role service. But it is not necessary to use "admin", any other user can be administrator. Hope this helps On Thu, Jun 9, 2016 at 9:53 PM, Jim Hughes <jn...@ccri.com> wrote: > Hi Kevin, > > I've seen the same thing. From the docs (1), I think the short answer is > 'no'. > > As an option, you could setup a user in JDBC with the default admin's > username and password. > > Cheers, > > Jim > > 1. > http://docs.geoserver.org/stable/en/user/security/webadmin/settings.html#active-role-service > > > On 06/09/2016 03:46 PM, Kevin Berger wrote: > > Hi, > > > > We created a JDBC User Group service and a JDBC Role service. Under > Security > Settings, we changed the active role service from default to the > JDBC Role Service we created. After making this change, when we log in as > the default admin user, it only displays a couple of menu options: About > GeoServer and Layer Preview. Is there a way to get the default admin login > working with an active role service other than default? > > > > Thanks, > > Kevin > > > -- > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e > > > > ___ > Geoserver-users mailing > listGeoserver-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > -- > What NetFlow Analyzer can do for you? Monitors network bandwidth and > traffic > patterns at an interface-level. Reveals which users, apps, and protocols > are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer custom authentication configuration
Look for rolesddl.xml rolesdml.xml usersdml.xml usersddl.xml after creating a JDBC role store or a JDBC user store. The files should be in your GEOSERVER_DATA_DIR Feel free to adapt the statements, you can ignore the *ddl.xml files, put your focus on the *dml.xml files. To be sure, grant geoserver read only access to your tables. Cheers Christian On Wed, Jun 8, 2016 at 4:25 PM, Kevin Berger <kevin.ber...@silvacom.com> wrote: > Hi, > > > > We want to set up custom user authentication for GeoServer. Our custom > authentication is stored in Oracle tables. We have been able to set up a > JDBC connection to the Oracle database. We note that by default, tables > called USERS, USER_PROPS, GROUPS, and GROUP_MEMBERS are created. Is there a > way to hook our custom tables to the Geoserver authentication? > > > > Thanks. > > > > Kevin > > > -- > What NetFlow Analyzer can do for you? Monitors network bandwidth and > traffic > patterns at an interface-level. Reveals which users, apps, and protocols > are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer doesn't Start-up
Hi Stefan OpenJDK or Oracle JDK ? Cheers Christian On Fri, May 27, 2016 at 2:53 PM, Stefan Steiniger <sst...@geo.uzh.ch> wrote: > Hi, just want to confirm that we found a new JDK version installed from > auto update. Which brings us most likely closer to a solution. > thanks, > stefan > > > On 5/26/16 23:16, Christian Mueller wrote: > > Hi > > @Andrea, this is not a wild guess and could be the reason for this > problem. Concerning security, OpenJDK makes live easier because it is > unrestricted out of the box whilst Oralce JDK is not. > > Cheers > Christian > > On Thu, May 26, 2016 at 8:46 PM, Andrea Aime <andrea.a...@geo-solutions.it > > wrote: > >> Hi, >> I'm making a wild guess and I might be way off the mark, so sorry in >> advance if it does not help but... >> could it be that you once installed the unrestricted policy jars for >> strong encryption, and then >> a JDK upgrade happened, it wiped out those jars (they are in the JDK >> itself), and now you cannot perform the same >> type of encryption anymore? >> >> Cheers >> Andrea >> >> On Thu, May 26, 2016 at 7:33 PM, Stefan Steiniger < <sst...@geo.uzh.ch> >> sst...@geo.uzh.ch> wrote: >> >>> Hi, >>> >>> thanks for the idea. I meant: deleting the default password file as the >>> instructions suggest. The problem seems also that we would have to get >>> GeoServer running at least once, but we haven't achieved this. >>> Apart from that we did no new installation, everything is as it was >>> before. But it seems like the problem is related to a security feature >>> according to a new extended log output (see below) - my colleague is >>> looking into that now (as I am giving a course all day). >>> >>> stefan >>> >>> === >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> >>> *26 May 12:27:00 INFO [geoserver.wps] - Found 29 bindable processes in >>> Vector processes 26 May 12:27:00 INFO [geoserver.wps] - Blacklisting >>> process geonode:BatchDownload as the input LAYERS of type class >>> org.geonode.process.batchdownload.LayerReference cannot be handled 26 May >>> 12:27:00 INFO [geoserver.wps] - Blacklisting process geonode:BatchDownload >>> as the input map of type class >>> org.geonode.process.batchdownload.MapMetadata cannot be handled 26 May >>> 12:27:00 INFO [geoserver.wps] - Blacklisting process geonode:BatchDownload >>> as the output ZippedFile of type interface >>> org.geonode.process.storage.Resource cannot be handled 26 May 12:27:00 INFO >>> [geoserver.wps] - Found 0 bindable processes in Batch Downloader 26 May >>> 12:27:00 INFO [geoserver.wps] - Found 4 bindable processes in GeoServer >>> specific processes 26 May 12:27:00 INFO [geoserver.wps] - Found 89 bindable >>> processes in Deprecated processes May 26, 2016 12:27:00 PM >>> org.apache.catalina.core.StandardContext listenerStart SEVERE: Exception >>> sending context initialized event to listener instance of class >>> org.geoserver.platform.GeoServerContextLoaderListener >>> org.springframework.beans.factory.BeanCreationException: Error occured >>> reading security configuration; nested exception is >>> java.lang.RuntimeException: >>> org.jasypt.exceptions.EncryptionOperationNotPossibleException at >>> org.geoserver.security.GeoServerSecurityManager.onApplicationEvent(GeoServerSecurityManager.java:346) >>> at >>> org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:97) >>> at >>> org.springframework.context.supp
Re: [Geoserver-users] GeoServer doesn't Start-up
[PROJECTION["Transverse_Mercator"]]) but failed to remove it when >> the web application was stopped. Threads are going to be renewed over time >> to try and avoid a probable memory leak. May 26, 2016 12:27:02 PM >> org.apache.catalina.loader.WebappClassLoader checkThreadLocalMapForLeaks >> SEVERE: The web application [/geoserver] created a ThreadLocal with key of >> type [org.apache.commons.lang.builder.HashCodeBuilder$1] (value >> [org.apache.commons.lang.builder.HashCodeBuilder$1@20b9f0d0]) and a value >> of type [java.util.HashSet] (value [[]]) but failed to remove it when the >> web application was stopped. Threads are going to be renewed over time to >> try and avoid a probable memory leak. May 26, 2016 12:27:02 PM >> org.apache.catalina.loader.WebappClassLoader checkThreadLocalMapForLeaks >> SEVERE: The web application [/geoserver] created a ThreadLocal with key of >> type [org.eclipse.emf.ecore.xml.type.util.XMLTypeUtil.CharArrayThreadLocal] >> (value >> [org.eclipse.emf.ecore.xml.type.util.XMLTypeUtil$CharArrayThreadLocal@53877bc7]) >> and a value of type [char[]] (value [[C@63cf70a8]) but failed to remove it >> when the web application was stopped. Threads are going to be renewed over >> time to try and avoid a probable memory leak. May 26, 2016 12:27:02 PM >> org.apache.catalina.loader.WebappClassLoader checkThreadLocalMapForLeaks >> SEVERE: The web application [/geoserver] created a ThreadLocal with key of >> type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@47ed58c9]) and a >> value of type [org.geotools.referencing.wkt.Formatter] (value []) but >> failed to remove it when the web application was stopped. Threads are going >> to be renewed over time to try and avoid a probable memory leak. May 26, >> 2016 12:27:02 PM org.apache.catalina.loader.WebappClassLoader >> checkThreadLocalMapForLeaks SEVERE: The web application [/geoserver] >> created a ThreadLocal with key of type [java.lang.ThreadLocal] (value >> [java.lang.ThreadLocal@2f601903]) and a value of type >> [org.springframework.security.core.context.SecurityContextImpl] (value >> [org.springframework.security.core.context.SecurityContextImpl@: >> Null authentication]) but failed to remove it when the web application was >> stopped. Threads are going to be renewed over time to try and avoid a >> probable memory leak. May 26, 2016 12:27:02 PM >> org.apache.catalina.loader.WebappClassLoader checkThreadLocalMapForLeaks >> SEVERE: The web application [/geoserver] created a ThreadLocal with key of >> type [org.eclipse.emf.ecore.impl.EClassImpl$1] (value >> [org.eclipse.emf.ecore.impl.EClassImpl$1@4e0a2c41]) and a value of type >> [java.util.HashSet] (value [[]]) but failed to remove it when the web >> application was stopped. Threads are going to be renewed over time to try >> and avoid a probable memory leak. May 26, 2016 12:27:02 PM >> org.apache.catalina.startup.HostConfig deployDirectory INFO: Deploying web >> application directory /var/lib/tomcat7/webapps/ROOT May 26, 2016 12:27:02 >> PM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler >> ["http-bio-8080"] May 26, 2016 12:27:02 PM >> org.apache.catalina.startup.Catalina start INFO: Server startup in 20835 ms* >> >> >> On 05/26/2016 08:22 AM, Christian Mueller wrote: >> >> Hi >> >> What do you mean with deleting the admin password ? >> >> Obviously GeoServer cannot decode the password of your datastore. I >> assume you did a fresh installation and the GeoServer internal key material >> >> has changed. Different GeoServer installations use different key >> material. >> >> Solution: find the xml config file for your datastore. Search the XML >> element named "password". Replace the password with: >> >> plain:mypassword. >> >> After restarting, use the admin GUI, open the edit view of your datastore >> and save the config. This will encrypt the password using your new internal >> keys. >> >> Cheers >> Christian >> >> >> >> >> >> >> -- >> Mobile security can be enabling, not merely restricting. Employees who >> bring their own devices (BYOD) to work are irked by the imposition of MDM >> restrictions. Mobile Device Manager Plus allows you to control only the >> apps on BYO-devices by containerizing them, leaving personal data >> untouched! >> https://ad.doubleclick.net/ddm/clk/304595813;131938128;j >> ___ >> Geoserver-users mailing list >>
Re: [Geoserver-users] PostGIS rasters without mosaicing?
AFAIK there is no simpler approach. Christian On Wed, May 25, 2016 at 11:11 PM, RICK WAYNE <fewa...@wisc.edu> wrote: > Hello all, > > I’ve an application for which I need to store and display fairly low-res > (400x400) rasters. I’d also like a Web app to be able to do various > calculations on them, so it helps if they’re in a database rather than > stored as individual files (there will be at least one new raster every > day). > > I know that the ImageMosaic JDBC plugin can display PostGIS rasters, but > that’s a ton of setup overhead and complexity that I don’t need — I do not > need or want a pyramid of these rasters. > > Any simple way forward? As it is, I’m ready to just accumulate files and > deal with the calculations when and if. > > Thanks, > > rw > > > -- > Mobile security can be enabling, not merely restricting. Employees who > bring their own devices (BYOD) to work are irked by the imposition of MDM > restrictions. Mobile Device Manager Plus allows you to control only the > apps on BYO-devices by containerizing them, leaving personal data > untouched! > https://ad.doubleclick.net/ddm/clk/304595813;131938128;j > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Mobile security can be enabling, not merely restricting. Employees who bring their own devices (BYOD) to work are irked by the imposition of MDM restrictions. Mobile Device Manager Plus allows you to control only the apps on BYO-devices by containerizing them, leaving personal data untouched! https://ad.doubleclick.net/ddm/clk/304595813;131938128;j___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer doesn't Start-up
Hi What do you mean with deleting the admin password ? Obviously GeoServer cannot decode the password of your datastore. I assume you did a fresh installation and the GeoServer internal key material has changed. Different GeoServer installations use different key material. Solution: find the xml config file for your datastore. Search the XML element named "password". Replace the password with: plain:mypassword. After restarting, use the admin GUI, open the edit view of your datastore and save the config. This will encrypt the password using your new internal keys. Cheers Christian On Thu, May 26, 2016 at 1:09 AM, Stefan Steiniger <sst...@geo.uzh.ch> wrote: > Hi, > > today I realized that my GeoServer instance doesn't startup anymore (must > have been since yesterday) as GeoNode layer views and layer downloads > didn't work anymore. Latest thing we did was removing the admin password; > but after we encountered the problem we tried to restore this now - without > much success. Also I may mention that I restarted the server yesterday > after seeing some inexplicable high load on the server (all 6 assigned > processors were used => a guess could be that someone tried to download a > bigger image file, 300gb+ ??) > > I have checked if there is content in the gwc xml files and also deleted > the geoserver work directory in tomcat, but without much success. GeoServer > doesn't startup > > The only think left is sending you logs for GeoServer (don't say much to > me what is going on and what initiates the shutdown) and Catalina.out. > Perhaps the "datastore" not found error is relevant. As it is GeoNode this > should be our postgis on another server. However, I checked and had no > problem connecting to Postgis with pgAdmin. > > I run GeoServer (2.4) as it came installed with GeoNode 2.0 on Tomcat7. > Also I let GeoNode with GeoServer run in a VM that has Ubuntu 12.04 > installed. > > any help is highly appreciated! > best, > > Stefan > > PS: as GeoServer doesn't start up I am getting of course 404 errors > > > -- > Mobile security can be enabling, not merely restricting. Employees who > bring their own devices (BYOD) to work are irked by the imposition of MDM > restrictions. Mobile Device Manager Plus allows you to control only the > apps on BYO-devices by containerizing them, leaving personal data > untouched! > https://ad.doubleclick.net/ddm/clk/304595813;131938128;j > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Mobile security can be enabling, not merely restricting. Employees who bring their own devices (BYOD) to work are irked by the imposition of MDM restrictions. Mobile Device Manager Plus allows you to control only the apps on BYO-devices by containerizing them, leaving personal data untouched! https://ad.doubleclick.net/ddm/clk/304595813;131938128;j___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Cannot find Root/Master password
Hi Peter Login as admin and go to Security-->Passwords. You can change the master pw. If you do not know the current master password, you can export it to a file. Cheers Christian On Mon, Apr 4, 2016 at 12:43 PM, Peter Cooper <pe...@pcooper.me.uk> wrote: > I have recently installed GeoServer 2.8.3 on Tomcat7 on Ubuntu 14.04 LTS, > alongside Apache2. I am new to Ubuntu, but GeoServer seems to work fine for > me. I have admin access, and have changed the admin password. > > I am getting the message: “The master password for this server has not > been changed from the default. It is highly recommended that you change it > now”. > > According to the documentation there should be a file named security/ > masterpw.info where the master password is stored using plain text. I > cannot find that file, so I cannot find or change the master password. > Among others, there are the following password-looking files in folder > security: > >- masterpw.digest >- masterpw.xml >- masterpw/default/passwd > > I note a similar question on StackExchange: > http://gis.stackexchange.com/questions/107265/geoserver-change-master-password-masterpw-info-missing. > The answers (in late 2015) leave it up in the air, and there is no setting > to "pipe the master password out to a file. > > When I installed Geoserver on Windows a few months ago, I managed to find > the file and change the root password OK, but not this time. > > What can I do to find or change the root/master password? > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geoserver ImageMosaicJDBC returns grey color for 'out of bbox'-region
The background color is passed as RGBA Color object. The object is can handle integers and floats. Maybe the int-->float conversion is the problem. A debug session would be nice but is not possible. Maybe I can send you a jar file producing additional log files. Please set the logging level (Settings->Global) to GEOTOOLS_DEVELOPER_LOGGING and check the log file first. Maybe you can find a hint. Christian On Mon, Mar 14, 2016 at 10:57 PM, hanshupe <paul.schneewe...@siemens.com> wrote: > Hi Christian, > I tried some configurations on the oracle georaster object and found out > that the problem occurs with the ImageMosaicJDBC plugin with floating > numbers (Real 32 bits / celldepth=32BIT_REAL). When I convert the datatype > for example to 16 or 8bit I don't get a wrong background color (but of > course my values get truncated so I need 32bit floats). The same 32bit real > GeoTIFF accessed from the file system works well. > > How does ImageMosaicJDBC determine the background color of the area that > lies outside of the raster image? > > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Geoserver-ImageMosaicJDBC-returns-grey-color-for-out-of-bbox-region-tp5255345p5256328.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785231=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785231=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geoserver ImageMosaicJDBC returns grey color for 'out of bbox'-region
Maybe Oracle itself uses this background. If this is the case then GeoServer has no chance to "recolor". Christian On Mon, Mar 14, 2016 at 12:25 PM, hanshupe <paul.schneewe...@siemens.com> wrote: > That's what I expected, but unfortunately the ImageMosaicJDBC plugin > ignores > the background color setting. I tried to set the background color in the > geoserver layer settings as well as to define the BGCOLOR WMS parameter > directly in the URL. Both settings didn't influence the grey background. > Is anyone using ImageMosaicJDBC in conjunction with Oracle who can confirm > this behaviour? > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Geoserver-ImageMosaicJDBC-returns-grey-color-for-out-of-bbox-region-tp5255345p5256198.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785231=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785231=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geoserver ImageMosaicJDBC returns grey color for 'out of bbox'-region
I think you can set a background color. Cheers Christian On Wed, Mar 9, 2016 at 1:42 PM, hanshupe <paul.schneewe...@siemens.com> wrote: > Hi, > > I am using the ImageMosaicJDBC plugin to access raster data stored in an > oracle 12g databaste with spatial extension. > > I created a raster layer in GeoServer 2.8.0, which works fine. When I > request the layer via wms or openlayer, the region, which is outside of my > bounding box seems to be grey instead of white/nodata. > > <http://osgeo-org.1560.x6.nabble.com/file/n5255345/grey.jpg> > > Because we use the downloaded layer for further processing we get problems > with that grey color. Creating a layer based on the same tiff file but > stored in the file system the region contains white/nodata-values like > expected. > > Is there any setting to define the color for the 'out of bbox'-region? > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Geoserver-ImageMosaicJDBC-returns-grey-color-for-out-of-bbox-region-tp5255345.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > Transform Data into Opportunity. > Accelerate data analysis in your applications with > Intel Data Analytics Acceleration Library. > Click to learn more. > http://pubads.g.doubleclick.net/gampad/clk?id=278785111=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785111=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] please answer the question to help me, i have a problem with geoserver
Hi Ahmad Login as admin and check the following things: Under Security-->Settings is a drop down box called "Active role service". This has to be your jdbc role service. Look at Security-->Authentication search for "authentication providers". There is one called default. Click on this provider to get on the edit page. Check if "User Group Service" is the name of your jdbc user group service. Finally, at the bottom of Security-->Authentication you will see "Provider Chain". There is a list box called "Select". There should be one entry named "default" Thats it. Cheers On Sun, Mar 6, 2016 at 12:34 PM, ahmad@user <ahmadnagha...@gmail.com> wrote: > Hello christian, thank you for reply > Your idea is not work, delete jdbc authentication provider cuase no any > one login to geoserver... > Dose this problem is a bug for geoserver? > On Mar 5, 2016 8:53 AM, "Christian Mueller-3 [via OSGeo.org]" <[hidden > email] <http:///user/SendEmail.jtp?type=node=5254656=0>> wrote: > >> Hi Ahmad >> >> The JDBC authentication provider verifies the credentials using a simple >> connect to the database. I think this is not what you want. >> >> Please remove the JDBC authentication provider and try again. >> >> Cheers >> Christian >> >> >> On Fri, Mar 4, 2016 at 9:01 PM, ahmad@user <[hidden email] >> <http:///user/SendEmail.jtp?type=node=5254520=0>> wrote: >> >>> Hello >>> Please help me, i have a problem in authentication with jdbc users and >>> roles >>> that saved in database. >>> i use users and roles that saved in postgresql database to connect to >>> geoserver, and use jdbc users/groups service and jdbc roles service and >>> jdbc >>> authentication provider to connect database. >>> The connection url in all jdbc services is correct and work. >>> But when use this method, unknown users can login to geoserver! >>> for example, the user 'example' dose not exist in users table in database >>> but can login to geoserver like a user!! >>> for every users in database, the password dose not check when login into >>> geoserver!!! >>> Please help me, >>> >>> >>> >>> >>> -- >>> View this message in context: >>> http://osgeo-org.1560.x6.nabble.com/please-answer-the-question-to-help-me-i-have-a-problem-with-geoserver-tp5254486.html >>> Sent from the GeoServer - User mailing list archive at Nabble.com. >>> >>> >>> -- >>> ___ >>> Geoserver-users mailing list >>> [hidden email] <http:///user/SendEmail.jtp?type=node=5254520=1> >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >> >> >> >> -- >> DI Christian Mueller MSc (GIS), MSc (IT-Security) >> OSS Open Source Solutions GmbH >> >> >> -- >> >> >> ___ >> Geoserver-users mailing list >> [hidden email] <http:///user/SendEmail.jtp?type=node=5254520=2> >> https://lists.sourceforge.net/lists/listinfo/geoserver-users >> >> >> -- >> If you reply to this email, your message will be added to the discussion >> below: >> >> http://osgeo-org.1560.x6.nabble.com/please-answer-the-question-to-help-me-i-have-a-problem-with-geoserver-tp5254486p5254520.html >> To unsubscribe from please answer the question to help me, i have a >> problem with geoserver, click here. >> NAML >> <http://osgeo-org.1560.x6.nabble.com/template/NamlServlet.jtp?macro=macro_viewer=instant_html%21nabble%3Aemail.naml=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml> >> > > -- > View this message in context: Re: please answer the question to help me, > i have a problem with geoserver > <http://osgeo-org.1560.x6.nabble.com/please-answer-the-question-to-help-me-i-have-a-problem-with-geoserver-tp5254486p5254656.html> > > Sent from the GeoServer - User mailing list archive > <http://osgeo-org.1560.x6.nabble.com/GeoServer-User-f3786390.html> at > Nabble.com. > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] please answer the question to help me, i have a problem with geoserver
Hi Ahmad The JDBC authentication provider verifies the credentials using a simple connect to the database. I think this is not what you want. Please remove the JDBC authentication provider and try again. Cheers Christian On Fri, Mar 4, 2016 at 9:01 PM, ahmad@user <ahmadnagha...@gmail.com> wrote: > Hello > Please help me, i have a problem in authentication with jdbc users and > roles > that saved in database. > i use users and roles that saved in postgresql database to connect to > geoserver, and use jdbc users/groups service and jdbc roles service and > jdbc > authentication provider to connect database. > The connection url in all jdbc services is correct and work. > But when use this method, unknown users can login to geoserver! > for example, the user 'example' dose not exist in users table in database > but can login to geoserver like a user!! > for every users in database, the password dose not check when login into > geoserver!!! > Please help me, > > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/please-answer-the-question-to-help-me-i-have-a-problem-with-geoserver-tp5254486.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Create ImageMosaicJDBC - raster layer via geoserver API
AFAIK there is no way to transport the special xml config file using the REST API. Cheers Christian On Wed, Feb 17, 2016 at 3:45 PM, hanshupe <paul.schneewe...@siemens.com> wrote: > Hi, > > Thanks. My problem is that the ImageMosaicJDBC plugin creates a special > type > of datastore, which has reference to another xml-file (screenshot). I can > create the datastore object itself with the REST API, but I don't know what > is the best way to bring the ImageMosaicJDBC-xml-config file to my > webserver. > > <http://osgeo-org.1560.x6.nabble.com/file/n5251178/raster.png> > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Create-ImageMosaicJDBC-raster-layer-via-geoserver-API-tp5251025p5251178.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=272487151=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Securing with digest
Hi Unfortunately, digest auth does not work in some situations, don't know why. Can you open an issue in the issue tracker. Cheers Christian On Tue, Feb 2, 2016 at 2:42 PM, Petteri Packalen <petteri.packa...@uef.fi> wrote: > Hi, > > I cannot get digest authentication to work in GeoServer 2.8.1. Without > digest it works properly. GeoServer is bundled with Jetty and I run them > under Linux. Because it did not work with my own data I went back to basics > and tried the tutorial: > > > http://docs.geoserver.org/stable/en/user/security/tutorials/digest/index.html > > It didn't work either. However, the dialog in step 9 is different than > mine although the tutorial version should be correct. Also default roles > are different (ADMIN vs. ROLE_ADMINISTRATOR). Can anyone give me simple > instructions how to activate digest in GeoServer 2.8.1? > > -- > Best regards, > Petteri Packalen > > > -- > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=267308311=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] imagemosaic.jdbc : an explanation for "Could not list layers for this store"
Hi Jukka
Quoting would be a solution, but if you work with command line DB tools it
is harder to find the table and write SQL statements. (Most people do not
quote the table and attribute names).
No preferences from my side.
Cheers
Christian
On Mon, Jan 25, 2016 at 2:56 PM, Chiarello Ernest <
ernest.chiare...@univ-fcomte.fr> wrote:
> Hi Jukka, Hi Christian,
>
> but if pgraster is only for PostgreSQL/GIS, then it is easier to use only
> lowercase... ;-)
>
> thanks for this plugin, Christian !
>
> sincerly yours,
>
>
> Ernest.
>
>
>
> Le 25/01/2016 12:38, Rahkonen Jukka (MML) a écrit :
>
> Hi,
>
>
>
> So why to play with the defaults of the databases at all? Wouldn’t it be
> much more reliable to use quoted identifiers everywhere and always? This
> way the result should be exactly the same for PostgreSQL, Oracle, SQL
> Server, SQLite, and others.
>
>
>
> create table "MOSAIC" ("NAME" varchar(254) not null, "TileTable"
> varchar(254)not null, "minX" FLOAT8,"minY" FLOAT8, "maxX" FLOAT8, "maxY"
> FLOAT8,"resX" FLOAT8, "resY" FLOAT8, primary key ("NAME","TileTable"));
>
>
>
>
>
> -Jukka Rahkonen-
>
>
>
>
>
> Christian Mueller wrote:
>
>
>
> Hi Ernest
>
>
>
> XML names are case sensitive.
>
>
>
> Different databases have different defaults.
>
>
>
> PostGres converts DB names to lowercase
>
> DB2 or Oracle convert DB names to uppercase
>
>
>
> Cheers
>
> Christian
>
>
>
>
>
>
>
> On Mon, Jan 25, 2016 at 11:19 AM, Ernest CHIARELLO <
> ernest.chiare...@univ-fcomte.fr> wrote:
>
> Hello everybody,
>
> i recently experimented a geoserver failure when i tried to use the
> imagemosaic-jdbc plugin.
> the catalina.out file contained the following lines :
>
> Caused by: java.lang.NullPointerException
> at
> org.geotools.gce.imagemosaic.jdbc.Config.readNameAttribute(Config.java:329)
> at
> org.geotools.gce.imagemosaic.jdbc.Config.readNameString(Config.java:298)
> at
> org.geotools.gce.imagemosaic.jdbc.Config.readMapping(Config.java:201)
> at
> org.geotools.gce.imagemosaic.jdbc.Config.readFrom(Config.java:189)
> at
> org.geotools.gce.imagemosaic.jdbc.ImageMosaicJDBCReader.(ImageMosaicJDBCReader.java:133)
> ... 133 more
> 25 janv. 09:41:35 INFO [geoserver.web] - Getting list of coverages for
> saved store file:coverages/france_pgraster.xml
> java.lang.RuntimeException: Could not list layers for this store, an error
> occurred retrieving them: Failed to create reader from
> file:coverages/france_pgraster.xml and hints null
>
> whereas the mapping.pgraster.xml.inc file contained the following xml
> statement :
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> why did geoserver failed ?
> because it expects the string "maxXAttribute" and not "maxxattribute"...
> !
>
> i made this mistake because i prefer using only lower case when i work
> with postgresql, and consequently,
> i used the bash command "tr [A-Z] [a-z]" to transform the original
> mapping.pgraster.xml.inc file, proposed here :
> http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html
> it was stupid, i was too hasty !
>
> indeed, the original file in the documentation proposes this XML statement
> :
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> you can see that according to this XML code, the table should be named
> "MOSAIC" and not "mosaic".
> but PostgreSQL will not do that !
>
> look at this create table query :
>
> create table MOSAIC (NAME varchar(254) not null, TileTable varchar(254)not
> null, minX FLOAT8,minY FLOAT8, maxX FLOAT8, maxY FLOAT8,resX FLOAT8, resY
> FLOAT8, primary key (NAME,TileTable));
>
> the resulting table is :
>
> geoserver=> \d mosaic;
> Table « public.mosaic »
> Colonne | Type | Modificateurs
> ---++---
> name | character varying(254) | non NULL
> tiletable | character varying(254) | non NULL
> minx
Re: [Geoserver-users] imagemosaic.jdbc : an explanation for "Could not list layers for this store"
Hi Ernest XML names are case sensitive. Different databases have different defaults. PostGres converts DB names to lowercase DB2 or Oracle convert DB names to uppercase Cheers Christian On Mon, Jan 25, 2016 at 11:19 AM, Ernest CHIARELLO < ernest.chiare...@univ-fcomte.fr> wrote: > Hello everybody, > > i recently experimented a geoserver failure when i tried to use the > imagemosaic-jdbc plugin. > the catalina.out file contained the following lines : > > Caused by: java.lang.NullPointerException > at > org.geotools.gce.imagemosaic.jdbc.Config.readNameAttribute(Config.java:329) > at > org.geotools.gce.imagemosaic.jdbc.Config.readNameString(Config.java:298) > at > org.geotools.gce.imagemosaic.jdbc.Config.readMapping(Config.java:201) > at > org.geotools.gce.imagemosaic.jdbc.Config.readFrom(Config.java:189) > at > org.geotools.gce.imagemosaic.jdbc.ImageMosaicJDBCReader.(ImageMosaicJDBCReader.java:133) > ... 133 more > 25 janv. 09:41:35 INFO [geoserver.web] - Getting list of coverages for > saved store file:coverages/france_pgraster.xml > java.lang.RuntimeException: Could not list layers for this store, an error > occurred retrieving them: Failed to create reader from > file:coverages/france_pgraster.xml and hints null > > whereas the mapping.pgraster.xml.inc file contained the following xml > statement : > > > > > > > > > > > > > > > > > > > why did geoserver failed ? > because it expects the string "maxXAttribute" and not "maxxattribute"... > ! > > i made this mistake because i prefer using only lower case when i work > with postgresql, and consequently, > i used the bash command "tr [A-Z] [a-z]" to transform the original > mapping.pgraster.xml.inc file, proposed here : > <http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html> > http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html > it was stupid, i was too hasty ! > > indeed, the original file in the documentation proposes this XML statement > : > > > > > > > > > > > > > > > > > > you can see that according to this XML code, the table should be named > "MOSAIC" and not "mosaic". > but PostgreSQL will not do that ! > > look at this create table query : > > create table MOSAIC (NAME varchar(254) not null, TileTable varchar(254)not > null, minX FLOAT8,minY FLOAT8, maxX FLOAT8, maxY FLOAT8,resX FLOAT8, resY > FLOAT8, primary key (NAME,TileTable)); > > the resulting table is : > > geoserver=> \d mosaic; > Table « public.mosaic » > Colonne | Type | Modificateurs > ---++--- > name | character varying(254) | non NULL > tiletable | character varying(254) | non NULL > minx | double precision | > miny | double precision | > maxx | double precision | > maxy | double precision | > resx | double precision | > resy | double precision | > Index : > "mosaic_pkey" PRIMARY KEY, btree (name, tiletable) > > where you can see that all strings are lower case. consequently, i think > it is better to write everything in lower case, like that : > > create table mosaic (name varchar(254) not null, tiletable varchar(254) > not null, minx float8, miny float8, maxx float8, maxyfloat8, resx float8, > resy float8, primary key (name, tiletable)); > > and finally, you will use the following XML statement in the > mapping.pgraster.xml.inc file : > > > > > > > > > > > > > > > > > > > > hope this helps... > > > Ernest. > > -- > Ernest CHIARELLO - ernest.chiare...@univ-fcomte.fr > UMR6049 ThéMA - Théoriser et Modiliser pour Aménager > CNRS / université de Bourgogne Franche-Comté > 32 rue Mégevand 25030 BESANÇON Cedex > > Tel : 03 81 66 54 80 Mob : 07 82 99 11 08 > > > > > > -- > Site24x7 APM Insight: Get Deep Visibility into Application Performance > A
Re: [Geoserver-users] How to implement Session based token security
Hi I am a little bit confused about your architecture. Which identiy API and product are you using ? Cheers Christian On Wed, Jan 6, 2016 at 8:27 PM, Deepti Puri <deepti202j...@gmail.com> wrote: > Hi there > > Just learning about Geoserver - I have a multi-tenant web mapping > application running on ArcGIS server which I am trying to replace with > geoserver. Identity of the users for tenants are maintained through another > identity api. After successful login Api generates the session token > through get token service for a user passing the fixed credentials. > Geoserver provides Digest and http header method- but is there a way to > generate unique tokens for every session- so that no information related to > user authentication is hard coded in client side code. Thanks > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311=/4140___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] how to get geoserver start after boot
Hi Ferdinand First we have to know which Linux distribution you are using. The start scripts differ for different distributions. Christian On Sun, Jan 3, 2016 at 4:14 PM, Ferdinand Gruber <fer.g...@yahoo.de> wrote: > How can I get the geoserver started at boot time (using systemd). > > I installed the geoserver binaries in/usr/share/geoserver and it runs > after starting it manually using the command > > usr/share/geoserver/bin/startup.sh > > But I want the server should start automatically at boot time. > > I tried the init script for suse I found on the geoserver doku web page: > > http://suite.opengeo.org/docs/latest/geoserver/_downloads/geoserver_suse > > I saved this file as /etc/init.d/geoserver > > After typing > > /etc/init.d/geoserver > > I get > > redirecting to systemctl start geoserver.service > > ok, but nothing happens. > > I am not familiar with the systemd concept. Please help. > > -- > Greetings from Austria > Ferdinand Gruber > > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Error adding Geoserver 2.8 ImageMosaicJDBC data store
Hi Can you - Remove the store - Stop Geoserver and remove the logs/geoserver.log file - Start GeoServer - Switch the GeoServer Debug Level to "Geotools Debugging", - Add your store - Send me the logs/geoserver.log file (zipped or gzipped) Cheers Christian On Wed, Jan 6, 2016 at 11:41 PM, Ty Swavely <tswav...@coronaenv.com> wrote: > Hello! > > I'm trying to add an ImageMosaicJDBC data store to my Geoserver 2.8.0 > instance, but am receiving this error: > > Error: could not list layers for this store, an error occurred retrieving > them: Failed to create reader from …. and hints null. > > I've spent some time searching for solutions, but thus far have been > stumped. A little background about the process: > > -Followed this link as tutorial/Mastering Geoserver book: > http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html > > -local Geoserver version (2.8.0) matches ImageMosaicJDBC Plugin version > (gt-imagemosaic-jdbc-14.0), which is the 2.8.0 extension jar > > -able to create ImagePyramid in local data directory using same dataset, > able to preview layer created from ImagePyramid > > *Dataset:* > > 3 inch imagery from USGS covering small section of Maryland > > *Preprocessing:* > > -ImagePyramid processed using gdal_retile > > -ImageMosaicJDBC imported to Postgres using raster2pgsql > -populated public schema with md_3inch, o_2_md_3inch, o_4_md_3inch, > o_8_md_3inch, o_16_md_3inch > > *Metadata table:* > >`CREATE TABLE watersuite_raster_metadata > ( > coverage_name character varying(254) NOT NULL, > tiletable character varying(254) NOT NULL, > minx double precision, > miny double precision, > maxx double precision, > maxy double precision, > resx double precision, > resy double precision, > CONSTRAINT watersuite_raster_metadata_pkey PRIMARY KEY (coverage_name, > tiletable)` > > -Metadata table populated with record for each table. > > *XML Configuration files:* > > connect.pgraster.xml.inc > > > > > > > > > > > > mapping.pgraster.xml.inc > > > > > > > > > > > > > > > > > > > md3inch.pgraster.xml > > > > ]> > > > > > > > > > > > > Any help would be greatly appreciated! > > -- > Ty Swavely > GIS Analyst > Corona Environmental Consulting > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Protect only a few WFS layers of a workspace by user and password in the form http://user:password@myserver/...
Hi Andy Sending username/password as URL parameters is a bad practice (think about the browser history) and is not supported by GeoServer. You have to do the following steps. - add a user (optional add a user group and add the user to the group) - add a role and and attach this role to the user or the user group - add an access rule for your wfs workspace using the role - add a filter chain with the ANT pattern "myworkspace/**". - there is a predefined Basic Authentication Filter, add this filter to your new filter chain. Test using a Browser with http://myserver/geoserver/myworkspace/wfs?SERVICE=WFS=1.1.0; REQUEST=GetCapabilities If you can see a login box, the configuration is correct. Then add your user/password to your QGIS WFS Layer configuration. Cheers Christian On Wed, Dec 30, 2015 at 9:25 AM, sulu <andreas.sie...@vorarlberg.at> wrote: > Hi Christian. > > Thanks for your reply. > > I wanted to use just one Workspace in order to hav one single URL to call > my > services but i can live with several Worspaces. > > My main issue right now is: How can i bring geoserver to ask for a password > for a specific layer (or workspace) so that i can provice the credentials > via url > (http://user:password@myserver > /geoserver/myworkspace/wfs?SERVICE=WFS=1.1.0=GetFeature=.) > or on has to provide user/password if to use that service in e.g. QGIS? > > Cheers > Andy > > > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Protect-only-a-few-WFS-layers-of-a-workspace-by-user-and-password-in-the-form-http-user-password-mys-tp5243077p5243256.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] digest Authentication geoserver and Curl , not working
Hi Pablo
The digest authentication code did not change during some GeoServer
versions. Recently I had problems using chrome and digest auth. Which
Servlet container are you using ?. You can try to use digest auth
implemented in your servlet engine and use the J2EE authentication filter
and configure the web.xml appropriately.
Cheers
Christian
On Mon, Dec 28, 2015 at 2:41 PM, pablo zader <pza...@gmail.com> wrote:
> Hello Cristian.
> At the moment, I have not the possibility to use SSL.
>
> You could confirm whether digest authentication works well in the latest
> geoserver?
>
> Cheers
> Pablo
>
>
>
> 2015-12-27 13:48 GMT-03:00 Christian Mueller <
> christian.muel...@os-solutions.at>:
>
>> Hi Pablo
>>
>> GeoServer uses Spring Security for Digest Authentication. I had some
>> similar Problems and a solution may be to update Spring Security.
>> Unfortunately, this breaks other Authentication mechanisms.
>>
>> A better Idea would be to use Basic Auth in combination with SSL. Do you
>> have this possibility ?.
>>
>> Cheers
>> Christian
>>
>>
>>
>> On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pza...@gmail.com> wrote:
>>
>>> Hi list
>>>
>>> I want use digest authentication with Curl, but not working. I followed
>>> the steps outlined here
>>>
>>>
>>> http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html
>>>
>>>
>>> to configure security in geoserver digest.
>>>
>>> I am using geoserver 2.5.2
>>>
>>> *Here the request with digest authentication:*
>>>
>>> curl --digest -v -u admin:geoserver -XPUT -H 'Content-type: image/tiff'
>>> --data-binary @/home/pablo/mytiff.tif
>>> http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
>>> * About to connect() to localhost port 8080 (#0)
>>> * Trying 127.0.0.1... connected
>>> * Server auth using Digest with user 'admin'
>>> > PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
>>> HTTP/1.1
>>> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0
>>> OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
>>> > Host: localhost:8080
>>> > Accept: */*
>>> > Content-type: image/tiff
>>> > Content-Length: 0
>>> >
>>> < HTTP/1.1 401 No Autorizado
>>> < Server: Apache-Coyote/1.1
>>> < WWW-Authenticate: Basic realm="GeoServer Realm"
>>> < Content-Type: text/html;charset=utf-8
>>> < Content-Length: 1134
>>> < Date: Sun, 06 Dec 2015 23:28:36 GMT
>>> <
>>> Apache Tomcat/6.0.35 - Informe de
>>> Error<!--H1
>>> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;}
>>> H2
>>> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;}
>>> H3
>>> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;}
>>> BODY
>>> {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
>>> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;}
>>> P
>>> {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A
>>> {color : black;}A.name {color : black;}HR {color : #525D76;}-->
>>> Estado HTTP 401 - Full authentication is required to
>>> access this resourcetype
>>> Informe de estadomensaje Full authentication is required
>>> to access this resourcedescripción Este requerimiento
>>> requiere autenticación HTTP (Full authentication is requir* Connection #0
>>> to host localhost
>>> left intact
>>> * Closing connection #0
>>> ed to access this resource).>> noshade="noshade">Apache Tomcat/6.0.35
>>>
>>>
>>> *Here the request with basic authentication:*
>>>
>>> curl --basic -v -u admin:geoserver -XPUT -H 'Content-type: image/tiff'
>>> --data-binary @/home/pablo/mytiff.tif
>>> http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
>>> * About to connect() to localhost port 8080 (#0)
>>> * Trying 127.0.0.1... connected
>>> * Server auth using Basic with user 'admin'
>>> > PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
>>> HTTP/1.1
>>> > Authorization: Basic YWRtaW46Z2Vvc2VydmVy
>>> > User-Agent: curl/7.22.0 (x86_64-pc-
Re: [Geoserver-users] Users, roles and access rules through REST API.
Hi Niels I am wondering why this REST API is part of the GeoFence plugin. Shouldn't it be part of the GeoServer core code ?. Additionally, I think there are some API calls and return codes missing. As an example, what about read only services like LDAP. I do not see some error codes for this situation, nor I can see some API calls enumerating the available security services/stores. I am a little bit confused, please clarify. Btw, I am happy to see a first approach here. Cheers Christian On Sun, Dec 27, 2015 at 6:57 PM, Niels Charlier <ni...@scitus.be> wrote: > So if you really want the feature, there is nothing stopping you from > installing the plugin, disable geofence and use only the rest feature. > > > On 12/27/2015 06:56 PM, Niels Charlier wrote: > > Actually, there is one, but it is (unfortunately) part of the geofence > plug-in; even though it works for users/groups/roles in geoserver whether > you are using geofence or not. > > > http://docs.geoserver.org/stable/en/user/community/geofence-server/rest-userrole.html > > On 12/27/2015 05:35 PM, Christian Mueller wrote: > > Hi Jacob > > There is REST API for handling Access Control > > http://docs.geoserver.org/stable/en/user/rest/api/accesscontrol.html > > But there is no REST API for uses,groups an roles. > > Cheers > Christian > > > > > > On Mon, Nov 30, 2015 at 5:17 PM, Andrea Aime <andrea.a...@geo-solutions.it > > wrote: > >> Hi Jukka, >> I think the current direction is to make GeoFence more and more into >> an extension that does not require a separate app to be running, and have >> GeoFence use the GeoServer own users. >> >> Lacking a REST API to edit the simple XML user catalogs, one can still >> use the JDBC or LDAP ones, and then edit the users in the database >> or LDAP server: >> >> http://docs.geoserver.org/stable/en/user/security/usergrouprole/usergroupservices.html >> http://docs.geoserver.org/latest/en/user/security/auth/providers.html >> >> Cheers >> Andrea >> >> >> >> On Mon, Nov 30, 2015 at 4:09 PM, Rahkonen Jukka (MML) < >> <jukka.rahko...@maanmittauslaitos.fi>jukka.rahko...@maanmittauslaitos.fi> >> wrote: >> >>> Hi, >>> >>> >>> >>> I suppose you want to read this >>> https://github.com/geoserver/geofence/wiki/GeoFence-REST-API >>> >>> >>> >>> -Jukka Rahkonen- >>> >>> >>> >>> Jacob Overgaard Madsen wrote: >>> >>> >>> >>> Hi list >>> >>> When browsing through the REST API documentation here >>> >>> http://docs.geoserver.org/stable/en/user/rest/api/ >>> >>> I'm wondering... I can't find anything regarding creation of users, >>> roles and data access rules. Am I right about this? Is it not in any way >>> possible to create a user, assign a role to him and assign access rules to >>> this role through the REST API? >>> >>> If this is not possible, I hope it's part of the future plans for >>> Geoserver, as it would be a huge improvement for me. >>> >>> Thanks in advance, >>> >>> Jacob Madsen >>> >>> >>> -- >>> Go from Idea to Many App Stores Faster with Intel(R) XDK >>> Give your users amazing mobile app experiences with Intel(R) XDK. >>> Use one codebase in this all-in-one HTML5 development environment. >>> Design, debug & build mobile apps & 2D/3D high-impact games for multiple >>> OSs. >>> http://pubads.g.doubleclick.net/gampad/clk?id=254741551=/4140 >>> ___ >>> Geoserver-users mailing list >>> Geoserver-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >>> >> >> >> -- >> == >> GeoServer Professional Services from the experts! Visit >> http://goo.gl/it488V for more information. >> == >> >> *Geosolutions' Winter Holidays from 24/12 to 6/1* >> >> Ing. Andrea Aime >> @geowolf >> Technical Lead >> >> GeoSolutions S.A.S. >> Via Poggio alle Viti 1187 >> 55054 Massarosa (LU) >> Italy >> phone: +39 0584 962313 >> fax: +39 0584 1660272 <%2B39%200584%201660272> >> mob: +39 339 8844549 >> >> http://www.geo-solutions.it >> http://twitter.com/geosolutions_it >> >> *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* >&g
Re: [Geoserver-users] Protect only a few WFS layers of a workspace by user and password in the form http://user:password@myserver/...
Hi Andy I am not sure if I get my hands around your problem. My proposal would be: Put all your public WMS layers in a separate workspace and restrict this workspace to WMS access. Create a workspace for protected WFS Layers and restrict access to WFS. Now, you can add an authentication filter to the WFS workspace using security filter chains. Hope, this helps Please ask if I my answer was confusing :-) Christian On Mon, Dec 28, 2015 at 1:23 PM, sulu <andreas.sie...@vorarlberg.at> wrote: > Hi. > > To be more precise i have some layers in a workspace where wms is ok, but > wfs is not. > For some priviledged folks access to wfs should be available by adding a > password and a user to the GetFeature-URL > > e.g.: > http://user:password@myserver > /geoserver/myworkspace/wfs?SERVICE=WFS=1.1.0=GetFeature=that_particular_layer& > > After a long Web-Research i could not find anything that walks me through > that problem. > > Restriction by Users/Roles work fine if one logs into geoserver itself but > i > need that the possibility to provide user and password in the URL! > > So. > > 1.) How can i bring Geoserver to ask for a user/pw in the first place? > 2.) But it should aks only if there is some restriction placed on that > layer. > > Thanks > Andy > > > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Protect-only-a-few-WFS-layers-of-a-workspace-by-user-and-password-in-the-form-http-user-password-mys-tp5243077.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Users, roles and access rules through REST API.
risks which arise as a result of > e-mail transmission, viruses, etc. > > --- > > > ------ > Go from Idea to Many App Stores Faster with Intel(R) XDK > Give your users amazing mobile app experiences with Intel(R) XDK. > Use one codebase in this all-in-one HTML5 development environment. > Design, debug & build mobile apps & 2D/3D high-impact games for multiple > OSs. > http://pubads.g.doubleclick.net/gampad/clk?id=254741911=/4140 > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] digest Authentication geoserver and Curl , not working
Hi Pablo
GeoServer uses Spring Security for Digest Authentication. I had some
similar Problems and a solution may be to update Spring Security.
Unfortunately, this breaks other Authentication mechanisms.
A better Idea would be to use Basic Auth in combination with SSL. Do you
have this possibility ?.
Cheers
Christian
On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pza...@gmail.com> wrote:
> Hi list
>
> I want use digest authentication with Curl, but not working. I followed
> the steps outlined here
>
>
> http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html
>
>
> to configure security in geoserver digest.
>
> I am using geoserver 2.5.2
>
> *Here the request with digest authentication:*
>
> curl --digest -v -u admin:geoserver -XPUT -H 'Content-type: image/tiff'
> --data-binary @/home/pablo/mytiff.tif
> http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
> * About to connect() to localhost port 8080 (#0)
> * Trying 127.0.0.1... connected
> * Server auth using Digest with user 'admin'
> > PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
> HTTP/1.1
> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0
> OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
> > Host: localhost:8080
> > Accept: */*
> > Content-type: image/tiff
> > Content-Length: 0
> >
> < HTTP/1.1 401 No Autorizado
> < Server: Apache-Coyote/1.1
> < WWW-Authenticate: Basic realm="GeoServer Realm"
> < Content-Type: text/html;charset=utf-8
> < Content-Length: 1134
> < Date: Sun, 06 Dec 2015 23:28:36 GMT
> <
> Apache Tomcat/6.0.35 - Informe de
> Error<!--H1
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;}
> H2
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;}
> H3
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;}
> BODY
> {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} B
> {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;}
> P
> {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;}A
> {color : black;}A.name {color : black;}HR {color : #525D76;}-->
> Estado HTTP 401 - Full authentication is required to
> access this resourcetype
> Informe de estadomensaje Full authentication is required
> to access this resourcedescripción Este requerimiento
> requiere autenticación HTTP (Full authentication is requir* Connection #0
> to host localhost
> left intact
> * Closing connection #0
> ed to access this resource). noshade="noshade">Apache Tomcat/6.0.35
>
>
> *Here the request with basic authentication:*
>
> curl --basic -v -u admin:geoserver -XPUT -H 'Content-type: image/tiff'
> --data-binary @/home/pablo/mytiff.tif
> http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
> * About to connect() to localhost port 8080 (#0)
> * Trying 127.0.0.1... connected
> * Server auth using Basic with user 'admin'
> > PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff
> HTTP/1.1
> > Authorization: Basic YWRtaW46Z2Vvc2VydmVy
> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0
> OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
> > Host: localhost:8080
> > Accept: */*
> > Content-type: image/tiff
> > Content-Length: 259826
> > Expect: 100-continue
> >
> < HTTP/1.1 100 Continue
> < HTTP/1.1 201 Creado
> < Date: Sun, 06 Dec 2015 23:34:51 GMT
> < Server: Noelios-Restlet-Engine/1.0..8
> < Content-Type: application/xml
> < Transfer-Encoding: chunked
> <
>
> nbr
> GeoTIFF
> true
>
> tiger
> http://localhost:8080/geoserver/rest/workspaces/tiger.xml
>
> <__default>false
> file:data/tiger/nbr/nbr.geotiff
>
> http://www.w3.org/2005/Atom; rel="alternate"
> href="
> http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml;
> type="application/xml"/>
>
> * Connection #0 to host localhost left intact
> * Closing connection #0
>
> Thanks in advanced
>
> Pablo
>
>
> --
> Go from Idea to Many App Stores Faster with Intel(R) XDK
> Give your users amazing mobile app experiences with Intel(R) XDK.
> Use one codebase in this all-in-one HTML5 development environment.
> Design, debug & build mobile apps & 2D/3D high-impact games for multiple
> OSs.
> http://pubads.g
Re: [Geoserver-users] Authkey module and REST service
HI Joffrey Did you read the section Provider pluggability in http://docs.geoserver.org/stable/en/user/community/authkey/index.html Cheers Christian On Thu, Dec 17, 2015 at 9:58 AM, Joffrey Schmitz <jschm...@meteo.be> wrote: > Hello everyone, > > > I have to install geoserver with authkey plug-in to restrict access to > certain operations. > > > The creation of a new user (and the generation of his key) must be done by > non-IT people, so I developed a solution using REST services and geofence > to automate all this process. I can now create users and associate them to > a group, but I am stuck to the key generation part. > > > 1) I tried to find a way to send « Synchronize user/group service » and > retrieve the generated key, but Authkey module does not seem to have his > own REST service. > > > 2) I tried to use the user modification REST service of geofence : passing > 'false' in post data works, but > 'abcd' does not. No error, > but the line seems ignored. > > > Did I miss something ? I think my only hope is to develop my own web > service to work with authkey module, but I would like to be sure that I > have no other simple solution. > > > Thanks, > > > Joffrey > > > -- > > Configuration : > > Version : 2.8.1 > > Build Date : 19-Nov-2015 17:48 > > GeoTools Version : 1.4.1 (rev 945972725619078375e357f8c21011999638df35) > > GeoWebCache Version : 1.8.0 (rev > 1.8.x/b346a3aa6cc433a312c4608b218881d8509a8780) > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] SAML-support in Geoserver security
Hi Anders There are no plans at the moment. It is a matter of time and funds. I would estimate the effort between 2 and 4 weeks (including tests,GUI and documentation). If you want to contribute I can assist how to create/integrate a GeoServer security filter. Cheers Christian On Tue, Nov 3, 2015 at 7:24 PM, Simone Giannecchini < simone.giannecch...@geo-solutions.it> wrote: > Ciao Anders, > I am not aware of any plans for SAML, let's hear the others. > > About the effort, you can find help from the commercial support page ( > http://geoserver.org/support/) or you can help yourself > with the developers quickstart ( > http://docs.geoserver.org/stable/en/developer/quickstart/index.html). You > might get the thinking started and look for "community" help. > > No intent to put you down, just trying to give you some basic directions. > Your question requires some hard thinking, hence I am afraind you won't > get a straight answer saying "X days" :) > > > > Regards, > Simone Giannecchini > == > GeoServer Professional Services from the experts! > Visit http://goo.gl/it488V for more information. > == > Ing. Simone Giannecchini > @simogeo > Founder/Director > > GeoSolutions S.A.S. > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > phone: +39 0584 962313 > fax: +39 0584 1660272 > mob: +39 333 8128928 > > http://www.geo-solutions.it > http://twitter.com/geosolutions_it > > --- > AVVERTENZE AI SENSI DEL D.Lgs. 196/2003 > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > On Tue, Nov 3, 2015 at 3:29 PM, Erlandsson Anders < > anders.erlands...@sundsvall.se> wrote: > >> Hi >> >> I wonder if there are any plans on adding support for SAML-protocol when >> authenticating users? Or what the effort might be? >> >> >> >> Kind regards >> >> *Anders Erlandsson* >> >> Sundsvalls kommun >> >> Sweden >> >> >> >> >> -- >> >> ___ >> Geoserver-users mailing list >> Geoserver-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-users >> >> > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] SAML-support in Geoserver security
Hi Anders We will have to find a the technical design. Maybe we can ommit Spring and use https://wiki.shibboleth.net/confluence/display/OpenSAML/Home directly. Would be nice to have a SAML integration, please let me know. Cheers Christian On Fri, Nov 6, 2015 at 9:50 AM, Erlandsson Anders < anders.erlands...@sundsvall.se> wrote: > Thanks for the input! > > I’ve read about the spring security SAML extension. Will that be the way > to go? > > > > I’ll get back later if I could get funding for development. > > > > Regards > > Anders Erlandsson > > Sundsvalls kommun > > Sweden > > > > *Från:* Christian Mueller [mailto:christian.muel...@os-solutions.at] > *Skickat:* den 6 november 2015 09:16 > *Till:* Simone Giannecchini > *Kopia:* Erlandsson Anders; geoserver-users@lists.sourceforge.net > *Ämne:* Re: [Geoserver-users] SAML-support in Geoserver security > > > > Hi Anders > > > > There are no plans at the moment. It is a matter of time and funds. I > would estimate the effort between 2 and 4 weeks (including tests,GUI and > documentation). > > > > If you want to contribute I can assist how to create/integrate a GeoServer > security filter. > > > > Cheers > > Christian > > > > On Tue, Nov 3, 2015 at 7:24 PM, Simone Giannecchini < > simone.giannecch...@geo-solutions.it> wrote: > > Ciao Anders, > > I am not aware of any plans for SAML, let's hear the others. > > > > About the effort, you can find help from the commercial support page ( > http://geoserver.org/support/) or you can help yourself > > with the developers quickstart ( > http://docs.geoserver.org/stable/en/developer/quickstart/index.html). You > might get the thinking started and look for "community" help. > > > > No intent to put you down, just trying to give you some basic directions. > > Your question requires some hard thinking, hence I am afraind you won't > get a straight answer saying "X days" :) > > > > > > > Regards, > Simone Giannecchini > == > GeoServer Professional Services from the experts! > Visit http://goo.gl/it488V for more information. > == > Ing. Simone Giannecchini > @simogeo > Founder/Director > > GeoSolutions S.A.S. > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > phone: +39 0584 962313 > fax: +39 0584 1660272 > mob: +39 333 8128928 > > http://www.geo-solutions.it > http://twitter.com/geosolutions_it > > --- > AVVERTENZE AI SENSI DEL D.Lgs. 196/2003 > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > > > On Tue, Nov 3, 2015 at 3:29 PM, Erlandsson Anders < > anders.erlands...@sundsvall.se> wrote: > > Hi > > I wonder if there are any plans on adding support for SAML-protocol when > authenticating users? Or what the effort might be? > > > > Kind regards > > *Anders Erlandsson* > > Sundsvalls kommun > > Sweden > > > > > > > ---
Re: [Geoserver-users] GeoServer w/ CAS Performance
Hi Danny Basic authentication is only a transport protocol for credentials, it does no authentication. A separate security provider (e. g. LDAP, SQL Database,...) is required to perform authentication. CAS does authentication. The performance is dependent on your configuration. The 100ms is the security payload, this is independent of the used authentication mechanism. Cheers Christian On Fri, Oct 23, 2015 at 10:09 PM, Danny Cheng <dch...@mdacorporation.com> wrote: > Hi Christian: > > > > Yes, my configuration without CAS meant no security at all. I would think > basic authentication would be faster? Also, I guess it’s worth mentioning > that our CAS server is on a separate machine apart from where we have > GeoServer installed. Of course, I haven’t actually done the test to verify > this, but that’s my assumption. > > > > Thanks, > > Danny > > > > *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at] > *Sent:* Tuesday, October 20, 2015 2:07 AM > *To:* Danny Cheng > *Cc:* Andrea Aime; geoserver-users@lists.sourceforge.net > > *Subject:* Re: [Geoserver-users] GeoServer w/ CAS Performance > > > > Hi Danny > > > > Is your configuration without CAS a public configuration meaning no > security at all. ? > > Does it make a difference if you use basic auth instead of CAS ? > > > > Normally, the initial request should last longer. > > > > Cheers > > Christian > > > > > > On Mon, Oct 19, 2015 at 8:15 PM, Danny Cheng <dch...@mdacorporation.com> > wrote: > > Hi Christian, > > > > I checked the log and have confirmed that only the initial GeoServer > request is hitting CAS – which is good. Maybe the 100ms difference with CAS > on/off is just an one-off result. > > > > Thanks, > Danny > > > > > > *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at] > *Sent:* Monday, October 19, 2015 7:43 AM > *To:* Andrea Aime > *Cc:* Danny Cheng; geoserver-users@lists.sourceforge.net > *Subject:* Re: [Geoserver-users] GeoServer w/ CAS Performance > > > > Hi Andrea > > > > For stateless authentication we have a cache to avoid the overhead for > each request. > > > > Additionally, you can allow session creation for each filter chain > individually (in this case the cache is not used). > > > > I am waiting for the reply of Danny, maybe there is a bug. > > > > Cheers > > Christian > > > > > > On Mon, Oct 19, 2015 at 9:54 AM, Andrea Aime <andrea.a...@geo-solutions.it> > wrote: > > Christian, > > thinking out loud here, we normally setup OGC services so that they don't > create a session > > because of the many clients hitting the server and the cost of keeping > sessions. > > > > However, for stuff like CAS where an authentication can make us do a > network call, would it be better > > to advise allowing session creation instead? Or do we have other caching > strategies? > > > > This is more of a general question, it may or not related to Danny's > problem > > > > Cheers > > Andrea > > > > > > On Sun, Oct 18, 2015 at 3:18 PM, Christian Mueller < > christian.muel...@os-solutions.at> wrote: > > Hy Danny > > > > Please check the log file of the CAS Server. There you can see the > incoming requests and check if each GeoServer request triggers a CAS > request. > > > > Cheers > > Christian > > > > > > > > On Sun, Oct 18, 2015 at 4:34 AM, Danny Cheng <dch...@mdacorporation.com> > wrote: > > Hi, > > > > I currently have a system with CAS single sign on integrated. I noticed > that with CAS enabled my OGC requests are taking ~100ms longer to get a > response. Is this expected? I would expect that only the initial request > would get a hit, but for me all my requests are taking the hit. > > > > Thanks, > > Danny > > > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > > -- > > DI Christian Mueller MSc (GIS), MSc (IT-Security) > > OSS Open Source Solutions GmbH > > > > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer w/ CAS Performance
Hi Danny Is your configuration without CAS a public configuration meaning no security at all. ? Does it make a difference if you use basic auth instead of CAS ? Normally, the initial request should last longer. Cheers Christian On Mon, Oct 19, 2015 at 8:15 PM, Danny Cheng <dch...@mdacorporation.com> wrote: > Hi Christian, > > > > I checked the log and have confirmed that only the initial GeoServer > request is hitting CAS – which is good. Maybe the 100ms difference with CAS > on/off is just an one-off result. > > > > Thanks, > Danny > > > > > > *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at] > *Sent:* Monday, October 19, 2015 7:43 AM > *To:* Andrea Aime > *Cc:* Danny Cheng; geoserver-users@lists.sourceforge.net > *Subject:* Re: [Geoserver-users] GeoServer w/ CAS Performance > > > > Hi Andrea > > > > For stateless authentication we have a cache to avoid the overhead for > each request. > > > > Additionally, you can allow session creation for each filter chain > individually (in this case the cache is not used). > > > > I am waiting for the reply of Danny, maybe there is a bug. > > > > Cheers > > Christian > > > > > > On Mon, Oct 19, 2015 at 9:54 AM, Andrea Aime <andrea.a...@geo-solutions.it> > wrote: > > Christian, > > thinking out loud here, we normally setup OGC services so that they don't > create a session > > because of the many clients hitting the server and the cost of keeping > sessions. > > > > However, for stuff like CAS where an authentication can make us do a > network call, would it be better > > to advise allowing session creation instead? Or do we have other caching > strategies? > > > > This is more of a general question, it may or not related to Danny's > problem > > > > Cheers > > Andrea > > > > > > On Sun, Oct 18, 2015 at 3:18 PM, Christian Mueller < > christian.muel...@os-solutions.at> wrote: > > Hy Danny > > > > Please check the log file of the CAS Server. There you can see the > incoming requests and check if each GeoServer request triggers a CAS > request. > > > > Cheers > > Christian > > > > > > > > On Sun, Oct 18, 2015 at 4:34 AM, Danny Cheng <dch...@mdacorporation.com> > wrote: > > Hi, > > > > I currently have a system with CAS single sign on integrated. I noticed > that with CAS enabled my OGC requests are taking ~100ms longer to get a > response. Is this expected? I would expect that only the initial request > would get a hit, but for me all my requests are taking the hit. > > > > Thanks, > > Danny > > > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > > -- > > DI Christian Mueller MSc (GIS), MSc (IT-Security) > > OSS Open Source Solutions GmbH > > > > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > > > > -- > > == > > GeoServer Professional Services from the experts! Visit > > http://goo.gl/it488V for more information. > > == > > > > Ing. Andrea Aime > > @geowolf > > Technical Lead > > > > GeoSolutions S.A.S. > > Via Poggio alle Viti 1187 > > 55054 Massarosa (LU) > > Italy > > phone: +39 0584 962313 > > fax: +39 0584 1660272 > > mob: +39 339 8844549 > > > > http://www.geo-solutions.it > > http://twitter.com/geosolutions_it > > > > *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* > > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi d
Re: [Geoserver-users] GeoServer w/ CAS Performance
Hi Andrea For stateless authentication we have a cache to avoid the overhead for each request. Additionally, you can allow session creation for each filter chain individually (in this case the cache is not used). I am waiting for the reply of Danny, maybe there is a bug. Cheers Christian On Mon, Oct 19, 2015 at 9:54 AM, Andrea Aime <andrea.a...@geo-solutions.it> wrote: > Christian, > thinking out loud here, we normally setup OGC services so that they don't > create a session > because of the many clients hitting the server and the cost of keeping > sessions. > > However, for stuff like CAS where an authentication can make us do a > network call, would it be better > to advise allowing session creation instead? Or do we have other caching > strategies? > > This is more of a general question, it may or not related to Danny's > problem > > Cheers > Andrea > > > On Sun, Oct 18, 2015 at 3:18 PM, Christian Mueller < > christian.muel...@os-solutions.at> wrote: > >> Hy Danny >> >> Please check the log file of the CAS Server. There you can see the >> incoming requests and check if each GeoServer request triggers a CAS >> request. >> >> Cheers >> Christian >> >> >> >> On Sun, Oct 18, 2015 at 4:34 AM, Danny Cheng <dch...@mdacorporation.com> >> wrote: >> >>> Hi, >>> >>> >>> >>> I currently have a system with CAS single sign on integrated. I noticed >>> that with CAS enabled my OGC requests are taking ~100ms longer to get a >>> response. Is this expected? I would expect that only the initial request >>> would get a hit, but for me all my requests are taking the hit. >>> >>> >>> >>> Thanks, >>> >>> Danny >>> >>> >>> -- >>> >>> ___ >>> Geoserver-users mailing list >>> Geoserver-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >>> >> >> >> -- >> DI Christian Mueller MSc (GIS), MSc (IT-Security) >> OSS Open Source Solutions GmbH >> >> >> >> -- >> >> ___ >> Geoserver-users mailing list >> Geoserver-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-users >> >> > > > -- > == > GeoServer Professional Services from the experts! Visit > http://goo.gl/it488V for more information. > == > > Ing. Andrea Aime > @geowolf > Technical Lead > > GeoSolutions S.A.S. > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > phone: +39 0584 962313 > fax: +39 0584 1660272 > mob: +39 339 8844549 > > http://www.geo-solutions.it > http://twitter.com/geosolutions_it > > *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* > > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > --- > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer w/ CAS Performance
Hy Danny Please check the log file of the CAS Server. There you can see the incoming requests and check if each GeoServer request triggers a CAS request. Cheers Christian On Sun, Oct 18, 2015 at 4:34 AM, Danny Cheng <dch...@mdacorporation.com> wrote: > Hi, > > > > I currently have a system with CAS single sign on integrated. I noticed > that with CAS enabled my OGC requests are taking ~100ms longer to get a > response. Is this expected? I would expect that only the initial request > would get a hit, but for me all my requests are taking the hit. > > > > Thanks, > > Danny > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Memory leak with BouncyCastleProvider on GeoServer
Hi Veeran GeoServer 2.4.x is out of support. You should migrate to 2.8.x series before I can have a look at your problem. Cheers Christian On Fri, Oct 2, 2015 at 2:21 PM, veeran <nsriniv...@gmail.com> wrote: > Hi All, >we are facing issue in our production servers. GEOServer is running on > tomcat6. It has a memory leak, due to this we need to restart this tomcat > instances everyday. > > I have taken heap dump and analyzed, I can see 90% heap filled with > org.bouncycastle.jce.provider.BouncyCastleProvider class. > > Please see attached s/s. > < > http://osgeo-org.1560.x6.nabble.com/file/n5227581/BoucyCastleMemoryLeak.jpg > > > > I have added the BouncyCastleProvider statistically: Added below line at > the > bottom of the list in java.security > > security.provider.N=org.bouncycastle.jce.provider.BouncyCastleProvider > > Still issue has not fixed. > > Actually we don't want to use this security provider, I am happy disable > it, > but not sure where to disable it > > Please help us to fix this issue. > > Server : Tomcat 6 > GEOServer : 2.4.x > > > > -- > View this message in context: > http://osgeo-org.1560.x6.nabble.com/Memory-leak-with-BouncyCastleProvider-on-GeoServer-tp5227581.html > Sent from the GeoServer - User mailing list archive at Nabble.com. > > > -- > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Group/user/role - how to go on?
Hi Oiva If you use the standard XML services you do not have to think about ADMIN and GROUP_ADMIN. Simply add your role and associate the role with your user group. Then you have to use this role to protect the resources. Do not forget to restart GeoServer after your changes. Cheers Christian On Thu, Oct 1, 2015 at 8:31 AM, Hakala Oiva (Luke) <oiva.hak...@luke.fi> wrote: > Hi > > > No matter how hard I try to read, I do not understand Geoserver's security > system. Especially the role/group is totally ununderstandable for me. > > > The simpe job would be to create a group of basic users and some users > into it. But then the role service is confusing. As I understand, I > should add a role to that user's group, right? But then the only derivative > roles are ADMIN and GROUP_ADMIN, but I don't want such type of roles. Just > basic user role, but there is not such? So, how to go on? Geoserver version > 2.6.4. > > > Oiva Hakala, Natural Resources Institute Finland > > > > -- > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Group/user/role - how to go on?
Hi About the restart. The security subsystem caches the the roles of a user (and the roles derived from group membership) for performance reasons. This holds true for stateless authentication (e. g. Basic Authentication) and for session cookies (interactive login). Otherwise we would pay a high performance penalty for each request. Look at the J2EE architecture, (web.xml as an example). If you change the security settings in the web.xml file you have to restart the container. About the group concept. I think it is not the best idea to assign rules to users directly. IMHO a good practice is to assign roles to user groups and configure group membership for individual users. Again, this is not my concept, it is a J2EE concept. To be fair I have to say that the user documentation is lacking a lot of information and I understand the confusion. Cheers Christian On Thu, Oct 1, 2015 at 9:46 AM, Andrea Aime <andrea.a...@geo-solutions.it> wrote: > On Thu, Oct 1, 2015 at 8:31 AM, Hakala Oiva (Luke) <oiva.hak...@luke.fi> > wrote: > >> The simpe job would be to create a group of basic users and some users >> into it. But then the role service is confusing. As I understand, I >> should add a role to that user's group, right? But then the only derivative >> roles are ADMIN and GROUP_ADMIN, but I don't want such type of roles. Just >> basic user role, but there is not such? So, how to go on? Geoserver version >> 2.6.4. >> > > I normally just create the roles that make sense for the kind of security > I need (e..g, WFS_USER, RESTRICTED_WRITER), associate them > with users, and then work in the authorization subsystem to apply the > access rules based on the roles. > > I too find the group concept overkill and confusing, so I just end up > ignoring them... but probably it's because I did not have to manage > very complicated setup so far (lots of users yes, but relatively few roles) > > Cheers > Andrea > > > -- > == > GeoServer Professional Services from the experts! Visit > http://goo.gl/it488V for more information. > == > > Ing. Andrea Aime > @geowolf > Technical Lead > > GeoSolutions S.A.S. > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > phone: +39 0584 962313 > fax: +39 0584 1660272 > mob: +39 339 8844549 > > http://www.geo-solutions.it > http://twitter.com/geosolutions_it > > *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* > > Le informazioni contenute in questo messaggio di posta elettronica e/o > nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il > loro utilizzo è consentito esclusivamente al destinatario del messaggio, > per le finalità indicate nel messaggio stesso. Qualora riceviate questo > messaggio senza esserne il destinatario, Vi preghiamo cortesemente di > darcene notizia via e-mail e di procedere alla distruzione del messaggio > stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, > divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od > utilizzarlo per finalità diverse, costituisce comportamento contrario ai > principi dettati dal D.Lgs. 196/2003. > > > > The information in this message and/or attachments, is intended solely for > the attention and use of the named addressee(s) and may be confidential or > proprietary in nature or covered by the provisions of privacy act > (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection > Code).Any use not in accord with its purpose, any disclosure, reproduction, > copying, distribution, or either dissemination, either whole or partial, is > strictly forbidden except previous formal approval of the named > addressee(s). If you are not the intended recipient, please contact > immediately the sender by telephone, fax or e-mail and delete the > information in this message that has been received in error. The sender > does not give any warranty or accept liability as the content, accuracy or > completeness of sent messages and accepts no responsibility for changes > made after they were sent or for other risks which arise as a result of > e-mail transmission, viruses, etc. > > --- > > > ------ > > ___ > Geoserver-users mailing list > Geoserver-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geoserver connection
Hi David Please stay on the mailing list, normally I do not answer private questions. Other people may have the same problem or even better, they can give you a hint. Please try to create a new postgis data store using your connection params and test the connection. Cheers Christian On Wed, Jul 1, 2015 at 7:08 PM, David Haynes II dahay...@umn.edu wrote: Hello, We looked into our system and postgresql is properly setup to accept remote connections. I have been able to add vector datasets to geoserver from the existing database. -- Please excuse any typos, sent from a mobile device. -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Copy workspace to other geoserver instance
Hi all I assume the problem is the encrypted postgis password. Each GeoServer instance uses its own keys for encryption. You have to edit the datastore xml file. Lets assume your postgis password is mypassword, edit the following line. entry key=passwdplain:mypassword/entry Restart GeoServer, open the GUI for editing the datastore and press save. Now your password should be encrypted with the proper key. You should see something like this: entry key=passwdcrypt1:I0tBkgH1/YtUojYZXHW7vxZ4e0c2Itxo/entry Thats it. Cheers Christian On Thu, Jul 2, 2015 at 10:03 AM, Ismail, Mark mark.ism...@knowsley.gov.uk wrote: I have a custom GeoServer work directory, when I upgrade a server I copy over the whole folder I.e. workspaces, coverages, styles etc – I then set up my new GeoServer instance to point at it and it’s as if I have cloned GeoServer (except extension and plugins which are stored in the tomcat container) *Mark Ismail* *From:* Paulius Litvinas | InfoEra [mailto:paul...@infoera.lt] *Sent:* 02 July 2015 08:21 *To:* geoserver-users@lists.sourceforge.net *Subject:* [Geoserver-users] Copy workspace to other geoserver instance Hello, Is there a way to copy workspace with it‘s store connection (postgis), layers and groups to other geoserver instance. I tried simply to copy workspace folder from data dir to other geoserver data dir but this didn‘t worked. After restarting geoserver new workspace only apears in list, but data connection and all layers and groups of it are missing. Maybe there is something I must do more? Sincerely, *Paulius Litvinas* GIS consultant [image: line] [image: map] S. Žukausko str. 17, LT-08234 Vilnius, Lithuania [image: telephone] Tel. + 370 5 278 8456 Mob. +370 656 10 089 [image: mail_and_earth] paul...@infoera.lt www.infoera.lt [image: info_era_autodesk] This e-mail and any attachments are confidential. It may contain privileged information and is intended for the named recipient(s) only. It must not be distributed without consent. If you are not one of the intended recipients, please notify the sender immediately and do not disclose, distribute, or retain this email or any part of it and do not take any action based on it. Unless expressly stated, opinions in this email are those of the individual sender, and not of Knowsley MBC. Legally binding obligations can only be created for, or be entered into on behalf of, Knowsley MBC by duly authorised officers or representatives. Knowsley MBC excludes any liability whatsoever for any offence caused, any direct or consequential loss arising from the use, or reliance on, this e-mail or its contents. We believe but do not warrant that this e-mail and any attachments are virus free. You must therefore take full responsibility for virus checking and no responsibility is accepted for loss or damage arising from viruses or changes made to this message after it was sent. Knowsley MBC reserves the right to monitor and/or record all e-mail communications through its network in accordance with relevant legislation. -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Could not list layers for this store (JDBC Image Mosaic)
HI David Looks like a connection problem. Did you configure PostGres for remote access ? http://www.cyberciti.biz/tips/postgres-allow-remote-access-tcp-connection.html Cheers Christian On Tue, Jun 30, 2015 at 4:22 PM, David Haynes II dahay...@umn.edu wrote: Here is the error log. Hope that helps. On Tue, Jun 30, 2015 at 8:33 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi David Do you see a stack trace in the GeoServer log file. Cheers Christian On Tue, Jun 30, 2015 at 3:24 PM, David Haynes II dahay...@umn.edu wrote: Hello, I am trying to build an app that utilizes raster files that I have ingested into my PostgreSQL/PostGIS database. The error occurs when trying to make the PostGIS raster data store. The error on the web interface says Could not list layers for this store, an error occurred retrieving them: Failed to create reader from file:glc.postgis.xml and hints null. However the geoserver log reports a connection error. 2015-06-29 09:02:30,681 WARN [data.jdbc] - Could not acquire A BDCP connection pool.:org.geotools.data.DataSourceException: Connection pool improperly set up: Cannot create PoolableConnectionFactory (Connection refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections.) What is wrong? I know that I have the connection xml defined properly. I am following the following documentation. http://docs.geoserver.org/2.5.x/en/user/tutorials/imagemosaic-jdbc/imagemosaic-jdbc_tutorial.html connect dstype value=DBCP/ username value=user/ password value=##/ jdbcUrl value=jdbc:postgresql://host:port/database/ driverClassName value=org.postgresql.Driver/ maxActive value=10/ maxIdle value=0/ /connect -- David Haynes, Ph.D. Research Associate Terra Populus Minnesota Population Center www.terrapop.org -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- David Haynes, Ph.D. Research Associate Terra Populus Minnesota Population Center www.terrapop.org -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Could not list layers for this store (JDBC Image Mosaic)
Hi David Do you see a stack trace in the GeoServer log file. Cheers Christian On Tue, Jun 30, 2015 at 3:24 PM, David Haynes II dahay...@umn.edu wrote: Hello, I am trying to build an app that utilizes raster files that I have ingested into my PostgreSQL/PostGIS database. The error occurs when trying to make the PostGIS raster data store. The error on the web interface says Could not list layers for this store, an error occurred retrieving them: Failed to create reader from file:glc.postgis.xml and hints null. However the geoserver log reports a connection error. 2015-06-29 09:02:30,681 WARN [data.jdbc] - Could not acquire A BDCP connection pool.:org.geotools.data.DataSourceException: Connection pool improperly set up: Cannot create PoolableConnectionFactory (Connection refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections.) What is wrong? I know that I have the connection xml defined properly. I am following the following documentation. http://docs.geoserver.org/2.5.x/en/user/tutorials/imagemosaic-jdbc/imagemosaic-jdbc_tutorial.html connect dstype value=DBCP/ username value=user/ password value=##/ jdbcUrl value=jdbc:postgresql://host:port/database/ driverClassName value=org.postgresql.Driver/ maxActive value=10/ maxIdle value=0/ /connect -- David Haynes, Ph.D. Research Associate Terra Populus Minnesota Population Center www.terrapop.org -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Disable client-side SLDs
Ups, forgot about the sld URL Parameter. Mauro started a thread on the mailing list concerning url parameters and filter chains. http://sourceforge.net/p/geoserver/mailman/message/34204840/ Maybe this could be a solution, but the proposed general solution sounds better. Cheers Christian On Mon, Jun 15, 2015 at 11:16 AM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Mon, Jun 15, 2015 at 11:13 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi Edward AFAIK client side SLD uses a HTTP POST Request. I think it is possible to add a specific security filter chain and disable the POST request. You can also pass a sld=http://url/to/your/sld; in a GET request, and stand up a HTTP server that will give GeoServer the SLD you desired. Has been used quite a bit by people standing up a front/side application that does statistics over data to create dynamic thematic maps. Cheers Andrea -- == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. --- -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Problems security module?
Hi Pablo Can you reproduce this scenario ?. GeoSever has a cache for stateless authentication, but after a restart of GeoServer the new password should work. Cheers Christian On Tue, Jun 9, 2015 at 6:47 PM, pablo zader pza...@gmail.com wrote: Hi list Strange behavior: 1 - Create a user (UserAdmin) with Administrator role. 2 - use this user to work with the curl command 3 - after a time I change the user password assigned UserAdmin, through the graphical interface of geoserver 4 - continue using the curl command with the new key 5 - reboot the server (linux) 6 - stopped working the curl command because the user UserAdmin but did not recognize the new key, then try entering the old password and to my surprise, it worked! that is, the key change not impact the geoserver. 7 - turned to restart linux, try again with the new password and now if it worked. Apparently, the key change no impact at first, but after two restarts, yes! I am using: geoserver 2.5.2 Apache Tomcat / 7.0.53 Ubuntu Linux 12.04LTS This is my script to start and stop tomcat: #! /bin/sh ### BEGIN INIT INFO # Provides: tomcat-apache # Required-Start: $remote_fs $syslog # Required-Stop: $remote_fs $syslog # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Start tomcat apache ### END INIT INFO case $1 in start) echo Starting Tomcat7... export GEOSERVER_DATA_DIR=/usr/local/geoserver_data /usr/local/tomcat7/bin/startup.sh ;; stop) echo Stopping Tomcat7... /usr/local/tomcat7/bin/shutdown.sh ;; esac exit 0 Thanks in advanced Pablo -- *Pablo J. Zader* *Lic. en Cs. de la Computación* *pablo.za...@gmail.com pablo.za...@gmail.com* *Los Grandes Hombres hablan sobre ideas... Los Hombres Promedio hablan sobre cosas... Los Hombres Pequeños hablan.. de otros Hombres.* *del libro Matemática estas ahi? A. Paenza * -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Username logging in request logs
Hi @Andrea, I am quite sure that qgis is using Basic Authentication. There is an open issue about the problem with the username, look here https://osgeo-org.atlassian.net/browse/GEOS-6144 Not sure if we should try to apply the quick fix or to invest some time. As an example, we would have to check if the code snippet works for CAS authentication. Cheers Christian On Thu, May 21, 2015 at 9:33 PM, Andrea Aime andrea.a...@geo-solutions.it wrote: Is the qgis client authenticating with username and password? Cheers Andrea Il 21/mag/2015 21:04, Jussila Ville ville.juss...@hel.fi ha scritto: Hi Andrea, Thanks for your reply. I installed monitoring extension and configured it in audit mode. I’m able of getting all the information except RemoteUser. I get the RemoteUserAgent, but not the User. Is this RemoteUser login possible with client like Qgis etc? Cheers Ville *Lähettäjä:* andrea.a...@gmail.com [mailto:andrea.a...@gmail.com] *Puolesta *Andrea Aime *Lähetetty:* 21. toukokuuta 2015 16:27 *Vastaanottaja:* Jussila Ville *Kopio:* geoserver-users@lists.sourceforge.net *Aihe:* Re: [Geoserver-users] Username logging in request logs On Thu, May 21, 2015 at 7:38 AM, Jussila Ville ville.juss...@hel.fi wrote: Hi list, I have tried to find a thread for this problem without any success. We're using Geoserver 2.7 with Jetty and we have one whole workspace behind username and password. At Security we have created a role and gave this role to one particular username. This user has now only read access to this workspace. How this username can be written in request logs? In these log files we get user ip, GET request, packet size and client id etc. What I need to do to solve my problem? You need to install the monitoring extension, and configure it it audit mode, the request details should contain the user that made the request in the RemoteUser field: http://docs.geoserver.org/stable/en/user/extensions/monitoring/audit.html Cheers Andrea -- == Meet us at the INSPIRE Conference in Lisbon 25-29 May 2015! Visit http://goo.gl/WHKDXT for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. --- -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- One dashboard
Re: [Geoserver-users] Username logging in request logs
Hi Andrea Every authentication mechanism is affected. The code snippet in the issue not a fix, this is a hack and there is no guarantee that this hack is working for all authentication protocols. Technical solution: Each authentication mechanism is based on an GeoServerSecurityProvider object. My idea is to have a reference from the authentication object to the provider. The provider should have a method extractPrincipal returning a string. This not easy since we use third party libraries from Spring and CAS. About privacy protection: Many countries/enterprises/institutions do not allow grabbing statistical data for specific users. For my biggest customer I solved the problem by storing MD5 checksums of the username into PIWIK. As a consequence we need a method extractPrincipalAsMD5 (or another algorithm) which gives the possibility to collect and analyze anonymous statistical data. The checksum of the user name should be the default and there is a need to integrate this concept into the monitoring extension (including the GUI). I hope Justin will give some input. Thanks for feedback. Christian On Fri, May 22, 2015 at 10:43 AM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Fri, May 22, 2015 at 10:35 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi @Andrea, I am quite sure that qgis is using Basic Authentication. There is an open issue about the problem with the username, look here https://osgeo-org.atlassian.net/browse/GEOS-6144 Not sure if we should try to apply the quick fix or to invest some time. As an example, we would have to check if the code snippet works for CAS authentication. Fixing issues is always welcomed. That said, is basic authentication affected by the above issue? Cheers Andrea -- == Meet us at the INSPIRE Conference in Lisbon 25-29 May 2015! Visit http://goo.gl/WHKDXT for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. --- -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] DATA_DIR migration from 2.3.1 to 2.7. EncryptingUrlParams error.
Hi Jonatas I think you switched from the limited to the unlimited policy files. As a consequence, Geoserver tries to use better algorithms but your key store still contains the limited keys. Try the following 1) stop GeoServer 2) make a backup of GEOSERVER_DATA_DIR/security/geoserver.jceks 3) remove GEOSERVER_DATA_DIR/security/geoserver.jceks 4) restart GeoServer The geoserver.jceks should be recreated. Reenter the password(s) for your data store(s) and save them. Hope this helps Cheers Christian On Tue, May 12, 2015 at 9:53 PM, Jônatas Castro jonatascastr...@gmail.com wrote: Hello, I'm migrating Geoserver from 2.3.1 to 2.7. I created a Tomcat instance with Geoserver 2.7 and I'm pointing the new Geoserver to a copy of the old DATA_DIR. I'm using TOMCAT 7.0.5 and JDK 1.7. I've installed the compatible unlimited policy JAR files. When I try GeoServer I got the folowing 500 error. *exceptionorg.springframework.web.util.NestedServletException: Request processing failed; nested exception is java.lang.IllegalArgumentException: setAttribute: Non-serializable attribute __ICRYPT* *...* I discovered that if I disable *encryptingUrlParams* on *DATA_DIR/security/config.xml*, the error stops. Also, the stores aren't recognized by GeoServer, but when I remove crypt2: of the password at *datastore.xml*, the stores appears. I know the problem is related to encryption method, but I don't know what to do. -- JÔNATAS CASTRO +55 (21) 99109-7575 -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Geoserver Configuration Eclipse
Hi Please stay on the mailing list, normally I do not answer private questions. Look here http://docs.geoserver.org/latest/en/developer/eclipse-guide/ Cheers Christian On Sat, May 9, 2015 at 2:01 AM, ELKHATTABI Imane imanek...@gmail.com wrote: Hello Christian, I came across your coments on the Geoserver mailing list . First of all, excuse me for contacting you directly on this mail, but I really hope you don't mind me asking. I'm new to Geoserver and Eclipse. I managed to deploy Geoserver on tomcat apache, then visualise my data. Now I'd like to know how to configure Geoserver and Eclipse with tomcat (under host 8080). Hope I'm not asking too much. But just want to run the project direcly from Eclipse. Any hint or help would be highly apreciated. Kind regards. ᐧ -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] WG: ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi Andre No need for imagemosaic jdbc If you serve your image data from one big geotiff. Geoserver can handle geotiff files directly. Cheers Christian On Fri, May 8, 2015 at 9:33 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, i have tested it, but i am not able to insert this one big geotiff (300 GB) in my database because of out of memory error. *Therefore I need support using image mosaic jdbc without importing the raster file only using the path to the image file(s) storing in database.* *How to do? Because **Paul Ramsey said that I will be an advantage storing the image files not in database only using image path.* Here are my geoserver configurations: (0) Dataset: source was 165 GB sum with 592 different geotiff á 10.000 x 10.000 pixels. (1) using gdal_retile with different configurations: everytime COMPRESS=JPEG without shape creation and I create 8 different pyramid layers (0 original data up to 8 overview image). Processing gdal_retile with 4 different parameters: A) 500x500 pixel, B) 1000x1000 pixels, C) 2000x2000 pixels, D) 5000x5000 pixels (2) After that I import the 4 different datasets A-D in postgresql 9.3.5/postgis (64 Bit) using raster2pgsql (3) I have 2 different geoservers in use: A) Windows Server 2008 32 Bit 4 GB RAM, JAVA 7 32 Bit, GeoServer 2.8 with native JAI/ImageIO and 1 GB java heap space B) Windows Server 2012 64 BIT 32 GB RAM, JAVA 7 64 Bit, GeoServer 2.8 without JAI/ImageIO and 16 GB java heap space (4) Using in both geoserver image mosaic jdbc and the WMS has no cache for testing I have defined 40 different requests for the WMS with different scale factors (1 x 1:250.000, 4 x 1:100.000, and 5 x for each 1:50k, 1:25k, 1:10k, 1:5k, 1:2.5k, 1:1k, 1:0.5k). The image data type is JPEG. Width/Height is 1.534/776 pixels for request. Every of the 40 requests a had processed with the 32 and 64 bit geoserver and for each image size (500x500, 1000x1000, 2000x2000, 5000x5000) Number of Images in database of level 0 (highest resolution): 500x500: 224.944 1000x1000: 56.420 2000x2000: 14.185 5000x5000: 2.309 Here are a sum of my results of yesterday: Note that I have 40 measures for the mean calculations. 32 Bit 64 Bit Size Mean Min Max Mean Min Max 500x500 744 ms 328 ms 1797 ms 598 ms 375 ms 1188 ms 1000x1000 907 ms 344 ms 1469 ms 779 ms 437 ms 1125 ms 2000x2000 1501 ms 656 ms 2734 ms 1354 ms 485 ms 2765 ms 5000x5000 5053 ms 469 ms 12919 ms 4118 ms 453 ms 13185 ms Now I wait for some tipps using image paths for image mosaic jdbc without raster import in database. Then I will analyse the performance advantages or disadvantages and will publish my full results after I am finished. Today it is very interesting for me that 225.000 images in database using 500x500 pixel size are faster then 1000x1000 pixel size with only 56.000 images. And you can see that a small configurated geoserver in 32 bit using native JAI/ImageIO is only a bit slower then the 64 bit example I had tested. Now I will find out whether the mean of 598 ms (64 Bit, 500x500 pixel size) could be faster if only store the meta data of the images and not the image in database. Then will look to the libjpeg turbo plugin because this could be accelerate the geoserver requests too. Best regards, André *Von:* Christian Mueller [mailto:christian.muel...@os-solutions.at] *Gesendet:* Montag, 4. Mai 2015 10:59 *An:* Mende, Andre *Cc:* geoserver-users@lists.sourceforge.net *Betreff:* Re: [Geoserver-users] WG: ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information Hi Andre Some hints: To create one big image: gdal_merge.py -co COMPRESS=LZW -co BIGTIFF=YES -co TILED=YES -pct -o mytiff.tiff --optfile listofimages where mytiff.tiff is the result and listofimages is a text file containing the name of all your 800 images. (each file name in a separate line). Then you can add overviews with http://www.gdal.org/gdaladdo.html gdaladdo mytiff.tiff 2 4 8 16 32 64 would add 6 overviews to mytiff. Cheers Christian On Mon, May 4, 2015 at 10:25 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, ah ok. My original data is GeoTIFF 800 images á 10.000 x 10.000 pixels RGB with 300 MB of each image. If I try to create one big GeoTIFF using gdal_retile I got a memory exception… ;) if you have some linux scripts I like to look inside the scripts and hope that I can find some code snips which helps me to configure my geoserver in the right point of view. Thanks. André *Von:* Christian Mueller [mailto:christian.muel...@os-solutions.at] *Gesendet:* Donnerstag, 30. April 2015 17:40 *An:* Mende, Andre *Cc:* geoserver-users@lists.sourceforge.net *Betreff:* Re: [Geoserver-users] WG: ImageMosaicJDBC
Re: [Geoserver-users] WG: ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi Andre Some hints: To create one big image: gdal_merge.py -co COMPRESS=LZW -co BIGTIFF=YES -co TILED=YES -pct -o mytiff.tiff --optfile listofimages where mytiff.tiff is the result and listofimages is a text file containing the name of all your 800 images. (each file name in a separate line). Then you can add overviews with http://www.gdal.org/gdaladdo.html gdaladdo mytiff.tiff 2 4 8 16 32 64 would add 6 overviews to mytiff. Cheers Christian On Mon, May 4, 2015 at 10:25 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, ah ok. My original data is GeoTIFF 800 images á 10.000 x 10.000 pixels RGB with 300 MB of each image. If I try to create one big GeoTIFF using gdal_retile I got a memory exception… ;) if you have some linux scripts I like to look inside the scripts and hope that I can find some code snips which helps me to configure my geoserver in the right point of view. Thanks. André *Von:* Christian Mueller [mailto:christian.muel...@os-solutions.at] *Gesendet:* Donnerstag, 30. April 2015 17:40 *An:* Mende, Andre *Cc:* geoserver-users@lists.sourceforge.net *Betreff:* Re: [Geoserver-users] WG: ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information Hi Andre I meant one big GeoTIFF (no use of gdal_retile) with internal compression, tiles , overviews and the CRS. This setup works pretty well for my customers. At the end of the day, you have only one geotiff file and GeoServer works very good with a geotiff file (my experience). Maybe I can send you some Linux scripts I am using. What format is your original data ? Cheers Christian On Wed, Apr 29, 2015 at 9:49 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian again, Your question was: Did you consider to create one big geotiff file with inner tiling and overviews ? I addition to my last post I will ask you something about big GeoTIFF with inner tilling and overviews. Do you mean that I have to create for every tile of my gdal_retile result a inner tilling and overview or should I make one big GeoTIFF (165 GB, maybe 20 GB if I reduce with JPEG-compression) without using gdal_retile? Thanks. André Hi Christian and Andrea, thank you both for your response. I had used gdal_retile with different pixelsizes 1000x1000, 2000x2000, 5000x5000. I am interested in the best configuration as a balance between number of rows in database for each pyramidal step and the size of the real image. @ Andrea: Do you have this paper of Paul Ramsey or a link with the full results? @ Christian: Is it faster if I use the raster-column in a function like st_envelope to get the bounds or maybe we should use a extra column with the geometry bounds because a raster is a fixed information without dynamic change of the borders? In my opinion I think it is faster to ask the database whether a point is inside a bounding box (geometry column) instead of using a full raster and calculate the borders every time… Another point: Is there a opportunity only use Image Links in database using ImageMosaicJDBC? (please look at the answer of Andrea last mail) Now I compress my source images using gdal_retile including compression attribute because i will find the right balance between resolution and image size. If the process is ready I will tell you some result information. In addition I will test a 32 bit server with JAI and a 64 bit server without JAI which is faster or what´s the differences. Thanks. André *Von:* Christian Mueller [mailto:christian.muel...@os-solutions.at christian.muel...@os-solutions.at] *Gesendet:* Dienstag, 28. April 2015 11:43 *An:* Andrea Aime *Cc:* Mende, Andre; geoserver-users@lists.sourceforge.net *Betreff:* Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information Hi Andre Did you consider to create one big geotiff file with inner tiling and overviews ? I think this is the simplest way to support image data. And here is the Swiss army knife you may need http://www.gdal.org/ Cheers Christian On Mon, Apr 27, 2015 at 4:45 PM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Mon, Apr 27, 2015 at 4:24 PM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, yes there are write priveleges… but i will look at this again and tell you the answer. Now some additional ideas/questions would like to discuss. A GeoServer-user will use this software with high speed and a useful configuration. Therefore it is very important to know whether a 32 bit geoserver using the jai is faster then a 64 bit geoserver without using jai. The difference in performance between native and non native jai is probably not very relevant given you setup a poorly performing environment to start with: * GeoServer on Windows
Re: [Geoserver-users] WG: ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi Andre I meant one big GeoTIFF (no use of gdal_retile) with internal compression, tiles , overviews and the CRS. This setup works pretty well for my customers. At the end of the day, you have only one geotiff file and GeoServer works very good with a geotiff file (my experience). Maybe I can send you some Linux scripts I am using. What format is your original data ? Cheers Christian On Wed, Apr 29, 2015 at 9:49 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian again, Your question was: Did you consider to create one big geotiff file with inner tiling and overviews ? I addition to my last post I will ask you something about big GeoTIFF with inner tilling and overviews. Do you mean that I have to create for every tile of my gdal_retile result a inner tilling and overview or should I make one big GeoTIFF (165 GB, maybe 20 GB if I reduce with JPEG-compression) without using gdal_retile? Thanks. André Hi Christian and Andrea, thank you both for your response. I had used gdal_retile with different pixelsizes 1000x1000, 2000x2000, 5000x5000. I am interested in the best configuration as a balance between number of rows in database for each pyramidal step and the size of the real image. @ Andrea: Do you have this paper of Paul Ramsey or a link with the full results? @ Christian: Is it faster if I use the raster-column in a function like st_envelope to get the bounds or maybe we should use a extra column with the geometry bounds because a raster is a fixed information without dynamic change of the borders? In my opinion I think it is faster to ask the database whether a point is inside a bounding box (geometry column) instead of using a full raster and calculate the borders every time… Another point: Is there a opportunity only use Image Links in database using ImageMosaicJDBC? (please look at the answer of Andrea last mail) Now I compress my source images using gdal_retile including compression attribute because i will find the right balance between resolution and image size. If the process is ready I will tell you some result information. In addition I will test a 32 bit server with JAI and a 64 bit server without JAI which is faster or what´s the differences. Thanks. André *Von:* Christian Mueller [mailto:christian.muel...@os-solutions.at christian.muel...@os-solutions.at] *Gesendet:* Dienstag, 28. April 2015 11:43 *An:* Andrea Aime *Cc:* Mende, Andre; geoserver-users@lists.sourceforge.net *Betreff:* Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information Hi Andre Did you consider to create one big geotiff file with inner tiling and overviews ? I think this is the simplest way to support image data. And here is the Swiss army knife you may need http://www.gdal.org/ Cheers Christian On Mon, Apr 27, 2015 at 4:45 PM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Mon, Apr 27, 2015 at 4:24 PM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, yes there are write priveleges… but i will look at this again and tell you the answer. Now some additional ideas/questions would like to discuss. A GeoServer-user will use this software with high speed and a useful configuration. Therefore it is very important to know whether a 32 bit geoserver using the jai is faster then a 64 bit geoserver without using jai. The difference in performance between native and non native jai is probably not very relevant given you setup a poorly performing environment to start with: * GeoServer on Windows server is a good 30% slower than on Linux, on the same hardware (and other GIS software is too, not specific to GeoServer) * Keeping raster in PostGIS is slower than keeping it on the file system (Paul Ramsey reiterated that at FOSS4G-NA a few months ago, keep rasters in the database only to perform spatial analys, not to serve them on the web) * Postgis raster does not have native overviews (they are going to be added in the next version), although the imagemosaicjdbc can probably help here, since it can work as a image pyramid plugin too Cheers Andrea -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate
Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi Andre Did you consider to create one big geotiff file with inner tiling and overviews ? I think this is the simplest way to support image data. And here is the Swiss army knife you may need http://www.gdal.org/ Cheers Christian On Mon, Apr 27, 2015 at 4:45 PM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Mon, Apr 27, 2015 at 4:24 PM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, yes there are write priveleges… but i will look at this again and tell you the answer. Now some additional ideas/questions would like to discuss. A GeoServer-user will use this software with high speed and a useful configuration. Therefore it is very important to know whether a 32 bit geoserver using the jai is faster then a 64 bit geoserver without using jai. The difference in performance between native and non native jai is probably not very relevant given you setup a poorly performing environment to start with: * GeoServer on Windows server is a good 30% slower than on Linux, on the same hardware (and other GIS software is too, not specific to GeoServer) * Keeping raster in PostGIS is slower than keeping it on the file system (Paul Ramsey reiterated that at FOSS4G-NA a few months ago, keep rasters in the database only to perform spatial analys, not to serve them on the web) * Postgis raster does not have native overviews (they are going to be added in the next version), although the imagemosaicjdbc can probably help here, since it can work as a image pyramid plugin too Cheers Andrea -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. --- -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi Andre Has your tomcat user write privileges in C:\Program Files\Apache Software Foundation\Tomcat 8.0 Tomcat\temp ?. add 1) The ImageMosaicJDBC is not aware of the JAI native library. If the library is installed correctly it will be used. add 2) I never used the native library because I am deploying on IBM P Series (Linux) add 3) The raster column has the needed functionality, no reason for an extra geom-column Cheers Christian On Mon, Apr 27, 2015 at 10:15 AM, Mende, Andre andre.me...@landkreis-zwickau.de wrote: Hi Christian, ok i see that i don´t use the right format raster. Now I have imported my raster files like the tutorial. *But my geoserver fails showing the information in a wms, because of this error:* 2015-04-27 10:05:40,962 ERROR [imagemosaic.jdbc] - Decorde error for tile 2015-04-27 10:05:40,962 ERROR [imagemosaic.jdbc] - Can't create cache file! javax.imageio.IIOException: Can't create cache file! at javax.imageio.ImageIO.createImageInputStream(Unknown Source) at javax.imageio.ImageIO.read(Unknown Source) at org.geotools.gce.imagemosaic.jdbc.ImageDecoderThread.run(ImageDecoderThread.java:113) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: java.nio.file.NoSuchFileException: C:\Program Files\Apache Software Foundation\Tomcat 8.0 Tomcat\temp\imageio8971403393129682788.tmp at sun.nio.fs.WindowsException.translateToIOException(Unknown Source) at sun.nio.fs.WindowsException.rethrowAsIOException(Unknown Source) at sun.nio.fs.WindowsException.rethrowAsIOException(Unknown Source) at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(Unknown Source) at java.nio.file.Files.newByteChannel(Unknown Source) at java.nio.file.Files.createFile(Unknown Source) at java.nio.file.TempFileHelper.create(Unknown Source) at java.nio.file.TempFileHelper.createTempFile(Unknown Source) at java.nio.file.Files.createTempFile(Unknown Source) at javax.imageio.stream.FileCacheImageInputStream.init(Unknown Source) at com.sun.imageio.spi.InputStreamImageInputStreamSpi.createInputStreamInstance(Unknown Source) What can be the reason for this? Here are two additional questions for better understanding: 1) Use ImageMosaicJDBC the JAI native library if it is available? 2) What is better: Using native JAI and 32 Bit Java with only 1 GB of RAM or Using no native JAI (because it doesn´t exist for 64 Bit) and 64 Bit Java an 32 GB RAM? 3) Using raster2pgsql there isn´t any geom-column with the spatial attribute only the rast-column for raster information. Should I add the geometry-colum to get a better performance or isn´t it necessary? Thanks a lot! Best regards, André Mende *Von:* geoserver-users-boun...@lists.sourceforge.net [mailto: geoserver-users-boun...@lists.sourceforge.net] *Im Auftrag von *Christian Mueller *Gesendet:* Donnerstag, 23. April 2015 13:41 *An:* Mauro Bartolomeoli *Cc:* GeoServer Mailing List List; Mende, Andre *Betreff:* Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information Hi all I am the module maintainer. Did you try to use the PostGis raster extension. http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html Cheers Chrilstian On Thu, Apr 23, 2015 at 11:35 AM, Mauro Bartolomeoli mauro.bartolome...@geo-solutions.it wrote: Hi Andre, 2015-04-23 11:21 GMT+02:00 Mende, Andre andre.me...@landkreis-zwickau.de : Hi Mauro, thanks for your explanation. I don´t know where to find the right JIRA bug forum? Do you have an URL for me? You should be able to go here: https://osgeo-org.atlassian.net/projects/GEOT From there, click the Log in button, then Create an account. Do you think there is an opportunity to contact the programmer of this plugin? I don't know who is the mantainer of the imagemosaic-jdbc, if he reads the mailing list, he will probably chime in (for this reason I moved the discussion to the mailing list again, please don't use private messages for this). Because I need this function for my gis-infrastructre and mybe I can add some code sniped for faster implementation? If you can fix the bug yourself and submit a pull request on GitHub, it will be included quickly in the code, I think. Regards, Mauro -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Dott. Mauro Bartolomeoli @mauro_bart Senior Software Engineer GeoSolutions S.A.S. Via
Re: [Geoserver-users] ImageMosaicJDBC problem: geoserver stop waiting before postgres send the raster information
Hi all I am the module maintainer. Did you try to use the PostGis raster extension. http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html Cheers Chrilstian On Thu, Apr 23, 2015 at 11:35 AM, Mauro Bartolomeoli mauro.bartolome...@geo-solutions.it wrote: Hi Andre, 2015-04-23 11:21 GMT+02:00 Mende, Andre andre.me...@landkreis-zwickau.de : Hi Mauro, thanks for your explanation. I don´t know where to find the right JIRA bug forum? Do you have an URL for me? You should be able to go here: https://osgeo-org.atlassian.net/projects/GEOT From there, click the Log in button, then Create an account. Do you think there is an opportunity to contact the programmer of this plugin? I don't know who is the mantainer of the imagemosaic-jdbc, if he reads the mailing list, he will probably chime in (for this reason I moved the discussion to the mailing list again, please don't use private messages for this). Because I need this function for my gis-infrastructre and mybe I can add some code sniped for faster implementation? If you can fix the bug yourself and submit a pull request on GitHub, it will be included quickly in the code, I think. Regards, Mauro -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Dott. Mauro Bartolomeoli @mauro_bart Senior Software Engineer GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 http://www.geo-solutions.it http://twitter.com/geosolutions_it --- *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] gt-imagemosaic-jdbc-12.2.jar import creates wrong structure ?
Hi Ahmet The output of gdalinfo looks ok. Cheers Christian On Mon, Apr 20, 2015 at 7:22 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: thank you here is the excerpt from PostGIS Cookbook: ~ $ raster2pgsql -I -C -F -t 100x100 -s 4326 worldclim/tmax01.bil chp01. tmax01 tmax01.sql If you decide to include the -t option, then you will cut the original raster in tiles, each inserted as a single row in the raster table. In this case, you decided to cut the raster in 100x100 tiles, resulting in 198 table rows in the raster table. pg. 45 ~~ what do you say about my gdalinfo output? regards On Mon, Apr 20, 2015 at 4:53 PM, Christian Mueller christian.muel...@os-solutions.at wrote: If raster2pgsql creates tiles (and overviews) itself, you can omit gdal_retile. AFAIK, this was not possible at the time I wrote the documentation. Cheers Christian On Mon, Apr 20, 2015 at 3:39 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: thank you and sorry taking up your time untiled whole image can be loaded to postgis with raster2pgsql normally. but when I tiled same image with: gdal_retile.py -levels 3 -ps 256 256 -tileIndex index.shp -targetDir test2 dem2_4326.tif gdalinfo looks like : orkun@orkun-HP-EliteBook-8470p:/usr/local/dem22/test2$ gdalinfo dem2_4326_06_14.tif Driver: GTiff/GeoTIFF Files: dem2_4326_06_14.tif dem2_4326_06_14.tfw dem2_4326_06_14.tif.aux.xml Size is 150, 101 Coordinate System is: GEOGCS[WGS 84, DATUM[WGS_1984, SPHEROID[WGS 84,6378137,298.257223563, AUTHORITY[EPSG,7030]], AUTHORITY[EPSG,6326]], PRIMEM[Greenwich,0], UNIT[degree,0.0174532925199433], AUTHORITY[EPSG,4326]] Origin = (29.526600914328423,40.467521186796759) Pixel Size = (0.000225018604065,-0.000225018604065) Metadata: AREA_OR_POINT=Area Image Structure Metadata: INTERLEAVE=BAND Corner Coordinates: Upper Left ( 29.5266009, 40.4675212) ( 29d31'35.76E, 40d28' 3.08N) Lower Left ( 29.5266009, 40.4447943) ( 29d31'35.76E, 40d26'41.26N) Upper Right ( 29.5603537, 40.4675212) ( 29d33'37.27E, 40d28' 3.08N) Lower Right ( 29.5603537, 40.4447943) ( 29d33'37.27E, 40d26'41.26N) Center ( 29.5434773, 40.4561577) ( 29d32'36.52E, 40d27'22.17N) Band 1 Block=150x27 Type=Int16, ColorInterp=Gray Min=0.000 Max=0.000 Minimum=0.000, Maximum=0.000, Mean=0.000, StdDev=0.000 Metadata: STATISTICS_MAXIMUM=0 STATISTICS_MEAN=0 STATISTICS_MINIMUM=0 STATISTICS_STDDEV=0 --- One more question raster2pgsql creates tiles so why do we need gdal_retile as extra work ? regards On Mon, Apr 20, 2015 at 4:20 PM, Christian Mueller christian.muel...@os-solutions.at wrote: Check your tile with gdalinfo /test3/dem2_4326_06_14.tif Additionally try to import only the problematic tiff. Cheers Christian On Mon, Apr 20, 2015 at 2:57 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: (Thank you Christian ,) when I tried raster2pgsql on tiles created previously with gdal_retile.py, I got this error message Processing 84/84: ./test3/dem2_4326_06_14.tif ERROR: diff_rastinfo: Could not run raster alignment test Do you have any idea ? regards On Mon, Apr 20, 2015 at 11:43 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Yep, here is the manual http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html Cheers Christian On Mon, Apr 20, 2015 at 10:35 AM, Ahmet Temiz ahmettemi...@gmail.com wrote: thank you Christian, So, Is this way correct ? after generating tiles with gdal_retile.py, using these tiles, creating raster table with : raster2pgsql -s 4236 -I -C -M *.tif regards On Mon, Apr 20, 2015 at 10:31 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi Ahmet For populating postgis raster you have to use the postgis import tool. Look here http://postgis.net/docs/using_raster_dataman.html Cheers On Sun, Apr 19, 2015 at 6:35 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: hello I am trying to populate postgis raster table with gt-imagemosaic-jdbc-12.2.jar import I got this structure in postgis : --- tr2= \d spatialtable_0 Table public.spatialtable_0 Column |Type | Modifiers --+-+--- location | character(64) | not null geom | geometry(MultiPolygon,4326) | Indexes: spatialtable_0_pk PRIMARY KEY, btree (location) ix_spatialtable_0 gist (geom) tr2= \d tiletable_0 Table public.tiletable_0 Column | Type | Modifiers --+---+--- location | character(64) | not null data | bytea | Indexes: tiletable_0_pk PRIMARY KEY, btree (location) --- I am not sure if it is correct structure ? What am I doing wrong ? regards -- Ahmet Temiz Jeoloji Müh
Re: [Geoserver-users] gt-imagemosaic-jdbc-12.2.jar import creates wrong structure ?
Check your tile with gdalinfo /test3/dem2_4326_06_14.tif Additionally try to import only the problematic tiff. Cheers Christian On Mon, Apr 20, 2015 at 2:57 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: (Thank you Christian ,) when I tried raster2pgsql on tiles created previously with gdal_retile.py, I got this error message Processing 84/84: ./test3/dem2_4326_06_14.tif ERROR: diff_rastinfo: Could not run raster alignment test Do you have any idea ? regards On Mon, Apr 20, 2015 at 11:43 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Yep, here is the manual http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html Cheers Christian On Mon, Apr 20, 2015 at 10:35 AM, Ahmet Temiz ahmettemi...@gmail.com wrote: thank you Christian, So, Is this way correct ? after generating tiles with gdal_retile.py, using these tiles, creating raster table with : raster2pgsql -s 4236 -I -C -M *.tif regards On Mon, Apr 20, 2015 at 10:31 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi Ahmet For populating postgis raster you have to use the postgis import tool. Look here http://postgis.net/docs/using_raster_dataman.html Cheers On Sun, Apr 19, 2015 at 6:35 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: hello I am trying to populate postgis raster table with gt-imagemosaic-jdbc-12.2.jar import I got this structure in postgis : --- tr2= \d spatialtable_0 Table public.spatialtable_0 Column |Type | Modifiers --+-+--- location | character(64) | not null geom | geometry(MultiPolygon,4326) | Indexes: spatialtable_0_pk PRIMARY KEY, btree (location) ix_spatialtable_0 gist (geom) tr2= \d tiletable_0 Table public.tiletable_0 Column | Type | Modifiers --+---+--- location | character(64) | not null data | bytea | Indexes: tiletable_0_pk PRIMARY KEY, btree (location) --- I am not sure if it is correct structure ? What am I doing wrong ? regards -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] gt-imagemosaic-jdbc-12.2.jar import creates wrong structure ?
Hi Ahmet For populating postgis raster you have to use the postgis import tool. Look here http://postgis.net/docs/using_raster_dataman.html Cheers On Sun, Apr 19, 2015 at 6:35 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: hello I am trying to populate postgis raster table with gt-imagemosaic-jdbc-12.2.jar import I got this structure in postgis : --- tr2= \d spatialtable_0 Table public.spatialtable_0 Column |Type | Modifiers --+-+--- location | character(64) | not null geom | geometry(MultiPolygon,4326) | Indexes: spatialtable_0_pk PRIMARY KEY, btree (location) ix_spatialtable_0 gist (geom) tr2= \d tiletable_0 Table public.tiletable_0 Column | Type | Modifiers --+---+--- location | character(64) | not null data | bytea | Indexes: tiletable_0_pk PRIMARY KEY, btree (location) --- I am not sure if it is correct structure ? What am I doing wrong ? regards -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] gt-imagemosaic-jdbc-12.2.jar import creates wrong structure ?
Yep, here is the manual http://docs.geotools.org/latest/userguide/library/coverage/pgraster.html Cheers Christian On Mon, Apr 20, 2015 at 10:35 AM, Ahmet Temiz ahmettemi...@gmail.com wrote: thank you Christian, So, Is this way correct ? after generating tiles with gdal_retile.py, using these tiles, creating raster table with : raster2pgsql -s 4236 -I -C -M *.tif regards On Mon, Apr 20, 2015 at 10:31 AM, Christian Mueller christian.muel...@os-solutions.at wrote: Hi Ahmet For populating postgis raster you have to use the postgis import tool. Look here http://postgis.net/docs/using_raster_dataman.html Cheers On Sun, Apr 19, 2015 at 6:35 PM, Ahmet Temiz ahmettemi...@gmail.com wrote: hello I am trying to populate postgis raster table with gt-imagemosaic-jdbc-12.2.jar import I got this structure in postgis : --- tr2= \d spatialtable_0 Table public.spatialtable_0 Column |Type | Modifiers --+-+--- location | character(64) | not null geom | geometry(MultiPolygon,4326) | Indexes: spatialtable_0_pk PRIMARY KEY, btree (location) ix_spatialtable_0 gist (geom) tr2= \d tiletable_0 Table public.tiletable_0 Column | Type | Modifiers --+---+--- location | character(64) | not null data | bytea | Indexes: tiletable_0_pk PRIMARY KEY, btree (location) --- I am not sure if it is correct structure ? What am I doing wrong ? regards -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] [Geotools-gt2-users] Postgis Raster Plug in?
The plugin is part of the imagemosaicjdbc module. Cheers Christian On Sat, Apr 18, 2015 at 9:45 AM, Ahmet Temiz ahmettemi...@gmail.com wrote: HelloWhere can I find 'Postgis Raster Plug in'? regards -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Bilgi İşlem Dairesi Başkanlığı-CBS Grubu Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ GeoTools-GT2-Users mailing list geotools-gt2-us...@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geotools-gt2-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] ImageMosaicJDBC problem
Hi Ahmet The current working directory must be the geotools directory containing all the jar files. Cheers Christian On Fri, Apr 17, 2015 at 9:26 AM, Ahmet Temiz ahmettemi...@gmail.com wrote: hello When I am struggling with ImageMosaicJDBC import facility gt-imagemosaic-jdbc-13.0.jarI ran into this error : Exception in thread main java.lang.NoClassDefFoundError: com/sun/media/jai/codec/SeekableStream at org.geotools.gce.imagemosaic.jdbc.Toolbox.main(Toolbox.java:46) Caused by: java.lang.ClassNotFoundException: com.sun.media.jai.codec.SeekableStream I will appreciate, if anyone gives me hint. regards -- Ahmet Temiz Jeoloji Müh. Afet ve Acil Durum Yönetimi Başkanlığı Planlama ve Zarar Azaltma Dairesi Başkanlığı Ahmet Temiz Geological Eng. Information Systems - GIS Group Disaster and Emergency Management of Presidency -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Data Security Configuration via REST
Hi all GSIP 120 is still on my TODO list, I hope to create a pull request soon. Cheers Christian On Mon, Apr 6, 2015 at 7:09 PM, Mike Grogan d.michael.gro...@gmail.com wrote: Thanks for responding, Andrea. I have been considering the GeoFence way of doing this, but may go another way at this point. - Mike On Mon, Apr 6, 2015 at 12:10 PM, Andrea Aime andrea.a...@geo-solutions.it wrote: On Mon, Apr 6, 2015 at 5:20 PM, Mike Grogan d.michael.gro...@gmail.com wrote: Is there any way to configure Data Security Rules via the REST interface? For example, if I create a new workspace using the REST interface, how do I also secure it via the REST interface? There was a proposal to add this functionality, but it seems to have stalled: https://github.com/geoserver/geoserver/wiki/GSIP-120 As an alternative, you can use GeoFence ( https://github.com/geoserver/geofence ), it has a REST API to configure the security rules. Of course, it's a bit harder to setup, you have to run an extra external app (GeoFence itself) and add a plugin to GeoServer to connect to it. We are working on building a relationship like the GWC one, where GeoFence will run as a library inside GeoServer, but it will take some time, and at the beginning it might not have the REST api included (mostly to reduce the initial effort of merging the two toghether). Cheers Andrea -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. --- -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15utm_medium=emailutm_campaign=VA_SF___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] WMS: Filtering rasters in ImageMosaic JDBC store
Hi Victor There are no plans to add filtering to the Image Mosaic JDBC Extension because this needs a full redesign/rewrite of the extension. Cheers Christian On Wed, Feb 18, 2015 at 8:45 PM, victor sinceac victor.sinc...@corobor.com wrote: Thanks Christian, so afaik. there remains only one possible solution for my requirements: GeoTIFF files on hard disk store (Image Mosaic / Time Series)... I thought there was a method to serve dynamic images with GeoServer, with all the advantages provided by PostGIS raster format. Maybe is there some schedule for future filtering in the Image Mosaic JDBC extension? Victor *From:* Christian Mueller [mailto:christian.muel...@os-solutions.at] *Sent:* mercredi 18 février 2015 16:18 *To:* victor sinceac *Cc:* geoserver-users@lists.sourceforge.net *Subject:* Re: [Geoserver-users] WMS: Filtering rasters in ImageMosaic JDBC store Hi Victor The module does not support filtering at all. Cheers Christian On Wed, Feb 18, 2015 at 3:42 PM, victor sinceac victor.sinc...@corobor.com wrote: Hi all, I have a layer based on an Image Mosaic JDBC store on GeoServerV2.7. Raster (satellite images, GeoTIFF) are dynamically tiled/loaded in PostGIS with raster2pgsql script. The raster table contains the geometry, as well as the original GeoTIFF file name (in a column “filename”) and an associated date in a column “date” (timestamp). Each GeoTIFF image is issued every hour from the same geostationary satellite, i.e. all images cover the same area but have different “filename” and “date”. How can I add a filter in order to get in WMS only the raster matching to a given value of the columns “filename” and/or “date” in the PostGIS db? · May this be done directly in the SLD associated to the layer? · May this be done by CQL_FILTER? · Is it possible to add these columns in the file “mapping.postgis.xml” Thanks, Victor -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=190641631iu=/4140/ostg.clktrk___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] WMS: Filtering rasters in ImageMosaic JDBC store
Hi Victor The module does not support filtering at all. Cheers Christian On Wed, Feb 18, 2015 at 3:42 PM, victor sinceac victor.sinc...@corobor.com wrote: Hi all, I have a layer based on an Image Mosaic JDBC store on GeoServerV2.7. Raster (satellite images, GeoTIFF) are dynamically tiled/loaded in PostGIS with raster2pgsql script. The raster table contains the geometry, as well as the original GeoTIFF file name (in a column “filename”) and an associated date in a column “date” (timestamp). Each GeoTIFF image is issued every hour from the same geostationary satellite, i.e. all images cover the same area but have different “filename” and “date”. How can I add a filter in order to get in WMS only the raster matching to a given value of the columns “filename” and/or “date” in the PostGIS db? · May this be done directly in the SLD associated to the layer? · May this be done by CQL_FILTER? · Is it possible to add these columns in the file “mapping.postgis.xml” Thanks, Victor -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=190641631iu=/4140/ostg.clktrk ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=190641631iu=/4140/ostg.clktrk___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Tutorial/Detailed example to secure a workspace with user/passwd
Hi Andy Did you read http://docs.geoserver.org/stable/en/user/security/layer.html You need a rule like myworkspace.*.r=MY_ROLE Cheers Christian On Tue, Jan 20, 2015 at 8:34 AM, sulu andreas.sie...@vorarlberg.at wrote: Hi Christian. Maybe i wasn't clear in my post. Goal: /I want to create a read only user for certain workspaces./ I am aware of the GUI-Interface for configuring users/roles. My problem is what to put in the Web-GUI. e.g. Roles: How to create role is to choose for this read only user? Then there is a feature where i can input key/value-pairs in free-form. Do i need them or what is the use for this feature? The freedom the interface provides might be nice, but it isn't if you dont know how to use it. Thats why i asked for a walkthrough or some use cases in order to use it properly. Strangely the internet is quite dry in that respect. Cheers Andy -- View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5182478.html Sent from the GeoServer - User mailing list archive at Nabble.com. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Tutorial/Detailed example to secure a workspace with user/passwd
Hi Andreas You will need a role to protect your workspace. Second, you have to assign this role to your user. Greetings from Vienna :-) Cheers Christian On Thu, Jan 8, 2015 at 3:03 PM, sulu andreas.sie...@vorarlberg.at wrote: Hi. Is there a tutorial or walkthrough available which shows how to secure a workspace with user and password? I checked the Geoserver-Doc but thats to general for me. I dont want any fancy roles or something similar. It would be sufficient if geoserver just asks for user/pw for that particular workspace. Thanks Andy -- View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551.html Sent from the GeoServer - User mailing list archive at Nabble.com. -- Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Unable to view secured layers through application hosted on Linux
Hi Are you using basic authentication for accessing the layers. If this is the case, your app has to send the proper HTTP header with user/password for each request. Cheers Christian On Tue, Jan 6, 2015 at 11:55 AM, Mahalakshmi Narayanan mhl...@gmail.com wrote: We are using Geoserver 2.4.4 , Geoserver layers are secured using Geoserver admin interface. When we access the layers from appplication its not showing the map. if i logged on to the Geoserver in next tab it renders the map from the application. On Windows server, the same interface works fine.. So can any one tell us the better way to access the secured layer from the application please ... Any help would be greatly appreciated. -- With kind regards, Mahalakshmi Narayanan National Informatics Centre – TNSC Ministry of Communications Information Technology Government of India -- Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Connecting PostGIS (raster) to GeoSERVER
Hi Stephanie Be aware of the fact that the error described in the first mail happens during importing the image data using geotools. Postgis raster has its own import tool and you have to use it. Cheers Christian On Thu, Dec 11, 2014 at 6:28 PM, Granger, Stephanie L (329M) stephanie.l.gran...@jpl.nasa.gov wrote: Hi Christian- Not sure if I thanked you for your response. I'm building my interface in fits and starts, so my attention does get distracted. I am using the postgis raster extension and am using the tutorials you recommend as my starting point. Everything works fine up to the point I describe. My thought is that it is an environment issue, I'll ask my SA and will let you know how it goes. Thank you for your kind response! Best- Stephanie -- *From:* Christian Mueller [christian.muel...@os-solutions.at] *Sent:* Tuesday, December 02, 2014 1:55 AM *To:* Granger, Stephanie L (329M) *Cc:* geoserver-users@lists.sourceforge.net *Subject:* Re: [Geoserver-users] Connecting PostGIS (raster) to GeoSERVER Hi Stephanie No idea about the error, maybe I can start a debug session with your config files. On the other side, I would recommend to use the postgis raster extension http://postgis.net/docs/RT_reference.html The extension is available since POSTGIS 2.0. The tutorial is for POSTGIS with versions 2.0 and uses BLOBs to store image data. Since version 2.0, there is a special data type RASTER with a lot of useful functions. Importing raster data is described here http://postgis.net/docs/using_raster_dataman.html#RT_Loading_Rasters Configuring GeoServer for PostGis Raster is described here http://docs.geoserver.org/stable/en/user/data/raster/postgisraster.html Hope this helps Cheers Christian On Mon, Dec 1, 2014 at 11:38 PM, Granger, Stephanie L (329M) stephanie.l.gran...@jpl.nasa.gov wrote: Hello- New to geoserver, postgres and openlayers... I'm building an opengeo web map tool using postgis, geoserver and openlayers. My postgis db contains both vector and raster data and I want to access the rasters from the db and publish as WCS to OpenLayers via geoserver. I've followed the tutorial to given here: http://docs.geoserver.org/2.4.x/en/user/tutorials/imagemosaic-jdbc/imagemosaic-jdbc_tutorial.html I'm using the examples exactly as written (except for username, passwd, dbname...) and it all works great up until I get to the Importing the image data section and type in the command below: java -jar /usr/local/tomcat/webapps/geoserver/WEB-INF/lib/gt-imagemosaic-jdbc-11.0.jar import -config /usr/local/tomcat/webapps/geoserver/data/coverages/osm.postgis.xml -spatialTNPrefix tileosm -tileTNPrefix tileosm -dir tiles -ext png I am getting the following error: java.sql.SQLException: The url cannot be null at java.sql.DriverManager.getConnection(DriverManager.java:649) at java.sql.DriverManager.getConnection(DriverManager.java:247) at org.geotools.gce.imagemosaic.jdbc.Import.start(Import.java:367) at org.geotools.gce.imagemosaic.jdbc.Toolbox.main(Toolbox.java:46) I've checked and rechecked the jdbcURL in my connect.postgis.xml.inc file (it's correct). I've checked and re-checked the username and password of the postgis database (both correct as well). For a different application I wrote a simple java tool to query the database and it works using the same URL, username and password that are in the connect.postgis.xml.inc file. Am I missing something in my ~/tomcat/webapps/geoserver directory structure? Really appreciate any insight you can offer. Thanks in advance. Stephanie Oh...config files are here 1 connect.postgis.xml.inc connect !-- value DBCP or JNDI -- dstype value = DBCP/ !-- jndiReferenceName value=/-- username value=myusername/ password value=mypasswd/ jdbcURL value=jdbc:postgresql://localhost:5432/mydb / driverClassName value=org.postgresql.Driver/ maxActive value=10/ minIdle value=0/ /connect 2. mapping.postgis.xml.inc !-- possible values: universal,postgis,db2,mysql,oracle -- spatialExtension name=postgis/ mapping masterTable name=mosaic coverageNameAttribute name=name/ maxXAttribute name=maxX/ maxYAttribute name=maxY/ minXAttribute name=minX/ minYAttribute name=minY/ resXAttribute name=resX/ resYAttribute name=resY/ tileTableNameAtribute name=TileTable / spatialTableNameAtribute name=SpatialTable / /masterTable tileTable blobAttributeName name=data / keyAttributeName name=location / /tileTable spatialTable keyAttributeName name=location / geomAttributeName name=geom / tileMaxXAttribute name=maxX/ tileMaxYAttribute name=maxY/ tileMinXAttribute name=minX/ tileMinYAttribute name=minY/ /spatialTable /mapping 3. osm.postgis.xml ?xml version=1.0 encoding=UTF-8
Re: [Geoserver-users] Securing REST with http digest
Hi Clifford Could you send me your security/rest.properties and the security/config.xml file. Cheers Christian On Fri, Dec 5, 2014 at 11:43 PM, clifford.harms clifford.ha...@gmail.com wrote: Im having trouble getting http digest to work with anything in geoserver 2.6. I've added a digest authentication filter to the REST filter chain and removed the anonymous and basic filters. In addition, I've edited the rest.properties file to allow the required roles access to the rest paths. Using a variety of agents (wget, curl, firefox), I simply cannot authenticate to the REST API once all of these are configured. I Inspected the header output of the interchange, and geoserver *appears* to be sending what is expected wrt to the HTTP digest protocol, and the agents appear to be responding back properly, but I'm getting 401 all the same. I HAVE made changes elsewhere to the security configuration (replaced the default admin user with a differently named one, being sure to grant the ADMIN role to the new user) but I would not expect this to be an issue.The only thing I'm seeing in the debug log output is a message saying that AuthenticationCache couldn't find anything, which I would expect having not logged in yet. The only time I can access the rest api with digest authentication configured is if I am logged in as the admin user in the web gui, and then during that session navigate to the REST api in the browser. My main goal with this post is to determine if someone is successfully running digest authentication against the REST API using geoserver 2.6, so that I know whether to continue to look for configuration problems or break out the debugger (I've actually starting debugging somewhat, but there is a lot going on in the security subsystems, so that is going to take a while). Interestingly, I could not get digest authentication to work properly in 2.2.1 (the version I upgraded from) without manual changes to the security configuration xml (some kind of gui issue). email: clifford.harms[at]navy.mil clifford.harms[at]gmail.com -- View this message in context: http://osgeo-org.1560.x6.nabble.com/Securing-REST-with-http-digest-tp5176711.html Sent from the GeoServer - User mailing list archive at Nabble.com. -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151iu=/4140/ostg.clktrk ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151iu=/4140/ostg.clktrk___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Connecting PostGIS (raster) to GeoSERVER
Hi Stephanie No idea about the error, maybe I can start a debug session with your config files. On the other side, I would recommend to use the postgis raster extension http://postgis.net/docs/RT_reference.html The extension is available since POSTGIS 2.0. The tutorial is for POSTGIS with versions 2.0 and uses BLOBs to store image data. Since version 2.0, there is a special data type RASTER with a lot of useful functions. Importing raster data is described here http://postgis.net/docs/using_raster_dataman.html#RT_Loading_Rasters Configuring GeoServer for PostGis Raster is described here http://docs.geoserver.org/stable/en/user/data/raster/postgisraster.html Hope this helps Cheers Christian On Mon, Dec 1, 2014 at 11:38 PM, Granger, Stephanie L (329M) stephanie.l.gran...@jpl.nasa.gov wrote: Hello- New to geoserver, postgres and openlayers... I'm building an opengeo web map tool using postgis, geoserver and openlayers. My postgis db contains both vector and raster data and I want to access the rasters from the db and publish as WCS to OpenLayers via geoserver. I've followed the tutorial to given here: http://docs.geoserver.org/2.4.x/en/user/tutorials/imagemosaic-jdbc/imagemosaic-jdbc_tutorial.html I'm using the examples exactly as written (except for username, passwd, dbname...) and it all works great up until I get to the Importing the image data section and type in the command below: java -jar /usr/local/tomcat/webapps/geoserver/WEB-INF/lib/gt-imagemosaic-jdbc-11.0.jar import -config /usr/local/tomcat/webapps/geoserver/data/coverages/osm.postgis.xml -spatialTNPrefix tileosm -tileTNPrefix tileosm -dir tiles -ext png I am getting the following error: java.sql.SQLException: The url cannot be null at java.sql.DriverManager.getConnection(DriverManager.java:649) at java.sql.DriverManager.getConnection(DriverManager.java:247) at org.geotools.gce.imagemosaic.jdbc.Import.start(Import.java:367) at org.geotools.gce.imagemosaic.jdbc.Toolbox.main(Toolbox.java:46) I've checked and rechecked the jdbcURL in my connect.postgis.xml.inc file (it's correct). I've checked and re-checked the username and password of the postgis database (both correct as well). For a different application I wrote a simple java tool to query the database and it works using the same URL, username and password that are in the connect.postgis.xml.inc file. Am I missing something in my ~/tomcat/webapps/geoserver directory structure? Really appreciate any insight you can offer. Thanks in advance. Stephanie Oh...config files are here 1 connect.postgis.xml.inc connect !-- value DBCP or JNDI -- dstype value = DBCP/ !-- jndiReferenceName value=/-- username value=myusername/ password value=mypasswd/ jdbcURL value=jdbc:postgresql://localhost:5432/mydb / driverClassName value=org.postgresql.Driver/ maxActive value=10/ minIdle value=0/ /connect 2. mapping.postgis.xml.inc !-- possible values: universal,postgis,db2,mysql,oracle -- spatialExtension name=postgis/ mapping masterTable name=mosaic coverageNameAttribute name=name/ maxXAttribute name=maxX/ maxYAttribute name=maxY/ minXAttribute name=minX/ minYAttribute name=minY/ resXAttribute name=resX/ resYAttribute name=resY/ tileTableNameAtribute name=TileTable / spatialTableNameAtribute name=SpatialTable / /masterTable tileTable blobAttributeName name=data / keyAttributeName name=location / /tileTable spatialTable keyAttributeName name=location / geomAttributeName name=geom / tileMaxXAttribute name=maxX/ tileMaxYAttribute name=maxY/ tileMinXAttribute name=minX/ tileMinYAttribute name=minY/ /spatialTable /mapping 3. osm.postgis.xml ?xml version=1.0 encoding=UTF-8 standalone=no? !DOCTYPE ImageMosaicJDBCConfig [ !ENTITY mapping PUBLIC mapping mapping.postgis.xml.inc !ENTITY connect PUBLIC connect connect.postgis.xml.inc] config version=1.0 coverageName name=osm/ coordsys name=EPSG:4326/ !-- interpolation 1 = nearest neighbour, 2 = bilinear, 3 = bicubic -- scaleop interpolation=1/ verify cardinality=false/ mapping; connect; /config -- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=157005751iu=/4140/ostg.clktrk ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source
Re: [Geoserver-users] Problem with CAS authentication
Hi Nicolas This is possible if you use workspaces. Make a workspace for your protected layers, add a new filter chain with the CAS filter and put the anonymous filter on the default filter chain. Alternatively, you can add an additional workspace for your public layers. Access a layer in a workspace with http://localhost:8080/geoserver/workspacename1... http://localhost:8080/geoserver/workspacename2... Create filter chains with the patterns /workspacename1/** /workspacename2/** The new filter chains must precede the default filter chain. Cheers Christian On Wed, Nov 12, 2014 at 1:00 PM, Nicolas Ravet nra...@cmre.fr wrote: Hello, I'm working with GeoServer 2.5.2 with CAS extension. I need to have layers with restricted access and others with anonymous access. In the default filter chain, if i select CAS and unselect basic and anonymous, I cannot access my layers wich have no restriction on it if I'm not authenticated on CAS server. But, if I add the anonymous filter in default filter chain, I indeed can access to my unrestricted layers but I cannot access anymore to my restricted layers. Is there any possibility to have in the same time CAS and Anonymous filters ? Regards, Nicolas RAVET *Nicolas RAVET* *www.cmre.fr* http://www.cmre.fr/ 04 74 25 09 70 -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] Spring/environment variable property replacement in ROLE config.xml
Hi Chris
Property replacements are not supported. I never tried it but I am quite
sure.
Cheers
Christian
On Fri, Nov 7, 2014 at 4:26 PM, Chris Snider chris.sni...@issinc.com
wrote:
Hi,
We have a plug-in for GeoServer that connects GeoServer roles to an RBAC
service. Currently, we set up the connection URL required to reach the
service during initial deployment, which works well. However, we are
switching to a service discovery mechanism and need the values to be
replaceable at runtime with Spring Framework properties or environment
variables.
Does the GeoServer security subsystem do property replacements when
reading the config.xml file?
Example configuration
rbacroleservice
nameRBAC_ROLE/name
classNamecom.company.security.RBACRoleService/className
connectURL${rbac.httpPrefix}://${rbac.ip}:${rbac.port}//connectURL
adminRoleNameROLE_GEOADMIN/adminRoleName
/rbacroleservice
Thanks,
Chris Snider
Senior Software Engineer
*Intelligent Software Solutions, Inc.*
Direct (719) 452-7257
[image: Description: Description: Description:
cid:image001.png@01CA1F1F.CBC93990]
--
___
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
--
___
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] GeoServer REST API Authentication
Hi Mauro Thanks for your answers to this thread, all your information is correct :-) Cheers Christian On Thu, Nov 6, 2014 at 3:56 PM, Mauro Bartolomeoli mauro.bartolome...@geo-solutions.it wrote: Hi Benito, 2014-11-06 15:44 GMT+01:00 Cosme Benito cosme.ben...@mapidea.pt: Hi Mauro, Yes you are correct, I made that exact mistake and realized soon after that the Authentication did not work as I thought it would J I just tried the UserGroupService with a PostGIS database and it seems to work great. I didn’t actually try using the REST API but the users I create in the database seem to be immediately available on GeoServer. However when trying with a SQLite database it simply crashes L java.lang.RuntimeException: java.io.IOException: org.apache.commons.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory (SQLite supports only TRANSACTION_SERIALIZABLE and TRANSACTION_READ_UNCOMMITTED.) As you say, I think SQLLite is not currently supported (or tested by someone). I don’t mind this being the only Authentication Provider in GeoServer, this is acceptable and perfectly fine. I already have User/Role tables and being able to configure them on XML files would be a pretty good solution for me, can you point me into the correct file(s)? I can’t seem to be able to find them. The standard xml files are automatically created in the GeoServer data_dir, in the security/usergroup/name_of_your_service subfolder when you create a JDBC UserGroup service with standard options (from my experience they seem to be created after the first attempt of usage, so not exactly when you create the service). I include the standard ones as attachments. To customize it for your needs you have to change the users_dml.xml file (the other one is for tables creation, but in your case the tables are already there). You have to restart Geoserver after updating the file. You may have problems with passwords, because you need to store them in one of the encryption formats supported by GeoServer (or in plain text) to work correctly. Thanks a lot, you have already helped a ton! Cosme Benito You are welcome. Mauro -- == GeoServer Professional Services from the experts! Visit http://goo.gl/NWWaa2 for more information. == Dott. Mauro Bartolomeoli @mauro_bart Senior Software Engineer GeoSolutions S.A.S. Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 1660272 http://www.geo-solutions.it http://twitter.com/geosolutions_it --- *AVVERTENZE AI SENSI DEL D.Lgs. 196/2003* Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003. The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc. -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
Re: [Geoserver-users] authenticating with basic auth
Hi Please stay on the mailing list. POST or PUT has no influence on the authentication protocol, using username and password as URL parameters is a bad practice and not supported officially. 1) Add a new role TEST_ROLE to geoserver and add a new user TEST_USER 2) protect the read access to the resource topp:city, users must have the role TEST_ROLE 3) Open your browser and enter http://mydomain/geoserver/wms?bbox=34.875,-62.5,32.3125,-55.5Format=image/pngrequest=GetMaplayers=topp:citywidth=250height=250srs=EPSG:4321 A login window must occur 4) Since you did not attach the TEST_ROLE to the TEST_USER, access denied is the answer. Using PHP, look here for the code snippet http://php.net/manual/en/features.http-auth.php Now, add the role TEST_ROLE to the TEST_USER. Close the browser, open it and retry. Things should work. Cheers Christian On Thu, Oct 30, 2014 at 10:46 PM, bol...@hotmail.com wrote: You have answered a mail here: http://osgeo-org.1560.x6.nabble.com/authenticating-with-basic-auth-td5035587.html (Call the services directly and add the Authorization header for EACH request. Geoserver does not create a session.) I have same problem. I could not understand add Authorization. I tried send request from browser like following but not worked. http://mydomain/geoserver/wms?bbox=34.875,-62.5,32.3125,-55.5Format=image/pngrequest=GetMaplayers=topp:citywidth=250height=250srs=EPSG:4321username=u1password=p1 I created a PHP script and send POST request but did not worked. _ Sent from http://osgeo-org.1560.x6.nabble.com -- DI Christian Mueller MSc (GIS), MSc (IT-Security) OSS Open Source Solutions GmbH -- ___ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
