You have many possibilities. First, go to "Security"->Authentication and
click "Add a new authentication filter".
You see a list of possible Filters, a short explanation
1) J2EE container, let the container do the job for both apps
If you want to reauthenticate on Geoserver
2) Basic auth
3) Digest auth
If you want to have your app acting as an authentication proxy
4) CAS-PT if you want to have a single sign on solution (You have to
install a CAS Server and use CAS proxy tickets)
5) Http header authentication
5) is very efficient and simple. You have to specify a a http header
attribute for transmitting the user name. As a role source you can specify
a different header attribute and pass the roles a string delimted by ";"
like role1;role2;role3. This is by far the fastest solution.
After you have created your filter, go back to "Security"->Authentication,
section "Filter chains". Chose the filter chain "default" and add your
newly created filter.
In your app, you have set the corresponding header attributes.
Hope that helps
2012/8/24 Mark Paxton <[email protected]>
> Thanks for the help - see below...
>
> On 24/08/2012 15:56, Christian Mueller wrote:
>
> One important question, is Geoserver calling your app or is your app
> calling geoserver. In the second case, the solution may be easy. Your app
> would act as an authentication proxy and you can send user name and roles
> with http headers.
>
> My app is calling geoserver, with the user already having logged via a
> spring security setup in my app.
>
> What do you mean with alongside Geoserver ?. If both applications run
> within one J2EE container, you can delegate authentication/role management
> to the J2EE container.
>
> Yes, they're running on the same tomcat server.
>
>
> Please answer my questions, I think we will find a solution.
>
> Thanks again :)
>
> Mark
>
>
>
>
> 2012/8/24 Mark Paxton <[email protected]>
>
>> Hi all,
>>
>> I'm attempting to build a web app that runs alongside Geoserver and
>> provides data to be mapped though geoserver's web services. To do this
>> I need to be able to re-use the login session from my other web app
>> (spring security), then request the particular set of features I'm
>> interested in.
>>
>> So far I've created new UserGroup and Role services that can access my
>> own user database, but I'd really appreciate some advice on how to share
>> the login with Geoserver. It looks like the easiest way might be to use
>> RememberMe sessions - so any thoughts on the particular configuration to
>> do this would be helpful.
>>
>> Thanks!
>>
>> Mark
>>
>>
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Live Security Virtual Conference
>> Exclusive live event will cover all the ways today's security and
>> threat landscape has changed and how IT managers can respond. Discussions
>> will include endpoint security, mobile security and the latest in malware
>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> _______________________________________________
>> Geoserver-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>
>
>
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
