The proxy approach looks good, will try it out later and if i dont get work, I'll delete the gui jars.
I tried 'Encode canonical WFS schema location' and the schema location in GetCapabilites is now cleared ;-) But the <OnlineResource> Tags still tell the 'hostname:port'. I also filled out the WFS Option 'OnlineResource' and restarted geoserver, but with no effect. Should it override the url in OnlineResource-Tag? >-----Ursprüngliche Nachricht----- >Von: Andreas Hocevar *EXTERN* [mailto:[email protected]] >Gesendet: Montag, 18. April 2011 14:52 >An: Hochmeister Rudolf >Cc: geoserver-users users >Betreff: Re: [Geoserver-users] public WFS > >Hey Rudolf, > >to hide the GeoServer GUI from the public, I'd not remove the jars, but >proxy only what you need from GeoServer (e.g. /geoserver/wfs) through >Apache, and make access to Tomcat/Jetty not public at all. Here is how >this could look in your Apache virtual host configuration, assuming that >Tomcat/Jetty and Apache run on the same machine: > >ProxyRequests Off ># Remember to turn the next line off if you are proxying to a >NameVirtualHost >ProxyPreserveHost On > ><Proxy *> > Order deny,allow > Allow from all ></Proxy> > >ProxyPass /geoserver/wfs http://localhost:8080/geoserver/wfs >ProxyPassReverse /geoserver/wfs http://localhost:8080/geoserver/wfs > >Regards, >Andreas. > >On Apr 18, 2011, at 14:39 , Andrea Aime wrote: > >> On Mon, Apr 18, 2011 at 1:27 PM, Hochmeister Rudolf >> <[email protected]> wrote: >>> Hi geoserver team, >>> >>> We are planning to setup a public WFS with geoserver. >>> Therefore I have some questions: >>> >>> a)Is it possible to disable the WEB GUI completely? >> >> I believe you should be able to remove the GUI completely by getting >> rid of all the web-* jar files in WEB-INF/lib. >> It's been a while since I did it last time, not sure if that is still >working >> or not (we don't have tests checking GS can start up without the GUI). >> >>> b)The xsi:schemaLocation and the OnlineResource of the >>> WFS-GetCapabilites.xml >>> are always encoded with the local machine name plus portnumber, >which >>> is sensitive info that should not get outside. >>> Is there a way to replace it with a geoserver config entry? >> >> I think that in the WFS configuration on 2.1.x there is a flag to make >it use >> the canonical locations, which are on schemas.opengis.net: >> >> "Encode canonical WFS schema location" >> >> Cheers >> Andrea >> >> >> -- >> ------------------------------------------------------- >> Ing. Andrea Aime >> GeoSolutions S.A.S. >> Tech lead >> >> Via Poggio alle Viti 1187 >> 55054 Massarosa (LU) >> Italy >> >> phone: +39 0584 962313 >> fax: +39 0584 962313 >> mob: +39 333 8128928 >> >> http://www.geo-solutions.it >> http://geo-solutions.blogspot.com/ >> http://www.youtube.com/user/GeoSolutionsIT >> http://www.linkedin.com/in/andreaaime >> http://twitter.com/geowolf >> >> ------------------------------------------------------- >> >> ---------------------------------------------------------------------- >-------- >> Benefiting from Server Virtualization: Beyond Initial Workload >> Consolidation -- Increasing the use of server virtualization is a top >> priority.Virtualization can reduce costs, simplify management, and >improve >> application availability and disaster protection. Learn more about >boosting >> the value of server virtualization. http://p.sf.net/sfu/vmware- >sfdev2dev >> _______________________________________________ >> Geoserver-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/geoserver-users > > > >-- >Andreas Hocevar >OpenGeo - http://opengeo.org/ >Expert service straight from the developers. ------------------------------------------------------------------------------ Benefiting from Server Virtualization: Beyond Initial Workload Consolidation -- Increasing the use of server virtualization is a top priority.Virtualization can reduce costs, simplify management, and improve application availability and disaster protection. Learn more about boosting the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev _______________________________________________ Geoserver-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
