Re: [Geoserver-devel] WMS BBOX vs WFS BBOX
Andrea, thanks for your answer and I'm sorry for posting in the dev maling list. I've subscribed and waiting for approval. I can move (delete and create) this thread in the user list. I've never used WPS with another protocol like WFS. What would be the flow if I incorporate WPS in the process ? Client pans-->Geoserver gets WFS GET request-->spatial query sent to db server-->response sent to Geoserver-->WPS process result-->WFS result forwarded to client ? The WPS process needs to be called automatically at each pan/zoom. Thanks again for your help. -- Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-Dev-f3819232.html ___ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
Re: [Geoserver-devel] WMS BBOX vs WFS BBOX
Hi, no, WFS does not do any clipping, it's not part of the protocol. But you can use the WPS Clip process, giving it an internal WFS request, to do the clipping for you, and have it return WPS. You can try out the request builder (available in demo once you've installed WPS) in order to build a first sample request Cheers Andrea On Thu, Sep 13, 2018 at 5:03 PM Olyster wrote: > Hi, > > I'm working with Oracle Spatial. > > I have a table with a fairly big multipolygon geometry (400k points). > > As expected, Oracle returns the complete geometry to geoserver after the > spatial query. > > *WFS* > Since Oracle returns the complete geometry to Geoserver, I always get all > the points/vertices of the geometry on the client (browser-Chrome) side. No > matter if I'm zoomed closely or not, I always get the same amound of data > which tells me that the browser has to weed out the points that are outside > of the bbox and thus slowing the rendering process. > > With *WMS* the points are weeded out by geoserver. > > Would it be possible to use the same process for *WFS* requests as well ? > Geoserver receives the data from Oracle, weeds out the points that are > outside of the bbox and sends them out to the client. > > I noticed that a FastBBOX is used with a WMS request while a BBOXImpl is > returned with a WFS request so it may have something to do in the process. > > Thanks > > > > > > > -- > Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-Dev-f3819232.html > > > ___ > Geoserver-devel mailing list > Geoserver-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-devel > -- Regards, Andrea Aime == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it --- *Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.* ___ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
[Geoserver-devel] WMS BBOX vs WFS BBOX
Hi, I'm working with Oracle Spatial. I have a table with a fairly big multipolygon geometry (400k points). As expected, Oracle returns the complete geometry to geoserver after the spatial query. *WFS* Since Oracle returns the complete geometry to Geoserver, I always get all the points/vertices of the geometry on the client (browser-Chrome) side. No matter if I'm zoomed closely or not, I always get the same amound of data which tells me that the browser has to weed out the points that are outside of the bbox and thus slowing the rendering process. With *WMS* the points are weeded out by geoserver. Would it be possible to use the same process for *WFS* requests as well ? Geoserver receives the data from Oracle, weeds out the points that are outside of the bbox and sends them out to the client. I noticed that a FastBBOX is used with a WMS request while a BBOXImpl is returned with a WFS request so it may have something to do in the process. Thanks -- Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-Dev-f3819232.html ___ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
Re: [Geoserver-devel] geoserver datastore...
I know this is an old thread but I just stumble upon this exact situation.
Instead of :
Filter filter = query.getFilter();
if (filter instanceof org.geotools.renderer.lite.FastBBOX) {
FastBBOX filterBBox = (FastBBOX)filter;
You can cast directly to :
(org.opengis.filter.spatial.BBOX) filter
which has .getMaxX, .getMaxY, etc ...
--
Sent from: http://osgeo-org.1560.x6.nabble.com/GeoServer-Dev-f3819232.html
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
Re: [Geoserver-devel] LDAP Authentication and logging username
Hi Richard, did you try using the monitoring module, in "audit" mode? It will logs all sorts of details about the requests you're getting, regardless if they are post or get, including the username (but I don't know if it works fine with LDAP auth). See: http://docs.geoserver.org/latest/en/user/extensions/monitoring/index.html https://geoserver.geo-solutions.it/edu/en/adv_gsconfig/monitoring.html Cheers Andrea On Thu, Sep 13, 2018 at 9:56 AM Richard Duivenvoorde wrote: > Hi List, > > We are experimenting here with the LDAP authentication provider against > the Windows Active Directory. All works fine!! > > It is easy to ask for authorisation for a layer, and giving access via > 'groups' instead of individual users is a nice thing. > > BUT we also want to see in either Tomcat or Geoserver log files WHO is > asking for certain layers. So we want to log the username. > > It's only internal use, so it's not even over https, so I can see the > base64 username:password headers going over the line. > > But whatever I try (custom Valves for Tomcat) different log formats for > the (Apache) reverse proxy, I keep getting "- -" in logs instead of > seeing the username. > > So Question: is it possible to let Geoserver/Tomcat/Apache log the > username somewhere? I did a lot of googling, and found a lot of > 'answers', but nothing works in my situation. > > Any hint/clue? > Anybody is able to log usernames? > > Regards, > > Richard Duivenvoorde > > PS I'm pretty sure I asked something like this some years ago, and think > that Andrea answered something along the lines "difficult", but I cannot > find that Q/A anymore. > > PS2 I think for governmental organisations in EU it will be more and > more important to be able to hand over clear logs in case of privacy > breaches nowadays. Usernames are an important part in that case. > > > ___ > Geoserver-devel mailing list > Geoserver-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/geoserver-devel > -- Regards, Andrea Aime == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Ing. Andrea Aime @geowolf Technical Lead GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) phone: +39 0584 962313 fax: +39 0584 1660272 mob: +39 339 8844549 http://www.geo-solutions.it http://twitter.com/geosolutions_it --- *Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.* ___ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
[Geoserver-devel] [JIRA] (GEOS-8931) WPS:geopackage request xml validation fails even with valid xml
Title: Message Title aneer pa created an issue GeoServer / GEOS-8931 WPS:geopackage request xml validation fails even with valid xml Issue Type: Bug Affects Versions: 2.13.2 Assignee: Unassigned Components: WPS Created: 13/Sep/18 3:21 PM Priority: Highest Reporter: aneer pa sample WPS geopackage request : http://schemas.opengis.net/wps/1.0.0/wpsAll.xsd"> gs:GeoPackage contents World terrain and bathometry EPSG:4326 -180 -90 180 901 3 nasa:world.topo.bathy raster USA terrain and bathometry EPSG:4326 -171.79 18.91619 -66.96466 71.3577641 3 nasa:world.topo.bathy raster geopackageThe response : Failed to retrieve value for input contents The element type must be terminated by the matching end-tag but the xml is absolutely valid. Add Comment
Re: [Geoserver-devel] LDAP Authentication and logging username
On 09/13/2018 11:48 AM, Peter Smythe wrote:
> Hi Richard
>
> I log the HTTP header Authorization in Tomcat/HAProxy/Apache and this
> will give you the base64 username:password that you see in WireShark, etc.:
>
> Tomcat/Apache: %{Authorization}i
>
> HAProxy:
> capture request header Authorization len 50
> log-format "... %{+Q}hrl ..."
>
> I'm not sure how to base64 decode automatically, so I just leave it
> encoded, which is good enough for differentiating per username.
Hi Peter,
Thanks, yes that is what I came up finally, just after I sent the email.
But security-wise I cannot do that, in our case the Windows passwords
will be in all logs (Base64 encoded, but that is one line of grep away
from harvesting all username/passwords :( ) .
So decoding/splitting on the fly would be ok. But even better would be
if Geoserver hands it over to the logs.
Regards,
Richard
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
Re: [Geoserver-devel] LDAP Authentication and logging username
Hi Richard
I log the HTTP header Authorization in Tomcat/HAProxy/Apache and this will
give you the base64 username:password that you see in WireShark, etc.:
Tomcat/Apache:%{Authorization}i
HAProxy:
capture request header Authorization len 50
log-format "... %{+Q}hrl ..."
I'm not sure how to base64 decode automatically, so I just leave it
encoded, which is good enough for differentiating per username.
Regards
Peter
On Thu, 13 Sep 2018 at 09:55, Richard Duivenvoorde
wrote:
> Hi List,
>
> We are experimenting here with the LDAP authentication provider against
> the Windows Active Directory. All works fine!!
>
> It is easy to ask for authorisation for a layer, and giving access via
> 'groups' instead of individual users is a nice thing.
>
> BUT we also want to see in either Tomcat or Geoserver log files WHO is
> asking for certain layers. So we want to log the username.
>
> It's only internal use, so it's not even over https, so I can see the
> base64 username:password headers going over the line.
>
> But whatever I try (custom Valves for Tomcat) different log formats for
> the (Apache) reverse proxy, I keep getting "- -" in logs instead of
> seeing the username.
>
> So Question: is it possible to let Geoserver/Tomcat/Apache log the
> username somewhere? I did a lot of googling, and found a lot of
> 'answers', but nothing works in my situation.
>
> Any hint/clue?
> Anybody is able to log usernames?
>
> Regards,
>
> Richard Duivenvoorde
>
> PS I'm pretty sure I asked something like this some years ago, and think
> that Andrea answered something along the lines "difficult", but I cannot
> find that Q/A anymore.
>
> PS2 I think for governmental organisations in EU it will be more and
> more important to be able to hand over clear logs in case of privacy
> breaches nowadays. Usernames are an important part in that case.
>
>
> ___
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
___
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
[Geoserver-devel] [JIRA] (GEOS-8930) Style Editor Legend Preview is not consistent with actual style
Title: Message Title Gnafu created an issue GeoServer / GEOS-8930 Style Editor Legend Preview is not consistent with actual style Issue Type: Bug Affects Versions: 2.14-RC Assignee: Unassigned Components: Wicket UI, WMS Created: 13/Sep/18 11:46 AM Environment: Latest platform independent binary package on Windows 10 Priority: Medium Reporter: Gnafu The Style editor fetches the custom legend image from the same folder of the style, if it does not find it, it searches in the main "styles" directory. The WMS will only search in the same folder of the style. So if the image is in the main "style" directory, and the style is actually inside a workspace, the preview will still show a correct preview, when the WMS will fail to fetch the legend image and fallback to the generated one. The two different behaviors should be aligned. To reproduce: Open the "giant_polygon" style Add the "grass_fill.png" online resource Preview the legend --> It shows a green square Do a GetLegendGraphic of the tiger:giant_polygon layer ( http://localhost:8080/geoserver/wms?SERVICE=WMS=1.1.1=GetLegendGraphic=image%2Fpng=tiger%3Agiant_polygon ) -->green square
[Geoserver-devel] LDAP Authentication and logging username
Hi List, We are experimenting here with the LDAP authentication provider against the Windows Active Directory. All works fine!! It is easy to ask for authorisation for a layer, and giving access via 'groups' instead of individual users is a nice thing. BUT we also want to see in either Tomcat or Geoserver log files WHO is asking for certain layers. So we want to log the username. It's only internal use, so it's not even over https, so I can see the base64 username:password headers going over the line. But whatever I try (custom Valves for Tomcat) different log formats for the (Apache) reverse proxy, I keep getting "- -" in logs instead of seeing the username. So Question: is it possible to let Geoserver/Tomcat/Apache log the username somewhere? I did a lot of googling, and found a lot of 'answers', but nothing works in my situation. Any hint/clue? Anybody is able to log usernames? Regards, Richard Duivenvoorde PS I'm pretty sure I asked something like this some years ago, and think that Andrea answered something along the lines "difficult", but I cannot find that Q/A anymore. PS2 I think for governmental organisations in EU it will be more and more important to be able to hand over clear logs in case of privacy breaches nowadays. Usernames are an important part in that case. ___ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
