[Geoserver-users] Vulnerable Libraries in GeoServer beyond LOG4J

Dear GeoServer Users and Developers! Some days ago I was happy to find out that the LOG4J 1.2 component is going to replaced in the next major release of geoserver: https://github.com/geoserver/geoserver/wiki/Update-or-replace-Log4J-1-library . Since the topic of security vulnerabilities in

[Geoserver-users] AUTHKEY as variable in SQL session

Hello Geoserver users! I am using https://docs.geoserver.org/stable/en/user/data/database/sqlsession.html to control authorization at the database level. Is there only the GSUSER variable available? I would like to retrieve the authkey used by GSUSER in the database session. Thanks for your

Re: [Geoserver-users] [EXTERN!]: LOG4J Version in GeoServer

Log4j 1.x are only vulnerable to this attack when they use JNDI in their >> configuration. A separate CVE (CVE-2021-4104) has been filed for this >> vulnerability. To mitigate: audit your logging configuration to ensure it >> has no JMSAppender configured. Log4j 1.x configuratio

[Geoserver-users] LOG4J Version in GeoServer

Hello! I think most of you have heard of the LOG4J vulnerability these days: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 As far as I see GeoServer 2.20.1 uses still Log4J Version 1 log4j-1.2.17.jar and luckily is not affected by the problem itself. On the other hand the used log4j version 1

[Geoserver-users] GeoServer uses much CPU running on Windows and Tomcat 8.5

Hello GeoServer-Users! We are running GeoServer Relase 2.18.4 on Tomcat 8.5 on a Windows 2019 Server. We have found out that GeoServer consumes at least 10% of the CPU of a 4 core processor all the time. Using Tomcat 9 everything is fine. As we need to stay with Tomcat 8.5 in this specific

Re: [Geoserver-users] Update features in Postgres-View via WFS-T

>>>- die Rolle als Servicezugriffsregeln WFS-T-Rechte aufweisen >>>- Wird eines davon erst nach Laden des Layers in QGIS geändert, >>> sollte die Geoserver-Konfiguration, der FeatureType und der Layer in QGIS >>>neu geladen werden. >>>- Wenn

Re: [Geoserver-users] Update features in Postgres-View via WFS-T

d eines davon erst nach Laden des Layers in QGIS geändert, >>sollte die Geoserver-Konfiguration, der FeatureType und der Layer in QGIS >>neu geladen werden. >>- Wenn der WFS-Layer auf einem SQL-View in Geoserver basiert, ist er >>read-only. >> >> &

[Geoserver-users] Update features in Postgres-View via WFS-T

Good Morning! >From the documentation https://docs.geoserver.org/stable/en/user/data/database/sqlview.html it is obvious that a layer based on a SQL-View is read only. Therefore I created an editable view directly in Postgres and registered it as a normal layer in Geoserver. Unfortunately I

[Geoserver-users] Index is not used when using time dimension in layers

Hi! I am using the multi dimension plugin for querying postgres-Layers. Unfortunately the queries care not unsing the Indizes on my PostGIS-Table. This is an example: SELECT "object_tracking_uid","object_class","classification",encode(ST_AsBinary("shape"), 'base64') as "shape FROM trackingtable

Re: [Geoserver-users] Restricting WFS-T to certain Transactions

Hallo Stefan! Das wäre ja richtig super…. Kann man so wirklich im PostGIS sehen welcher Geoserver User das SQL abgefeuert werden hat? Muss man da spezielle Konfigurationen im Geoserver vornehmen oder reicht es einfach wenn man unter Sicherheit Dienste auf dem entsprechenden Datastore

[Geoserver-users] WMTS Multidimensional Plugin -> Dimension Tab not visible

Hello! Today I installed the WMTS Multidimensional Plugin ( https://docs.geoserver.org/stable/en/user/community/wmts-multidimensional/index.html ) for Geoserver 2.16.2. The test URL returns the expected result: http://demo.geo-solutions.it/share/wmts-multidim/wmts_multi_dimensional.xsd;