Vjylku

Inappropriate reference requests from Journal reviewers

Large drywall patch supports

How can a function with a hole (removable discontinuity) equal a function with no hole?

Roman Numeral Treatment of Suspensions

Is this apparent Class Action settlement a spam message?

Different result between scanning in Epson's "color negative film" mode and scanning in positive -> invert curve in post?

Purchasing a ticket for someone else in another country?

How does buying out courses with grant money work?

Return the Closest Prime Number

Avoiding estate tax by giving multiple gifts

Integer addition + constant, is it a group?

Sort a list by elements of another list

India just shot down a satellite from the ground. At what altitude range is the resulting debris field?

Anatomically Correct Strange Women In Ponds Distributing Swords

How did Doctor Strange see the winning outcome in Avengers: Infinity War?

How does Loki do this?

Crossing the line between justified force and brutality

Is expanding the research of a group into machine learning as a PhD student risky?

How to run a prison with the smallest amount of guards?

Is there a problem with hiding "forgot password" until it's needed?

How to check is there any negative term in a large list?

What does 算不上 mean in 算不上太美好的日子?

Lay out the Carpet

Can the discrete variable be a negative number?

geoserver authkey configuration question

Create custom Authentication filter in GeoServer 2.3.0GeoServer LDAP Authentication 'Test Connection' succeeds, but login failsIntegrating application security with GeoServer security?Geoserver Services not available after restartUnable to create multi-user system using GeoServerAdd secured WMS service from Geoserver to ArcGIS 10.2 to 10.4Geoserver: How to enable REST Authentication filter chain to allow PUT/POST callsGeoserver JDBC User Group Services ProblemGeoServer configuration for a new userConfiguring HTTP Header Proxy Authentication in GeoServer 2.14.2?

4

1

I'm running geoserver 2.8.0 in tomcat7 on Ubuntu 14.04.

Could anybody help me with the security configuration?
I want to serve WMS and WFS from a specific workspace using authorization based on a authkey in the URL - GET request.
I have tried to follow these instructions: http://docs.geoserver.org/stable/en/user/community/authkey/index.html

So far I tried:

• create new Group Service: sh_group (jdbc), add new User: sh1
  (role: READ)


• create Data Security rule for new workspace, access mode read for role: READ
  


• add new Authentication Filter: sh_authfilter (authkey), using group service sh_group
  


• add sh_authfilter to default Filter Chain as first selected filter (above basic and anonymous)


• create new Authentication Provider: sh_authprovider and add this to selected Provider Chain (top)

The synchonisation of authkeys is working and I see a UUID for the user sh1.
I can login to the web admin interface as user sh1, however I cannot access a WMS or WFS using the authkey variable in the GET request.

know a useful manual/example?

geoserver security

share|improve this question

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

add a comment | 

4

1

I'm running geoserver 2.8.0 in tomcat7 on Ubuntu 14.04.

Could anybody help me with the security configuration?
I want to serve WMS and WFS from a specific workspace using authorization based on a authkey in the URL - GET request.
I have tried to follow these instructions: http://docs.geoserver.org/stable/en/user/community/authkey/index.html

So far I tried:

• create new Group Service: sh_group (jdbc), add new User: sh1
  (role: READ)


• create Data Security rule for new workspace, access mode read for role: READ
  


• add new Authentication Filter: sh_authfilter (authkey), using group service sh_group
  


• add sh_authfilter to default Filter Chain as first selected filter (above basic and anonymous)


• create new Authentication Provider: sh_authprovider and add this to selected Provider Chain (top)

The synchonisation of authkeys is working and I see a UUID for the user sh1.
I can login to the web admin interface as user sh1, however I cannot access a WMS or WFS using the authkey variable in the GET request.

know a useful manual/example?

geoserver security

share|improve this question

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

add a comment | 

I'm running geoserver 2.8.0 in tomcat7 on Ubuntu 14.04.

Could anybody help me with the security configuration?
I want to serve WMS and WFS from a specific workspace using authorization based on a authkey in the URL - GET request.
I have tried to follow these instructions: http://docs.geoserver.org/stable/en/user/community/authkey/index.html

So far I tried:

• create new Group Service: sh_group (jdbc), add new User: sh1
  (role: READ)


• create Data Security rule for new workspace, access mode read for role: READ
  


• add new Authentication Filter: sh_authfilter (authkey), using group service sh_group
  


• add sh_authfilter to default Filter Chain as first selected filter (above basic and anonymous)


• create new Authentication Provider: sh_authprovider and add this to selected Provider Chain (top)

The synchonisation of authkeys is working and I see a UUID for the user sh1.
I can login to the web admin interface as user sh1, however I cannot access a WMS or WFS using the authkey variable in the GET request.

know a useful manual/example?

geoserver security

share|improve this question

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

share|improve this question

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

share|improve this question

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

edited May 13 '16 at 16:55

Mehreen

5251516

edited May 13 '16 at 16:55

Mehreen

5251516

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

asked May 13 '16 at 16:35

Ilona KemelingIlona Kemeling

7519

2 Answers
2

active

oldest

votes

1

You may need to create and exception rule only applicable to getMap requests.
look at this reference link: http://docs.geoserver.org/stable/en/user/services/wms/reference.html
https://github.com/geoserver/geoserver/commit/a5985f42bd9ebe985310ae83252b4cb32e45fb1b

share|improve this answer

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks, but I still have no idea what to do. Does the fact that I run geoserver inside tomcat7 make a difference? And the jvm version, does that have to be jre8 (using openjdk7 atm).
  
  – Ilona Kemeling
  May 16 '16 at 9:23
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Excellent - I worked it out. Had to change the url to: .../geoserver/scotland_data/wms?request=GetMap&service=WMS&authkey=XXXXXXXXXXXXXXXXXXXXXXXXXXX&version=1.1.1&layers=scotland_data:pub_communitycouncils&styles=&srs=EPSG:27700&bbox=0513.16443043435,526464.9268837326,482425.4722358609,1232643.830088544&width=400&height=330&format=image/png And the authkey now works. (without 'request=GetMap' in the url it doesn't work..).
  
  – Ilona Kemeling
  May 16 '16 at 10:15
  
  
  

  
  
  
  

add a comment | 

0

请问您是authkey在geoserver中如何设置的，如何获取 AUTHKEY=XXXXXXXXXXXXXX,具体流程是什么

share|improve this answer

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "79"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fgis.stackexchange.com%2fquestions%2f193522%2fgeoserver-authkey-configuration-question%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

1

You may need to create and exception rule only applicable to getMap requests.
look at this reference link: http://docs.geoserver.org/stable/en/user/services/wms/reference.html
https://github.com/geoserver/geoserver/commit/a5985f42bd9ebe985310ae83252b4cb32e45fb1b

share|improve this answer

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks, but I still have no idea what to do. Does the fact that I run geoserver inside tomcat7 make a difference? And the jvm version, does that have to be jre8 (using openjdk7 atm).
  
  – Ilona Kemeling
  May 16 '16 at 9:23
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Excellent - I worked it out. Had to change the url to: .../geoserver/scotland_data/wms?request=GetMap&service=WMS&authkey=XXXXXXXXXXXXXXXXXXXXXXXXXXX&version=1.1.1&layers=scotland_data:pub_communitycouncils&styles=&srs=EPSG:27700&bbox=0513.16443043435,526464.9268837326,482425.4722358609,1232643.830088544&width=400&height=330&format=image/png And the authkey now works. (without 'request=GetMap' in the url it doesn't work..).
  
  – Ilona Kemeling
  May 16 '16 at 10:15
  
  
  

  
  
  
  

add a comment | 

1

You may need to create and exception rule only applicable to getMap requests.
look at this reference link: http://docs.geoserver.org/stable/en/user/services/wms/reference.html
https://github.com/geoserver/geoserver/commit/a5985f42bd9ebe985310ae83252b4cb32e45fb1b

share|improve this answer

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks, but I still have no idea what to do. Does the fact that I run geoserver inside tomcat7 make a difference? And the jvm version, does that have to be jre8 (using openjdk7 atm).
  
  – Ilona Kemeling
  May 16 '16 at 9:23
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Excellent - I worked it out. Had to change the url to: .../geoserver/scotland_data/wms?request=GetMap&service=WMS&authkey=XXXXXXXXXXXXXXXXXXXXXXXXXXX&version=1.1.1&layers=scotland_data:pub_communitycouncils&styles=&srs=EPSG:27700&bbox=0513.16443043435,526464.9268837326,482425.4722358609,1232643.830088544&width=400&height=330&format=image/png And the authkey now works. (without 'request=GetMap' in the url it doesn't work..).
  
  – Ilona Kemeling
  May 16 '16 at 10:15
  
  
  

  
  
  
  

add a comment | 

You may need to create and exception rule only applicable to getMap requests.
look at this reference link: http://docs.geoserver.org/stable/en/user/services/wms/reference.html
https://github.com/geoserver/geoserver/commit/a5985f42bd9ebe985310ae83252b4cb32e45fb1b

share|improve this answer

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

share|improve this answer

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

answered May 13 '16 at 23:23

Williams OjoWilliams Ojo

361

0

请问您是authkey在geoserver中如何设置的，如何获取 AUTHKEY=XXXXXXXXXXXXXX,具体流程是什么

share|improve this answer

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

请问您是authkey在geoserver中如何设置的，如何获取 AUTHKEY=XXXXXXXXXXXXXX,具体流程是什么

share|improve this answer

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

请问您是authkey在geoserver中如何设置的，如何获取 AUTHKEY=XXXXXXXXXXXXXX,具体流程是什么

share|improve this answer

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this answer

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

answered 10 mins ago

user139495user139495

1

New contributor

user139495 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

answered 10 mins ago

user139495user139495

1