[GeoNetwork-users] geoserver behind proxy with simple basic auth?

Hi,

we are running a trestinstance of Geoserver behind an apache proxy. The
apache proxy is configured to use simple basic auth with static
user:password credentials. the service of the workspace protected that
way is accesible without any credentials. If I try to access the service
through the proxy i succesfully authenticate at the apache proxy but a
second password window appears from "Geoserver Realm". So Geoserver
seems to ask for credentials even the requested URL the proxy is
pointing at should be requestable without that.

Not sure about what happens here. Could it be that Geoservers sees the
authentication and tries to use it (even it is not necessary for the
requested url) but can not use it succesfully?

How to overcome this?

http://foo:8008/geoserver/bar/wfs?service=wfs&request=getCapabilities -> 200

https://proxy/geoserver-bar/wfs?service=wfs&request=getCapabilities ->
jumping between "apache basic auth" and "Geoserver Realm authentication"

Proxy-Chain-Auth is set Off.

Marco

--
Dr. Marco Lechner
Bundesamt fuer Strahlenschutz / Federal Office for Radiation Protection
SW2.1 Koordination Notfallschutzsysteme / Coordination Emergency Systems
Rosastrasse 9 | D-79098 Freiburg | Germany
mlechner@anonymised.com | +49 (0)3018 333 6724 | www.bfs.de

--
Hinweis zu Anhängen die auf .p7m/.p7c/.p7s oder .asc/.asc.sig enden:
Die .p7?- und .asc-Dateien sind ungefährliche Signaturdateien (digitale
Unterschriften).
In E-Mail-Clients mit S/MIME Konfiguration (.p7?) oder PGP-Erweiterung
(.asc) dienen sie zur:
- - Überprüfung des Absenders
- - Überprüfung einer evtl. Veränderung des Inhalts während der
Übermittlung über das Internet
Die Signaturdateien können ebenso dazu verwendet werden dem Absender
dieser Signatur eine E-Mail mit verschlüsseltem Inhalt zu senden.

In E-Mail-Clients ohne S/MIME Konfiguration oder PGP-Erweiterung
erscheinen die Dateien als Anhang und können ignoriert werden.

Sorry wrong list :slight_smile:

Am 24.05.2017 um 15:04 schrieb Dr. Marco Lechner:

Hi,

we are running a trestinstance of Geoserver behind an apache proxy. The
apache proxy is configured to use simple basic auth with static
user:password credentials. the service of the workspace protected that
way is accesible without any credentials. If I try to access the service
through the proxy i succesfully authenticate at the apache proxy but a
second password window appears from "Geoserver Realm". So Geoserver
seems to ask for credentials even the requested URL the proxy is
pointing at should be requestable without that.

Not sure about what happens here. Could it be that Geoservers sees the
authentication and tries to use it (even it is not necessary for the
requested url) but can not use it succesfully?

How to overcome this?

http://foo:8008/geoserver/bar/wfs?service=wfs&request=getCapabilities -> 200

https://proxy/geoserver-bar/wfs?service=wfs&request=getCapabilities ->
jumping between "apache basic auth" and "Geoserver Realm authentication"

Proxy-Chain-Auth is set Off.

Marco

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork