sorry - i forgot the list
---------- Weitergeleitete Nachricht ----------
Betreff: Re: [GeoNetwork-users] OGC CSW compliance
Datum: Montag 09 August 2010, 09:09:37
Von: Armin Retterath <armin.retterath@anonymised.com>
An: Wolfgang Grunberg <wgrunberg@anonymised.com>
hello together,
so why you don't use the standard http authentication (rfc 2617
http://www.ietf.org/rfc/rfc2617.txt)? this is very easy to implement and is a
standard way! normally this is implemented on base of the webserver, but it
can be implemented in the application too. geonetwork e.g. can use its user
database tables to authenticate against. if you want an more secure way use
digest authentication or/and https to send the authentication info over web.
we use this in our ows facade to restrict the access to wms and wfs to the
users which are authorized.
when talking http you should use the standard way to transmit authentication
info over http 
regards
armin
Am Freitag 06 August 2010, um 18:29:45 schrieben Sie:
I apologize for interjecting with a question to Andreas and Francois.
Do you know of any efforts or have suggestion for some form of
standardized authentication for CSW?
We are running into similar authentication problems when trying to
federate various CSW services (including ArcGIS GeoPortal ).Ciao, Wolfgang
_______________________________
Wolfgang Grunberg
Arizona Geological Survey
wgrunberg@anonymised.com
520-770-3500On 8/6/2010 4:32 AM, Andreas Poth wrote:
> Hi,
>
> thanx for fast response
>
>
> [...]
>
>>> I like to use GeoNetwork (2.4.3) as a OGC CSW but I have two problems
>>> performing transactions on it.
>>> 1) After authenticating against the server I send an INSERT request
>>> that is valid against OGC CSW 2.0.2 with a metadataset that is valid a
>>> gainst ISO 19139. The insert will be performed (the dataset is
>>> available through the catalogue) but an exception will be returned
>>> saying that the identifier is not unique (I ensured that it is).
>>> 2) I tried to performe a DELETE (after athentication) request as given
>>> below but no dataset has been deleted even if the filter condition
>>> matches for all datasets.
>>
>> Did you try the test.csw page ?
>
> Yes I did; INSERT works without problems but DELETE does not (I tried
> several constraints but nothing happend). But I must invoke GeoNetwork
> CSW interface with a Java program so I can not use test.csw page
>
>> Testing on current trunk (which should be similar for CSW to 2.4.3 I
>> think), it looks ok to insert/update/delete records.
>>
>>> 3 ) I did not manage to perform transactions without authentication. I
>>> had a look at the documentation and did not find informations about
>>> deactivating security/authentication.
>>
>> Not sure allowing everybody to add records to your catalogue is a good
>> idea. In GeoNetwork you need to authenticate to add a metadata record,
>> if you want to change that, you have to change the code in
>> csw.services.Transaction and probably change the db constraints also.
>
> This depends on the context. Our customer likes us to develope a CSW
> client that not just works with GeoNetworks. It should be able to handle
> deegree CSW, terra catalog and other OGC CSW compliant catalogs too. And
> this is a bit tricky if we need to integrate specific authentication
> mechanisms for different catalogue vendors.
> Have you ever thought of seperating security aspects into a facade that
> can be pluged in or be left away?
>
> best regards
>
> ANDREAS
>
>> Cheers.
>> Francois
>>
>>> Can you give me a hint what is wrong?
>>>
>>> <?xml version="1.0" encoding="UTF-8"?>
>>> <csw:Transaction service="CSW" version="2.0.2"
>>> xmlns:csw="http://www.opengis.net/cat/csw/2.0.2"
>>> xmlns:gml="http://www.opengis.net/gml"
>>> xmlns:ogc="http://www.opengis.net/ogc"
>>> xmlns:apiso="http://www.opengis.net/cat/csw/apiso/1.0">
>>>
>>> <csw:Delete>
>>>
>>> <csw:Constraint version="1.1.0">
>>>
>>> <ogc:Filter>
>>>
>>> <ogc:PropertyIsLike wildCard="%" singleChar="_"
>>>
>>> escapeChar="/">
>>>
>>> <ogc:PropertyName>apiso:identifier</ogc:PropertyNam
>>> e> <ogc:Literal>%</ogc:Literal>
>>>
>>> </ogc:PropertyIsLike>
>>>
>>> </ogc:Filter>
>>>
>>> </csw:Constraint>
>>>
>>> </csw:Delete>
>>>
>>> </csw:Transaction>
>>>
>>> best regards
>>>
>>> ANDREAS
>>>
>>> --
>>> Dr. Andreas Poth
>>>
>>> l a t / l o n GmbH
>>> Aennchenstrasse 19 53177 Bonn, Germany
>>> phone ++49 +228 18496-0 fax ++49 +228 18496-29
>>> http://www.lat-lon.de http://www.deegree.org
>>>
>>>
>>> -----------------------------------------------------------------------
>>> ------- This SF.net email is sponsored by
>>>
>>> Make an app they can't live without
>>> Enter the BlackBerry Developer Challenge
>>> http://p.sf.net/sfu/RIM-dev2dev
>>> _______________________________________________
>>> GeoNetwork-users mailing list
>>> GeoNetwork-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/geonetwork-users
>>> GeoNetwork OpenSource is maintained at
>>> http://sourceforge.net/projects/geonetwork---------------------------------------------------------------------------
--- This SF.net email is sponsored byMake an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev
_______________________________________________
GeoNetwork-users mailing list
GeoNetwork-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geonetwork-users
GeoNetwork OpenSource is maintained at
http://sourceforge.net/projects/geonetwork
--
Im Auftrag
--
Armin Retterath
Kompetenz- und Geschäftsstelle Geodateninfrastruktur Rheinland-Pfalz
beim
Landesamt für Vermessung und Geobasisinformation Rheinland-Pfalz
Ferdinand-Sauerbruch-Straße 15
56073 Koblenz
Telefon 0261/492-466
Telefax 0261/492-492
armin.retterath@anonymised.com
http://www.geoportal.rlp.de
-------------------------------------------------------------
--
Im Auftrag
--
Armin Retterath
Kompetenz- und Geschäftsstelle Geodateninfrastruktur Rheinland-Pfalz
beim
Landesamt für Vermessung und Geobasisinformation Rheinland-Pfalz
Ferdinand-Sauerbruch-Straße 15
56073 Koblenz
Telefon 0261/492-466
Telefax 0261/492-492
armin.retterath@anonymised.com
http://www.geoportal.rlp.de