[Geoserver-users] authenticating with basic auth

Hi

Please stay on the mailing list.

POST or PUT has no influence on the authentication protocol, using username and password as URL parameters is a bad practice and not supported officially.

  1. Add a new role TEST_ROLE to geoserver and add a new user TEST_USER
  2. protect the read access to the resource topp:city, users must have the role TEST_ROLE
  3. Open your browser and enter

http://mydomain/geoserver/wms?bbox=34.875,-62.5,32.3125,-55.5&Format=image/png&request=GetMap&layers=topp:city&width=250&height=250&srs=EPSG:4321
A login window must occur
4) Since you did not attach the TEST_ROLE to the TEST_USER, access denied is the answer.

Using PHP, look here for the code snippet
http://php.net/manual/en/features.http-auth.php

Now, add the role TEST_ROLE to the TEST_USER.

Close the browser, open it and retry. Things should work.

Cheers
Christian

···

On Thu, Oct 30, 2014 at 10:46 PM, <boliwe@anonymised.com> wrote:

You have answered a mail here: http://osgeo-org.1560.x6.nabble.com/authenticating-with-basic-auth-td5035587.html

(Call the services directly and add the “Authorization” header for EACH request. Geoserver does not create a session.)

I have same problem. I could not understand add “Authorization”.
I tried send request from browser like following but not worked.

http://mydomain/geoserver/wms?bbox=34.875,-62.5,32.3125,-55.5&Format=image/png&request=GetMap&layers=topp:city&width=250&height=250&srs=EPSG:4321&username=u1&password=p1

I created a PHP script and send POST request but did not worked.


Sent from http://osgeo-org.1560.x6.nabble.com

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH