[Geoserver-users] Best practices: Restrict access

GeoServer GeoServer User
1

I have an Ubuntu server with GeoServer v2.2.1 on TomCat7 and a Apache server with PHP5.

I’ve created several pages using OpenLaysers that show maps from Geoserver.
This is working great.

I now want to restrict access to my Geoserver data so that only my apache server can show the maps. I don’t want to set up user accounts because my web pages are accessible to everybody.

So everybody can go to my web pages and see the data. But nobody can access my Geoserver data directly.

Is this possible?

Thanks,

Paul

2

http://serverfault.com/questions/218666/how-to-configure-tomcat-to-only-listen-to-127-0-0-1

Op 28 nov. 2012 16:49 schreef “Paul Meems” <bontepaarden@anonymised.com> het volgende:

I have an Ubuntu server with GeoServer v2.2.1 on TomCat7 and a Apache server with PHP5.

I’ve created several pages using OpenLaysers that show maps from Geoserver.
This is working great.

I now want to restrict access to my Geoserver data so that only my apache server can show the maps. I don’t want to set up user accounts because my web pages are accessible to everybody.

So everybody can go to my web pages and see the data. But nobody can access my Geoserver data directly.

Is this possible?

Thanks,

Paul

Keep yourself connected to Go Parallel:
INSIGHTS What’s next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

3

Hi Paul,

You can use mod_proxy on apache.

http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypass

Set up a ProxyPass directive to forward requests from apache to GeoServer.
Of course you need to hide the Tomcat's http connector port, 8080 by
default, to avoid user accessing it.

Kind Regards,

Stefano
---------------------------------------------------
41.95581N 12.52854E

http://www.linkedin.com/in/stefanoiacovella

http://twitter.com/#!/Iacovellas

2012/11/28 Paul Meems <bontepaarden@anonymised.com>:

I have an Ubuntu server with GeoServer v2.2.1 on TomCat7 and a Apache server
with PHP5.

I've created several pages using OpenLaysers that show maps from Geoserver.
This is working great.

I now want to restrict access to my Geoserver data so that only my apache
server can show the maps. I don't want to set up user accounts because my
web pages are accessible to everybody.

So everybody can go to my web pages and see the data. But nobody can access
my Geoserver data directly.

Is this possible?

Thanks,

Paul

------------------------------------------------------------------------------
Keep yourself connected to Go Parallel:
INSIGHTS What's next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

4

You can use a firewall rule and restrict access to your geoserver port to the ip address of the box running apache.

As an example, you can use
https://help.ubuntu.com/8.04/serverguide/firewall.html

Christian

Zitat von Paul Meems <bontepaarden@anonymised.com>:

I have an Ubuntu server with GeoServer v2.2.1 on TomCat7 and a Apache
server with PHP5.

I've created several pages using OpenLaysers that show maps from Geoserver.
This is working great.

I now want to restrict access to my Geoserver data so that only my apache
server can show the maps. I don't want to set up user accounts because my
web pages are accessible to everybody.

So everybody can go to my web pages and see the data. But nobody can access
my Geoserver data directly.

Is this possible?

Thanks,

Paul

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

5

Thanks all for your quick responses.

I will look into each suggestion.

···

Regards,

Paul

2012/11/28 Stefano Iacovella <stefano.iacovella@anonymised.com>

Hi Paul,

You can use mod_proxy on apache.

http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxypass

Set up a ProxyPass directive to forward requests from apache to GeoServer.
Of course you need to hide the Tomcat’s http connector port, 8080 by
default, to avoid user accessing it.

Kind Regards,

Stefano

41.95581N 12.52854E

http://www.linkedin.com/in/stefanoiacovella

http://twitter.com/#!/Iacovellas

2012/11/28 Paul Meems <bontepaarden@anonymised.com>:

I have an Ubuntu server with GeoServer v2.2.1 on TomCat7 and a Apache server
with PHP5.

I’ve created several pages using OpenLaysers that show maps from Geoserver.
This is working great.

I now want to restrict access to my Geoserver data so that only my apache
server can show the maps. I don’t want to set up user accounts because my
web pages are accessible to everybody.

So everybody can go to my web pages and see the data. But nobody can access
my Geoserver data directly.

Is this possible?

Thanks,

Paul

Keep yourself connected to Go Parallel:
INSIGHTS What’s next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users