[Geoserver-users] digest Authentication geoserver and Curl , not working

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the actual server for the different GetXXX operations, even though the GetCapabilities request was sent using URL of a proxy. Could someone tell me if there's a way to pre-set or impose these URLs in the Capabilities document? Thank you in advance!

Regards,
NV

Ciao,
I guess this is what you need:
http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 3:55 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the
actual server for the different GetXXX operations, even though the
GetCapabilities request was sent using URL of a proxy. Could someone
tell me if there's a way to pre-set or impose these URLs in the
Capabilities document? Thank you in advance!

Regards,
NV

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Hi Simone,

Thanks for quick reply! I've already tried that but it has no effect on the URLs in Capabilities document. I've tried with 2 versions with and without "geoserver" in the URL, e.g.:

http://proxy.com/

and

http://proxy.com/geoserver

Any further hint would be highly appreciated.

Best regards,
NV

On 12/7/2015 3:59 PM, Simone Giannecchini wrote:

Ciao,
I guess this is what you need:
http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 3:55 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the
actual server for the different GetXXX operations, even though the
GetCapabilities request was sent using URL of a proxy. Could someone
tell me if there's a way to pre-set or impose these URLs in the
Capabilities document? Thank you in advance!

Regards,
NV

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

This might help as well:

http://osgeo-org.1560.x6.nabble.com/GeoServer-behind-a-HTTP-Proxy-td5069332.html

We also need more info on your set up as well as geoserver version.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 4:08 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi Simone,

Thanks for quick reply! I've already tried that but it has no effect on the
URLs in Capabilities document. I've tried with 2 versions with and without
"geoserver" in the URL, e.g.:

http://proxy.com/

and

http://proxy.com/geoserver

Any further hint would be highly appreciated.

Best regards,
NV

On 12/7/2015 3:59 PM, Simone Giannecchini wrote:

Ciao,
I guess this is what you need:

http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 3:55 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the
actual server for the different GetXXX operations, even though the
GetCapabilities request was sent using URL of a proxy. Could someone
tell me if there's a way to pre-set or impose these URLs in the
Capabilities document? Thank you in advance!

Regards,
NV

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple
OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Thanks again for your help, Simone. I've been able to impose the Urls in WMS-Capabilities.

The reason why it didn't work at first was that I set the Proxy base Url in Global settings, but asked for the Capabilities document using a namespace Url. All I need to do is to actually set the Proxy Url in the corresponding Workspace.

Cheers,
NV

On 12/7/2015 4:15 PM, Simone Giannecchini wrote:

This might help as well:

http://osgeo-org.1560.x6.nabble.com/GeoServer-behind-a-HTTP-Proxy-td5069332.html

We also need more info on your set up as well as geoserver version.

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 4:08 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi Simone,

Thanks for quick reply! I've already tried that but it has no effect on the
URLs in Capabilities document. I've tried with 2 versions with and without
"geoserver" in the URL, e.g.:

http://proxy.com/

and

http://proxy.com/geoserver

Any further hint would be highly appreciated.

Best regards,
NV

On 12/7/2015 3:59 PM, Simone Giannecchini wrote:

Ciao,
I guess this is what you need:

http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 3:55 PM, Nhan Vo <nhanvo@anonymised.com> wrote:

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the
actual server for the different GetXXX operations, even though the
GetCapabilities request was sent using URL of a proxy. Could someone
tell me if there's a way to pre-set or impose these URLs in the
Capabilities document? Thank you in advance!

Regards,
NV

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple
OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

--

*Thanh-Trong-Nhan Vo*

smile consult GmbH
Vahrenwalder Straße 4
D-30165 Hannover

Tel:

0511/543617-46

Fax:

0511/543617-66

Mail:

nhanvo@anonymised.com <mailto:nhanvo@anonymised.com>

Internet:

http://www.smileconsult.de/&gt;

Geschäftsführer: Frank Sellerhoff •Peter Milbradt •Christoph Lippert
USt-IdNr.: DE208857046 •Amtsgericht Hannover HRB 58707

Grafik1.gif

Glad it worked and thanks for getting back to us with the reason and solution.

Grafik1.gif

···

On Tue, Dec 8, 2015 at 10:51 AM, Nhan Vo <nhanvo@anonymised.com> wrote:

Thanks again for your help, Simone. I’ve been able to impose the Urls in WMS-Capabilities.

The reason why it didn’t work at first was that I set the Proxy base Url in Global settings, but asked for the Capabilities document using a namespace Url. All I need to do is to actually set the Proxy Url in the corresponding Workspace.

Cheers,
NV

On 12/7/2015 4:15 PM, Simone Giannecchini wrote:

This might help as well:

[http://osgeo-org.1560.x6.nabble.com/GeoServer-behind-a-HTTP-Proxy-td5069332.html](http://osgeo-org.1560.x6.nabble.com/GeoServer-behind-a-HTTP-Proxy-td5069332.html)

We also need more info on your set up as well as geoserver version.

Regards,
Simone Giannecchini
==
GeoServer Professional Services from the experts!
Visit [http://goo.gl/it488V](http://goo.gl/it488V) for more information.
==
Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:     +39 0584 1660272
mob:   +39  333 8128928

[http://www.geo-solutions.it](http://www.geo-solutions.it)
[http://twitter.com/geosolutions_it](http://twitter.com/geosolutions_it)

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility  for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 4:08 PM, Nhan Vo [<nhanvo@anonymised.com>](mailto:nhanvo@anonymised.com) wrote:

Hi Simone,

Thanks for quick reply! I've already tried that but it has no effect on the
URLs in Capabilities document. I've tried with 2 versions with and without
"geoserver" in the URL, e.g.:

[http://proxy.com/](http://proxy.com/)

and

[http://proxy.com/geoserver](http://proxy.com/geoserver)

Any further hint would be highly appreciated.

Best regards,
NV

On 12/7/2015 3:59 PM, Simone Giannecchini wrote:

Ciao,
I guess this is what you need:

[http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url](http://docs.geoserver.org/latest/en/user/webadmin/server/globalsettings.html#proxy-base-url)

Regards,
Simone Giannecchini
==
GeoServer Professional Services from the experts!
Visit [http://goo.gl/it488V](http://goo.gl/it488V) for more information.
==
Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:     +39 0584 1660272
mob:   +39 333 8128928

[http://www.geo-solutions.it](http://www.geo-solutions.it)
[http://twitter.com/geosolutions_it](http://twitter.com/geosolutions_it)

-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility  for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.

On Mon, Dec 7, 2015 at 3:55 PM, Nhan Vo [<nhanvo@anonymised.com>](mailto:nhanvo@anonymised.com) wrote:

Hi list,

It seems that the WMS-Capabilities always contains the URLs to the
actual server for the different GetXXX operations, even though the
GetCapabilities request was sent using URL of a proxy. Could someone
tell me if there's a way to pre-set or impose these URLs in the
Capabilities document? Thank you in advance!

Regards,
NV

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple
OSs.
[http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140](http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140)
_______________________________________________
Geoserver-users mailing list
[Geoserver-users@lists.sourceforge.net](mailto:Geoserver-users@lists.sourceforge.net)
[https://lists.sourceforge.net/lists/listinfo/geoserver-users](https://lists.sourceforge.net/lists/listinfo/geoserver-users)





Thanh-Trong-Nhan Vo


smile consult GmbH
Vahrenwalder Straße 4
D-30165 Hannover









Tel:



0511/543617-46



Fax:



0511/543617-66



Mail:



nhanvo@anonymised.com



Internet:



http://www.smileconsult.de

Geschäftsführer: Frank Sellerhoff • Peter Milbradt • Christoph Lippert
USt-IdNr.: DE208857046 • Amtsgericht Hannover HRB 58707

Regards,
Simone Giannecchini

GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.

Ing. Simone Giannecchini
@simogeo
Founder/Director

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928

http://www.geo-solutions.it
http://twitter.com/geosolutions_it


AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.

Hi Pablo

GeoServer uses Spring Security for Digest Authentication. I had some similar Problems and a solution may be to update Spring Security. Unfortunately, this breaks other Authentication mechanisms.

A better Idea would be to use Basic Auth in combination with SSL. Do you have this possibility ?.

Cheers
Christian

···

On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pzader@anonymised.com> wrote:

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo


Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140


Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Hello Cristian.
At the moment, I have not the possibility to use SSL.

You could confirm whether digest authentication works well in the latest geoserver?

Cheers

Pablo

···

2015-12-27 13:48 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com5445…>:

Hi Pablo

GeoServer uses Spring Security for Digest Authentication. I had some similar Problems and a solution may be to update Spring Security. Unfortunately, this breaks other Authentication mechanisms.

A better Idea would be to use Basic Auth in combination with SSL. Do you have this possibility ?.

Cheers
Christian

On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pzader@anonymised.com> wrote:

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo


Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

Hi Pablo

The digest authentication code did not change during some GeoServer versions. Recently I had problems using chrome and digest auth. Which Servlet container are you using ?. You can try to use digest auth implemented in your servlet engine and use the J2EE authentication filter and configure the web.xml appropriately.

Cheers
Christian

···

On Mon, Dec 28, 2015 at 2:41 PM, pablo zader <pzader@anonymised.com> wrote:

Hello Cristian.
At the moment, I have not the possibility to use SSL.

You could confirm whether digest authentication works well in the latest geoserver?

Cheers

Pablo

2015-12-27 13:48 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

GeoServer uses Spring Security for Digest Authentication. I had some similar Problems and a solution may be to update Spring Security. Unfortunately, this breaks other Authentication mechanisms.

A better Idea would be to use Basic Auth in combination with SSL. Do you have this possibility ?.

Cheers
Christian

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pzader@anonymised.com> wrote:

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo


Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Hi Christian

Could you tell me where to find documentation to do this you say?

Cheers
Pablo

···

2015-12-29 13:23 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

The digest authentication code did not change during some GeoServer versions. Recently I had problems using chrome and digest auth. Which Servlet container are you using ?. You can try to use digest auth implemented in your servlet engine and use the J2EE authentication filter and configure the web.xml appropriately.

Cheers
Christian

On Mon, Dec 28, 2015 at 2:41 PM, pablo zader <pzader@anonymised.com> wrote:

Hello Cristian.
At the moment, I have not the possibility to use SSL.

You could confirm whether digest authentication works well in the latest geoserver?

Cheers

Pablo

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2015-12-27 13:48 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

GeoServer uses Spring Security for Digest Authentication. I had some similar Problems and a solution may be to update Spring Security. Unfortunately, this breaks other Authentication mechanisms.

A better Idea would be to use Basic Auth in combination with SSL. Do you have this possibility ?.

Cheers
Christian

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pzader@anonymised.com> wrote:

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo


Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

Hi Pablo

To be sure, did you change the Basic Authentication Filter to a new Digest Authentication Filter on the REST filter chain. (The filter chain with ANT pattern “rest/**”. If not, Digest Authentication could not work.

Cheers
Christian

···

On Wed, Dec 30, 2015 at 7:49 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Christian

Could you tell me where to find documentation to do this you say?

Cheers

Pablo

2015-12-29 13:23 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com…5445…>:

Hi Pablo

The digest authentication code did not change during some GeoServer versions. Recently I had problems using chrome and digest auth. Which Servlet container are you using ?. You can try to use digest auth implemented in your servlet engine and use the J2EE authentication filter and configure the web.xml appropriately.

Cheers
Christian

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Dec 28, 2015 at 2:41 PM, pablo zader <pzader@…84…> wrote:

Hello Cristian.
At the moment, I have not the possibility to use SSL.

You could confirm whether digest authentication works well in the latest geoserver?

Cheers

Pablo

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2015-12-27 13:48 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

GeoServer uses Spring Security for Digest Authentication. I had some similar Problems and a solution may be to update Spring Security. Unfortunately, this breaks other Authentication mechanisms.

A better Idea would be to use Basic Auth in combination with SSL. Do you have this possibility ?.

Cheers
Christian

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Dec 7, 2015 at 12:35 AM, pablo zader <pzader@anonymised.com> wrote:

Hi list

I want use digest authentication with Curl, but not working. I followed the steps outlined here

http://docs.geoserver.org/2.5.x/en/user/security/tutorials/digest/index.html

to configure security in geoserver digest.

I am using geoserver 2.5.2

Here the request with digest authentication:

curl --digest -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Digest with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 0

< HTTP/1.1 401 No Autorizado
< Server: Apache-Coyote/1.1
< WWW-Authenticate: Basic realm=“GeoServer Realm”
< Content-Type: text/html;charset=utf-8
< Content-Length: 1134
< Date: Sun, 06 Dec 2015 23:28:36 GMT
<

Apache Tomcat/6.0.35 - Informe de Error

Estado HTTP 401 - Full authentication is required to access this resource


type Informe de estado

mensaje Full authentication is required to access this resource

descripción Este requerimiento requiere autenticación HTTP (Full authentication is requir* Connection #0 to host localhost left intact * Closing connection #0 ed to access this resource).


Apache Tomcat/6.0.35

Here the request with basic authentication:

curl --basic -v -u admin:geoserver -XPUT -H ‘Content-type: image/tiff’ --data-binary @/home/pablo/mytiff.tif http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff

  • About to connect() to localhost port 8080 (#0)
  • Trying 127.0.0.1… connected
  • Server auth using Basic with user ‘admin’

PUT /geoserver/rest/workspaces/tiger/coveragestores/nbr/file.geotiff HTTP/1.1
Authorization: Basic YWRtaW46Z2Vvc2VydmVy
User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.7 libidn/1.23 librtmp/2.3
Host: localhost:8080
Accept: /
Content-type: image/tiff
Content-Length: 259826
Expect: 100-continue

< HTTP/1.1 100 Continue
< HTTP/1.1 201 Creado
< Date: Sun, 06 Dec 2015 23:34:51 GMT
< Server: Noelios-Restlet-Engine/1.0…8
< Content-Type: application/xml
< Transfer-Encoding: chunked
<

nbr
GeoTIFF
true

tiger
http://localhost:8080/geoserver/rest/workspaces/tiger.xml

<__default>false</__default>
file:data/tiger/nbr/nbr.geotiff

<atom:link xmlns:atom=“http://www.w3.org/2005/Atom” rel=“alternate” href=“http://localhost:8080/geoserver/rest/workspaces/tiger/coveragestores/nbr/file/coverages.xml” type=“application/xml”/>

  • Connection #0 to host localhost left intact
  • Closing connection #0

Thanks in advanced

Pablo


Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH