[Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody

Hi Melody

Do you see something in the log file ?

···

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

17 Oct 10:55:04 WARN [servlet.PageNotFound] - No mapping found for HTTP request with URI [/GeoServer/accessDenied.jsp] in DispatcherServlet with name ‘dispatcher’

Thanks,

Melody

···

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Thursday, October 17, 2013 2:03 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

Do you see something in the log file ?

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

Hi Melody

What is the content of

<GEOSERVER_DATA_DR>/security/rest.properties.

Cheers

···

On Thu, Oct 17, 2013 at 4:55 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

17 Oct 10:55:04 WARN [servlet.PageNotFound] - No mapping found for HTTP request with URI [/GeoServer/accessDenied.jsp] in DispatcherServlet with name ‘dispatcher’

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Thursday, October 17, 2013 2:03 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

Do you see something in the log file ?

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

OK, I did not have the J2EE role in the rest.properties. I will need to look at the other property files and see which other ones I should add the J2EE role to. Any guidance if I want the J2EE role be able to add/update/see any layer/datastore/service etc.

Thanks,

Melody

···

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Friday, October 18, 2013 3:35 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

What is the content of

<GEOSERVER_DATA_DR>/security/rest.properties.

Cheers

On Thu, Oct 17, 2013 at 4:55 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

17 Oct 10:55:04 WARN [servlet.PageNotFound] - No mapping found for HTTP request with URI [/GeoServer/accessDenied.jsp] in DispatcherServlet with name ‘dispatcher’

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Thursday, October 17, 2013 2:03 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

Do you see something in the log file ?

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com508…> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

In your J2EE role filter config you have assigned a role service. Edit the role service and enter your J2EE role as admin role. This role mapped to ROLE_ADMINISTRATOR internally. As a consequence, users having your J2EE role have administrative privileges.

···

On Fri, Oct 18, 2013 at 3:54 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

OK, I did not have the J2EE role in the rest.properties. I will need to look at the other property files and see which other ones I should add the J2EE role to. Any guidance if I want the J2EE role be able to add/update/see any layer/datastore/service etc.

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Friday, October 18, 2013 3:35 AM

To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net

Subject: Re: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

What is the content of

<GEOSERVER_DATA_DR>/security/rest.properties.

Cheers

On Thu, Oct 17, 2013 at 4:55 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

17 Oct 10:55:04 WARN [servlet.PageNotFound] - No mapping found for HTTP request with URI [/GeoServer/accessDenied.jsp] in DispatcherServlet with name ‘dispatcher’

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Thursday, October 17, 2013 2:03 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

Do you see something in the log file ?

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

Thanks so much, that works.

Thanks,

Melody

···

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Friday, October 18, 2013 10:06 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

In your J2EE role filter config you have assigned a role service. Edit the role service and enter your J2EE role as admin role. This role mapped to ROLE_ADMINISTRATOR internally. As a consequence, users having your J2EE role have administrative privileges.

On Fri, Oct 18, 2013 at 3:54 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com> wrote:

OK, I did not have the J2EE role in the rest.properties. I will need to look at the other property files and see which other ones I should add the J2EE role to. Any guidance if I want the J2EE role be able to add/update/see any layer/datastore/service etc.

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Friday, October 18, 2013 3:35 AM

To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net

Subject: Re: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

What is the content of

<GEOSERVER_DATA_DR>/security/rest.properties.

Cheers

On Thu, Oct 17, 2013 at 4:55 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com508…> wrote:

17 Oct 10:55:04 WARN [servlet.PageNotFound] - No mapping found for HTTP request with URI [/GeoServer/accessDenied.jsp] in DispatcherServlet with name ‘dispatcher’

Thanks,

Melody

From: Christian Mueller [mailto:christian.mueller@anonymised.com]
Sent: Thursday, October 17, 2013 2:03 AM
To: Ballance, Melody (IS)
Cc: geoserver-users@lists.sourceforge.net
Subject: EXT :Re: [Geoserver-users] GeoServer 2.3.4 geoserver/rest/workspaces and SSL and J2EE login

Hi Melody

Do you see something in the log file ?

On Wed, Oct 16, 2013 at 9:05 PM, Ballance, Melody (IS) <melody.ballance@anonymised.com508…> wrote:

I have installed and configured GeoServer 2.3.4 on Oracle WebLogic server with SSL enabled. I have disabled all the authentication filters for all the filter chains except a newly create J2EE authentication filter. I can log into the system and add workspaces and such via the gui, but when trying with rest, it is not working. I get 404 errors when I even try to bring up the https://fqdn/geoserver/rest/workspaces/default.xml. Do you know why this maybe? Also, by having SSL and only J2EE authentication will this prevent others from creating workspaces using the restful way?

Thanks,
Melody


October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk


Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH

DI Christian Mueller MSc (GIS), MSc (IT-Security)

OSS Open Source Solutions GmbH