Hello people, i founf a way to login to geoserver 2.3.2, and work perfectly, here it is,i share it with you,
1- go to geoserver admin interface and
2- go to Authentication section
3-go to the filter chain section
4-click on webLogin link
5- enable the check mark "Allow creation of an HTTP session for storing the authentication token"
6-click on close
7-then on save button
and that's all
then from php using the following 3 functions you can get access to geoserver 2.3.2,these are the 3 functions:
//----------------------------------------------------------
public static function ExtraerFrase($separador1,$separador2,$cadena)
{
if(strpos($cadena,$separador1)!==false)
{
$pos=strpos($cadena,$separador1);
$a=substr($cadena,$pos+strlen($separador1));
if(strpos($a,$separador2)!==false)
{
$npos=strpos($a,$separador2);
$b=substr($a,0,$npos);
return $b;
}
else
return $a;
}
else
return false;
}
public static function loginGeoserver($username, $password)
{
$logfh = fopen("GeoserverPHP.log", 'w') or die("can't open log file");
$post_data['username'] = $username;
$post_data['password'] = $password;
foreach ($post_data as $key => $value) {
$post_items = $key . '=' . $value;
}
$post_string = implode('&', $post_items);
$curl_connection = curl_init('http://' . master::$host .
'/geoserver/j_spring_security_check');
curl_setopt($curl_connection, CURLOPT_HEADER ,1);
curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true); //option to return string
curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($curl_connection, CURLOPT_VERBOSE, true);
curl_setopt($curl_connection, CURLOPT_STDERR, $logfh); // logs curl messages
curl_setopt($curl_connection, CURLOPT_POST, True);
curl_setopt($curl_connection, CURLOPT_POSTFIELDS, $post_string);
$result = curl_exec($curl_connection);
$arrInfo = curl_getinfo($curl_connection);
$successCode = 201;
$url = $arrInfo['url'];
if ($arrInfo['http_code'] != $successCode) {
$msgStr = "# Unsuccessful cURL request to ";
$msgStr .= $url." [". $arrInfo['http_code']. "]\n";
fwrite($logfh, $msgStr);
} else {
$msgStr = "# Successful cURL request to ".$url."\n";
fwrite($logfh, $msgStr);
}
fwrite($logfh, $result."\n");
//curl_close($curl_connection);
fclose($logfh); // close logfile
parse_str($url, $output);
$trans = array("." => "_");
$base = strtr(master::$host, $trans);
if (master::getLoggedUser() != null) {
if (master::getLoggedUser()->tieneRol("Operador"))
$str = "http://" . $base . "/geoserver/web/;jsessionid";
$str = "http://" . $base . "/geoserver/;jsessionid";
curl_close($curl_connection);
if (!empty($output[$str])) {
} else {
header('Location: /personal/index.php?page=inicio&Error=GeoserverDown');
}
setcookie('JSESSIONID', master::ExtraerFrase("JSESSIONID=",";",$result), 0, '/geoserver');
setcookie('JSESSIONID', master::ExtraerFrase("JSESSIONID=",";",$result), 0, '/');
} else {
return null;
}
}
public static function logoutGeoserver()
{
$curl_connection = curl_init('http://' . master::$host .
'/geoserver/j_spring_security_logout');
curl_setopt($curl_connection, CURLOPT_HTTPGET, true);
curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30);
curl_setopt($curl_connection, CURLOPT_USERAGENT,
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)");
curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl_connection, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($curl_connection, CURLOPT_COOKIE, 'JSESSIONID=' . $_COOKIE['JSESSIONID']);
curl_setopt($curl_connection, CURLOPT_POSTFIELDS, '');
$result = curl_exec($curl_connection);
curl_close($curl_connection);
setcookie('JSESSIONID', '', time() - 3600, '/geoserver');
setcookie('JSESSIONID', '', time() - 3600, '/');
}
//-----------------------------------------------------------
Thanks to all
islanis@anonymised.com escribió:
hello people, i worked all the night and i get this, when i use curl
fromm the console in this way, i get the following
//-----------------------------------------------------------------------------------------------
F:\>curl -v -d "username=admin&password=123456"
http://localhost/geoserver/j_spring_security_check
* Adding handle: conn: 0x720948
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x720948) send_pipe: 1, recv_pipe: 0
* About to connect() to localhost port 80 (#0)
* Trying ::1...
* Connected to localhost (::1) port 80 (#0)
POST /geoserver/j_spring_security_check HTTP/1.1
User-Agent: curl/7.30.0
Host: localhost
Accept: */*
Content-Length: 32
Content-Type: application/x-www-form-urlencoded
* upload completely sent off: 32 out of 32 bytes
< HTTP/1.1 302 Found
< Date: Tue, 18 Jun 2013 05:35:42 GMT
* Server Jetty(6.1.8) is not blacklisted
< Server: Jetty(6.1.8)
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< Location: http://localhost/geoserver/web
< Content-Length: 0
< Set-Cookie: JSESSIONID=1wscsu7aqv0f7;Path=/geoserver
<
* Connection #0 to host localhost left intact
//-----------------------------------------------------------------------------------------------
and when i create a session with this JSESSIONID content that return
this it works, i do this with firebug, but with the function it get
different JSESSIONID, i dont know what to do , cause my function is
fine and the log file of my function write this in the file
GeoserverPHP.log:
//-----------------------------------------------------------------------------------------------
* About to connect() to localhost port 80 (#0)
* Trying 127.0.0.1...
* connected
* Connected to localhost (127.0.0.1) port 80 (#0)
POST /geoserver/j_spring_security_check HTTP/1.1
Host: localhost
Accept: */*
Content-type: application/x-www-form-urlencoded
Content-length: 37
* upload completely sent off: 37 out of 37 bytes
< HTTP/1.1 302 Found
< Date: Tue, 18 Jun 2013 07:47:53 GMT
< Server: Jetty(6.1.8)
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< Location: http://localhost/geoserver/web
< Content-Length: 0
< Set-Cookie: JSESSIONID=1qjoy35u1w0ly;Path=/geoserver
<
* Connection #0 to host localhost left intact
# Unsuccessful cURL request to
http://localhost/geoserver/j_spring_security_check [302]
* Closing connection #0
//-----------------------------------------------------------------------------------------------
and the function is this:
//-----------------------------------------------------------------------------------------------
public static function loginGeoserver($username, $password)
{
$logfh = fopen("GeoserverPHP.log", 'w') or die("can't open log file");
$post_data['username'] = $username;
$post_data['password'] = $password;
foreach ($post_data as $key => $value) {
$post_items = $key . '=' . $value;
}
$post_string = implode('&', $post_items);
$curl_connection = curl_init('http://' . master::$host .
'/geoserver/j_spring_security_check');
// Optional settings for debugging
curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30);
/*curl_setopt($curl_connection, CURLOPT_USERAGENT,
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)");
*/
curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true);
//option to return string
//curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($curl_connection, CURLOPT_VERBOSE, true);
curl_setopt($curl_connection, CURLOPT_STDERR, $logfh); //
logs curl messages
curl_setopt($curl_connection,
CURLOPT_HTTPHEADER,array("Content-type:
application/x-www-form-urlencoded", "Content-length:
".strlen($post_string)));
/*curl_setopt($curl_connection, CURLOPT_HTTPHEADER,
array("Content-type: application/xml"));
*/
curl_setopt($curl_connection, CURLOPT_POST, True);
/*$passwordStr = "admin:master32";
curl_setopt($curl_connection, CURLOPT_USERPWD, $passwordStr);*/
curl_setopt($curl_connection, CURLOPT_POSTFIELDS, $post_string);
//curl_setopt($curl_connection, CURLOPT_POSTFIELDS,
"username=admin&password=master32");
$result = curl_exec($curl_connection);
$arrInfo = curl_getinfo($curl_connection);
$successCode = 201;
$url = $arrInfo['url'];
if ($arrInfo['http_code'] != $successCode) {
$msgStr = "# Unsuccessful cURL request to ";
$msgStr .= $url." [". $arrInfo['http_code']. "]\n";
fwrite($logfh, $msgStr);
} else {
$msgStr = "# Successful cURL request to ".$url."\n";
fwrite($logfh, $msgStr);
}
fwrite($logfh, $result."\n");
curl_close($curl_connection);
fclose($logfh); // close logfile
//ini_set("user_agent", "Mozilla/5.0 (Windows; U; Windows NT 5.1;
rv:1.7.3) Gecko/20041001 Firefox/0.10.1");
$headers = get_headers($arrInfo['url']);
print_r($arrInfo);
print_r("\n");
die(print_r($headers));
parse_str($url, $output);
$trans = array("." => "_");
$base = strtr(master::$host, $trans);
if (master::getLoggedUser() != null) {
if (master::getLoggedUser()->tieneRol("Operador"))
$str = "http://" . $base . "/geoserver/web/;jsessionid";
$str = "http://" . $base . "/geoserver/;jsessionid";
curl_close($curl_connection);
if (!empty($output[$str])) {
} else {
//header('Location:
/geoportal/index.php?page=home.home&Error=GeoserverDown');
header('Location: /personal/index.php?page=inicio&Error=GeoserverDown');
}
setcookie('JSESSIONID', $output[$str], 0, '/geoserver');
setcookie('JSESSIONID', $output[$str], 0, '/');
} else {
return null;
}
}
//-----------------------------------------------------------------------------
and i get this when in php the process die() to see the content of the
variables:
//-------------------------------------------------------------------------------
Array ( [url] => http://localhost/geoserver/j_spring_security_check
[content_type] => [http_code] => 302 [header_size] => 236
[request_size] => 188 [filetime] => -1 [ssl_verify_result] => 0
[redirect_count] => 0 [total_time] => 0 [namelookup_time] => 0
[connect_time] => 0 [pretransfer_time] => 0 [size_upload] => 37
[size_download] => 0 [speed_download] => 0 [speed_upload] => 37
[download_content_length] => 0 [upload_content_length] => 37
[starttransfer_time] => 0 [redirect_time] => 0
[certinfo] => Array ( ) [primary_ip] => 127.0.0.1 [primary_port] =>
80 [local_ip] => 127.0.0.1 [local_port] => 1408
[redirect_url] => http://localhost/geoserver/web )
Array ( [0] => HTTP/1.1 302 Found [1] => Date: Tue, 18 Jun 2013 07:47:53 GMT
[2] => Server: Jetty(6.1.8) [3] => Expires: Thu, 01 Jan 1970 00:00:00 GMT
[4] => Location:
http://localhost/geoserver/web/;jsessionid=1npqa4o5dsm7u?wicket:bookmarkablePage=:org.geoserver.web.GeoServerLoginPage&error=true [5] => Content-Length:
[6] => Set-Cookie:
SPRING_SECURITY_REMEMBER_ME_COOKIE=;Path=/geoserver;Expires=Thu, 01
Jan 1970 00:00:00 GMT [7] => Set-Cookie:
JSESSIONID=1npqa4o5dsm7u;Path=/geoserver
[8] => Connection: close [9] => HTTP/1.1 200 OK [10] => Date: Tue,
18 Jun 2013 07:47:53 GMT [11] => Server: Jetty(6.1.8) [12] =>
Content-Type: text/html; charset=utf-8
[13] => Content-Language: es-ES [14] => Pragma: no-cache [15] =>
Cache-Control: no-cache, max-age=0, must-revalidate, no-store [16] =>
Content-Length: 5246
[17] => Connection: close ) 1
//--------------------------------------------------------------------------------
help me please
islanis@anonymised.com escribió:
Wow, uffff, so, what gonna happen now, i need a way to log in the
users, and i need this version cause in this version the Direct
integration with GeoServer WMS of GWC is working fine, and i need it,
please is there another way to grant access or creation of session
from php, i need that cause in a few days i have to discuss my project
and i need the fast solution that comes with the use of GWC, please help
this is my php function:
//---------------------------------
public static function loginGeoserver($username, $password)
{
$post_data['username'] = $username;
$post_data['password'] = $password;
foreach ($post_data as $key => $value) {
$post_items = $key . '=' . $value;
}
$post_string = implode('&', $post_items);
$curl_connection = curl_init('http://' . master::$host .
'/geoserver/j_spring_security_check');
curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30);
curl_setopt($curl_connection, CURLOPT_USERAGENT,
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)");
curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl_connection, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1);
//curl_setopt($curl_connection,
CURLOPT_HTTPHEADER,array("HTTPHeader: ".$username));
curl_setopt($curl_connection, CURLOPT_POSTFIELDS, $post_string);
$result = curl_exec($curl_connection);
$arrInfo = curl_getinfo($curl_connection);
die(print_r($arrInfo));
$url = $arrInfo['url'];
parse_str($url, $output);
$trans = array("." => "_");
$base = strtr(master::$host, $trans);
if (master::getLoggedUser() != null) {
if (master::getLoggedUser()->tieneRol("Operador"))
$str = "http://" . $base . "/geoserver/web/;jsessionid";
$str = "http://" . $base . "/geoserver/;jsessionid";
curl_close($curl_connection);
if (!empty($output[$str])) {
} else {
//header('Location:
/geoportal/index.php?page=home.home&Error=GeoserverDown');
header('Location: /personal/index.php?page=inicio&Error=GeoserverDown');
}
setcookie('JSESSIONID', $output[$str], 0, '/geoserver');
setcookie('JSESSIONID', $output[$str], 0, '/');
} else {
return null;
}
}
//---------------------------------
, and i put a break to see what the transaction return and i get :
//-------------------------------------------
Array ( [url] => http://localhost/geoserver/web/ [content_type] =>
text/html; charset=utf-8 [http_code] => 200 [header_size] => 718
[request_size] => 503 [filetime] => -1 [ssl_verify_result] => 0
[redirect_count] => 2 [total_time] => 0.016 [namelookup_time] => 0
[connect_time] => 0 [pretransfer_time] => 0 [size_upload] => 0
[size_download] => 7991 [speed_download] => 499437 [speed_upload] => 0
[download_content_length] => 7991 [upload_content_length] => 0
[starttransfer_time] => 0.016 [redirect_time] => 0 [certinfo] => Array
( ) [primary_ip] => 127.0.0.1 [primary_port] => 80 [local_ip] =>
127.0.0.1 [local_port] => 1176 [redirect_url] => ) 1
please i need help, thanks to all
"Christian Mueller" <christian.mueller@anonymised.com> escribió:
Hi Thomas
Long story for short, you detected a bug. Can you open a JIRA issue and
copy/paste your description (step 1 - 4).
There should be an HTTP session but there is none. I looked a the code and
can confirm your observations.
I will fix this ASAP.
2013/6/17 Thomas Colley <it087@anonymised.com>
Thanks for your reply Christian.****
** **
**1) **The pink tiles are due to Geoserver returning a "could not
find layer" message as Catalog Mode under Data Security was set
to HIDE. If
I change Catalog Mode to CHALLENGE instead of pink tiles I get the 401
challenge prompt. ****
** **
**2) **That makes sense, I was on completely the wrong track with
Remember Me, it was just a guess.****
** **
**3) **Removing the anonymous filter would not be ideal as the way
I was hoping it would work is users with access to restricted layers would
authenticate via proxy and everyone else would fallback to
anonymous access
(anonymous has always been below proxy in the chain). However I have tried
removing anonymous from the filter chain and it doesn't fix the problem.**
**
** **
The problem seems to be that although I have HTTP session creation allowed
on the default chain the getcapabilities request containing the header is
not creating a session. I can see this by monitoring the Tomcat
manager. If
I log in to the Geoserver admin interface a session is created and while
still logged in the mapping application works fine. As soon as I
log out of
admin page the restricted map layers break.****
** **
Here is the exact process:****
** **
**1) **Openlayers page loads and submits a getcapabilities request
with HTTP header added.****
**2) **WMS layer tree is displayed showing the correct restricted
layers (data is restricted at a workspace level in Geoserver) so
authentication has definitely been successful at this point.****
**3) **Checking Tomcat manager no session has been created****
**4) **Trying to load a restricted layer from this list results in
either "can't find layer" error (pink tiles) or 401 prompt depending on
Geoserver setting.****
** **
So it appears that for some reason even though I am sending a request with
header that is getting successfully authenticated (step 2) a
session is not
being created.****
** **
Thanks again for your help****
** **
Tom****
** **
****
*From:* Christian Mueller [mailto:christian.mueller@anonymised.com]
*Sent:* 15 June 2013 15:38
*To:* Thomas Colley
*Cc:* geoserver-users@lists.sourceforge.net
*Subject:* Re: [Geoserver-users] Geoserver Header Auth****
** **
Hi Thomas****
** **
About your questions****
** **
1) Adding a layer and getting pink tiles****
No idea here, adding a layer has nothing to do with authentication, could
you reproduce this problem using the default security configuration ?****
** **
2) The remember me service works only with http basic auth and form based
login. Why ?. The remeber me services uses a cookie and stores a digested
representation of the password as cookie value (along with the user id) .
Header authentication uses no password --> no remember me service.****
** **
3) Your filter chain****
You have a proxy and the anonymous filter. The last filter in the chain
determines the authentication entry point (e.g. redirecting the browser to
a login form). The anonymous filter has no authentication entry point
because it always logs you in as "anonymous" successfully. If you use an
anonymous filter, the filter has to be the last filter in the chain. A
filter behind the anonymous filter will never be used.****
** **
You have HTTP session creation enabled. I assume you send the http header
once and use the session cookie for subsequent requests. This may be
problematic in case of a session time out because you are logged in again
as anonymous "automatically". Remove the anonymous filter if this is
possible in your scenario. Upon session time out, you must log in again.**
**
** **
If you cannot remove the anonymous filter, you have to send the http
header attribute in each request which requires authentication,
there is no
other solution. In this scenario, you can disable session creation.****
** **
Hope this helps****
Christian****
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
--
Este mensaje le ha llegado mediante el servicio de correo
electronico que ofrece Infomed para respaldar el cumplimiento de las
misiones del Sistema Nacional de Salud. La persona que envia este
correo asume el compromiso de usar el servicio a tales fines y
cumplir con las regulaciones establecidas
Infomed: http://www.sld.cu/
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
--
Este mensaje le ha llegado mediante el servicio de correo
electronico que ofrece Infomed para respaldar el cumplimiento de las
misiones del Sistema Nacional de Salud. La persona que envia este
correo asume el compromiso de usar el servicio a tales fines y
cumplir con las regulaciones establecidas
Infomed: http://www.sld.cu/
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
--
Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas
Infomed: http://www.sld.cu/
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
--
Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas
Infomed: http://www.sld.cu/