[Geoserver-users] "GeoServer Realm" authentication on WMS requests

GeoServer GeoServer User
1

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

2

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

···

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

3

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

config.xml (2.28 KB)

···

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

4

Hi Pablo

In your config.xml I see the following filter chain responsible for OGC requests:


basic
anonymous

The anonymous filter is still there. Did you delete the filter ?. Deleting a filter which is still listed on a filter chain is not possible except you modified the configuration directly on the file system.

Btw, you can remove anonymous manually and restart GeoServer, but you should make a backup of the original file.

Cheers
Christian

···

On Sat, Sep 20, 2014 at 7:52 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

5

Thanks Cris!

I resolved my problem, I did as you indicated.

I would like to return to the previous topic:
My WEBGIS application in chrome and IE works fine, but not Firefiox. In firefox asks me username and password but when I enter that data returns me the blank page (see image attached)

Please I need your help.

Thanks in advanded!!!

Pablo

bug12.png

···

2014-09-21 6:21 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

In your config.xml I see the following filter chain responsible for OGC requests:


basic
anonymous

The anonymous filter is still there. Did you delete the filter ?. Deleting a filter which is still listed on a filter chain is not possible except you modified the configuration directly on the file system.

Btw, you can remove anonymous manually and restart GeoServer, but you should make a backup of the original file.

Cheers
Christian

On Sat, Sep 20, 2014 at 7:52 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

6

Hi Pablo

I am not sure that I understand your problem.

Do you rely on the browser handling the basic authentication protocol or is the logic in your application ?.

Do you get popup login window only on Firefox ?.

Cheers
Christian

···

On Mon, Sep 22, 2014 at 2:52 AM, pablo zader <pzader@anonymised.com…> wrote:

Thanks Cris!

I resolved my problem, I did as you indicated.

I would like to return to the previous topic:
My WEBGIS application in chrome and IE works fine, but not Firefiox. In firefox asks me username and password but when I enter that data returns me the blank page (see image attached)

Please I need your help.

Thanks in advanded!!!

Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-21 6:21 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

In your config.xml I see the following filter chain responsible for OGC requests:


basic
anonymous

The anonymous filter is still there. Did you delete the filter ?. Deleting a filter which is still listed on a filter chain is not possible except you modified the configuration directly on the file system.

Btw, you can remove anonymous manually and restart GeoServer, but you should make a backup of the original file.

Cheers
Christian

On Sat, Sep 20, 2014 at 7:52 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

7

Hi Cris
Yes! just gives me the popup login window in firefox! but when I enter data (username and password), the application I get the blank window (attached before mail).
I’m using basic authentication through GeoExplorer and geoserver.

Using: geoserver 2.5.2
client: geoexplorer

Thanks !!

···

2014-09-22 5:03 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

I am not sure that I understand your problem.

Do you rely on the browser handling the basic authentication protocol or is the logic in your application ?.

Do you get popup login window only on Firefox ?.

Cheers
Christian

–

Pablo J. Zader
Lic. en Cs. de la Computación
CONAE
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Sep 22, 2014 at 2:52 AM, pablo zader <pzader@anonymised.com> wrote:

Thanks Cris!

I resolved my problem, I did as you indicated.

I would like to return to the previous topic:
My WEBGIS application in chrome and IE works fine, but not Firefiox. In firefox asks me username and password but when I enter that data returns me the blank page (see image attached)

Please I need your help.

Thanks in advanded!!!

Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-21 6:21 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

In your config.xml I see the following filter chain responsible for OGC requests:


basic
anonymous

The anonymous filter is still there. Did you delete the filter ?. Deleting a filter which is still listed on a filter chain is not possible except you modified the configuration directly on the file system.

Btw, you can remove anonymous manually and restart GeoServer, but you should make a backup of the original file.

Cheers
Christian

On Sat, Sep 20, 2014 at 7:52 PM, pablo zader <pzader@…84…> wrote:

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com…> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

8

Hi Pablo

I assume you log in as described here

http://suite.opengeo.org/4.1/geoexplorer/using/login.html

If I got it right, GeoExplorer challenges you for the credentials and authenticates you to GeoServer (Basic authentication).

Obviously, GeoExplorer has a problem with Firefox. Use a tool like HttpFox where you can inspect the HTTP header attributes.

In the request, check for

Authorization: Basic …

I think this header attribute is missing in Firefox, bot not in IE and Chrome.

Cheers
Christian.

···

On Mon, Sep 22, 2014 at 5:48 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Cris
Yes! just gives me the popup login window in firefox! but when I enter data (username and password), the application I get the blank window (attached before mail).
I’m using basic authentication through GeoExplorer and geoserver.

Using: geoserver 2.5.2
client: geoexplorer

Thanks !!

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-22 5:03 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

I am not sure that I understand your problem.

Do you rely on the browser handling the basic authentication protocol or is the logic in your application ?.

Do you get popup login window only on Firefox ?.

Cheers
Christian

–

Pablo J. Zader
Lic. en Cs. de la Computación
CONAE
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

On Mon, Sep 22, 2014 at 2:52 AM, pablo zader <pzader@anonymised.com> wrote:

Thanks Cris!

I resolved my problem, I did as you indicated.

I would like to return to the previous topic:
My WEBGIS application in chrome and IE works fine, but not Firefiox. In firefox asks me username and password but when I enter that data returns me the blank page (see image attached)

Please I need your help.

Thanks in advanded!!!

Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-21 6:21 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

In your config.xml I see the following filter chain responsible for OGC requests:


basic
anonymous

The anonymous filter is still there. Did you delete the filter ?. Deleting a filter which is still listed on a filter chain is not possible except you modified the configuration directly on the file system.

Btw, you can remove anonymous manually and restart GeoServer, but you should make a backup of the original file.

Cheers
Christian

On Sat, Sep 20, 2014 at 7:52 PM, pablo zader <pzader@anonymised.com> wrote:

Hi Chris

Sorry, “open my application” just trying say that when I load my application fails in firefox , whereas if I do it in chrome or IE it does not. I’m using my GeoExplorer application and it uses basic authentication.

I delete Anonymous authentication from Authentication Filters because I do not want a user without authentication to access the preview layer that provides the adminitrative interface geoserver.

Attached my config.xml.

Thanks
Pablo

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

2014-09-20 6:33 GMT-03:00 Christian Mueller <christian.mueller@anonymised.com>:

Hi Pablo

What do you mean with “open my application”. Does this mean that you want to grant public access to all GeoServer services. (except the admin interface, of course).

Did you change some security settings ?. The behavior of Firefox indicates an HTTP basic authentication. Do you have the anonymous authentication filter in your default filter chain.

If it is easier for you, you can send me your config.xml file located in the GEOSERVER_DATA_DIR/security folder.

Cheers
Christian

On Sat, Sep 20, 2014 at 12:55 AM, pablo zader <pzader@anonymised.com> wrote:

HI list

I’m trying to open my application but it gives me error with firefox, not so with google chrome and IE.

I try this query :

http://mydomain/geoserver/wms?service=WMS&request=GetCapabilities

in firefox asks me username and password (open window “geoserver realm”) , but in chrome and EI work well!

My version of chrome Versión 33.0.1750.117
my version of firefox 27.0.1
SO: Ubuntu 12.04 LTS

Thanks in advanced

Pablo

Slashdot TV. Video for Nerds. Stuff that Matters.
http://pubads.g.doubleclick.net/gampad/clk?id=160591471&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH