[Geoserver-users] Geoserver REST layer security

Lucas_Heezen_Covadis · November 10, 2011, 8:35am

Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

I’ve found this URL (http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but this seems not work in geoserver 2.1.2.

···

Met vriendelijke groet,
Lucas Heezen

Covadis b.v.

t: 026 3616600

Geograaf 12

f: 026 3612317

6921 EW Duiven

e: heezen@anonymised.com

Andrea_Aime4 · November 10, 2011, 9:20am

On Thu, Nov 10, 2011 at 9:35 AM, Lucas Heezen - Covadis <heezen@anonymised.com…4103…> wrote:

Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

Not that I know of.

I’ve found this URL (http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but this seems not work in geoserver 2.1.2.

That was a R&D page describing a module that never got implemented

Cheers
Andrea

–

Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

Lucas_Heezen_Covadis · November 10, 2011, 9:50am

Ok, is there any development on this part or is there some other solution to get this working ?

···

Met vriendelijke groet,
Lucas Heezen

Covadis b.v.

t: 026 3616600

Geograaf 12

f: 026 3612317

6921 EW Duiven

e: heezen@anonymised.com

Van: andrea.aime@anonymised.com [mailto:andrea.aime@anonymised.com] Namens Andrea Aime
Verzonden: donderdag 10 november 2011 10:20
Aan: Lucas Heezen - Covadis
CC: geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

On Thu, Nov 10, 2011 at 9:35 AM, Lucas Heezen - Covadis <heezen@anonymised.com> wrote:

Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

Not that I know of.

I’ve found this URL (http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but this seems not work in geoserver 2.1.2.

That was a R&D page describing a module that never got implemented

Cheers

Andrea

–

Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

Christian_Mueller · November 10, 2011, 12:42pm

Hi, there are 2 developers working hard on a new security subsystem (Justin and me) and the REST API is on the TODO list. Unfortunately, you cannot expect these features in the near future. Surely not in 2.1.x series.

As a workaround, I would do the following.

Look at GEOSERVER_DATA_DIR/security. There are three java property files:

user.properties, layer.properties and service.properties.

The structure is quite simple. You can generate these 3 files instead of making
REST requests. Stop geoserver, copy these files in the location mentioned above, restart geoserver, finish.

Cheers
Christian

Zitat von Lucas Heezen - Covadis <heezen@anonymised.com>:

Ok, is there any development on this part or is there some other solution to get this working ?

Met vriendelijke groet,
Lucas Heezen

[Beschrijving: http://www.covadis.nl/emailkop/logo.gif\]

Covadis b.v.

t: 026 3616600

Geograaf 12

f: 026 3612317

6921 EW Duiven

e: heezen@anonymised.com<mailto:heezen@anonymised.com>

Van: andrea.aime@anonymised.com [mailto:andrea.aime@anonymised.com] Namens Andrea Aime
Verzonden: donderdag 10 november 2011 10:20
Aan: Lucas Heezen - Covadis
CC: geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

On Thu, Nov 10, 2011 at 9:35 AM, Lucas Heezen - Covadis <heezen@anonymised.com<mailto:heezen@anonymised.com>> wrote:
Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

Not that I know of.

I've found this URL (http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but this seems not work in geoserver 2.1.2.

That was a R&D page describing a module that never got implemented

Cheers
Andrea

--
-------------------------------------------------------
Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

-------------------------------------------------------

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Lucas_Heezen_Covadis · November 10, 2011, 1:23pm

Then we are going to do that. Can these files be edited real time of do we need to restart geoserver after modification?

Met vriendelijke groet,
Lucas Heezen

Covadis b.v.
t: 026 3616600

Geograaf 12
f: 026 3612317

6921 EW Duiven
e: heezen@anonymised.com

-----Oorspronkelijk bericht-----
Van: christian.mueller@anonymised.com [mailto:christian.mueller@anonymised.com]
Verzonden: donderdag 10 november 2011 13:43
Aan: Lucas Heezen - Covadis
CC: Andrea Aime; geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

Hi, there are 2 developers working hard on a new security subsystem (Justin and me) and the REST API is on the TODO list. Unfortunately, you cannot expect these features in the near future. Surely not in 2.1.x series.

As a workaround, I would do the following.

Look at GEOSERVER_DATA_DIR/security. There are three java property files:

user.properties, layer.properties and service.properties.

The structure is quite simple. You can generate these 3 files instead of making REST requests. Stop geoserver, copy these files in the location mentioned above, restart geoserver, finish.

Cheers
Christian

Zitat von Lucas Heezen - Covadis <heezen@anonymised.com>:

Ok, is there any development on this part or is there some other
solution to get this working ?

Met vriendelijke groet,
Lucas Heezen

[Beschrijving: http://www.covadis.nl/emailkop/logo.gif\]

Covadis b.v.

t: 026 3616600

Geograaf 12

f: 026 3612317

6921 EW Duiven

e: heezen@anonymised.com<mailto:heezen@anonymised.com>

Van: andrea.aime@anonymised.com [mailto:andrea.aime@anonymised.com] Namens
Andrea Aime
Verzonden: donderdag 10 november 2011 10:20
Aan: Lucas Heezen - Covadis
CC: geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

On Thu, Nov 10, 2011 at 9:35 AM, Lucas Heezen - Covadis
<heezen@anonymised.com<mailto:heezen@anonymised.com>> wrote:
Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

Not that I know of.

I've found this URL
(http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but
this seems not work in geoserver 2.1.2.

That was a R&D page describing a module that never got implemented

Cheers
Andrea

--
-------------------------------------------------------
Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

-------------------------------------------------------

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Christian_Mueller · November 10, 2011, 1:31pm

As far as I can remember there is a file watcher, if one of these files changes, it will be reloaded. But you have to try to be sure.

Another hint: if you modify one of these files the changes may have no effect on already authenticated users.

Cheers
Christian

Zitat von Lucas Heezen - Covadis <heezen@anonymised.com>:

Then we are going to do that. Can these files be edited real time of do we need to restart geoserver after modification?

Met vriendelijke groet,
Lucas Heezen

Covadis b.v.
t: 026 3616600

Geograaf 12
f: 026 3612317

6921 EW Duiven
e: heezen@anonymised.com

-----Oorspronkelijk bericht-----
Van: christian.mueller@anonymised.com [mailto:christian.mueller@anonymised.com]
Verzonden: donderdag 10 november 2011 13:43
Aan: Lucas Heezen - Covadis
CC: Andrea Aime; geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

Hi, there are 2 developers working hard on a new security subsystem (Justin and me) and the REST API is on the TODO list. Unfortunately, you cannot expect these features in the near future. Surely not in 2.1.x series.

As a workaround, I would do the following.

Look at GEOSERVER_DATA_DIR/security. There are three java property files:

user.properties, layer.properties and service.properties.

The structure is quite simple. You can generate these 3 files instead of making REST requests. Stop geoserver, copy these files in the location mentioned above, restart geoserver, finish.

Cheers
Christian

Zitat von Lucas Heezen - Covadis <heezen@anonymised.com>:

Ok, is there any development on this part or is there some other
solution to get this working ?

Met vriendelijke groet,
Lucas Heezen

[Beschrijving: http://www.covadis.nl/emailkop/logo.gif\]

Covadis b.v.

t: 026 3616600

Geograaf 12

f: 026 3612317

6921 EW Duiven

e: heezen@anonymised.com<mailto:heezen@anonymised.com>

Van: andrea.aime@anonymised.com [mailto:andrea.aime@anonymised.com] Namens
Andrea Aime
Verzonden: donderdag 10 november 2011 10:20
Aan: Lucas Heezen - Covadis
CC: geoserver-users@lists.sourceforge.net
Onderwerp: Re: [Geoserver-users] Geoserver REST layer security

On Thu, Nov 10, 2011 at 9:35 AM, Lucas Heezen - Covadis
<heezen@anonymised.com<mailto:heezen@anonymised.com>> wrote:
Hello,

Is it possible to add a user to geoserver and secure some layers with REST?

Not that I know of.

I've found this URL
(http://geoserver.org/display/GEOS/User+Collaboration+REST+API) but
this seems not work in geoserver 2.1.2.

That was a R&D page describing a module that never got implemented

Cheers
Andrea

--
-------------------------------------------------------
Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf

-------------------------------------------------------

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Andrea_Aime4 · November 10, 2011, 1:33pm

On Thu, Nov 10, 2011 at 1:42 PM, <christian.mueller@anonymised.com…1968…> wrote:

Hi, there are 2 developers working hard on a new security subsystem (Justin and me) and the REST API is on the TODO list. Unfortunately, you cannot expect these features in the near future. Surely not in 2.1.x series.

As a workaround, I would do the following.

Look at GEOSERVER_DATA_DIR/security. There are three java property files:

user.properties, layer.properties and service.properties.

The structure is quite simple. You can generate these 3 files instead of making
REST requests. Stop geoserver, copy these files in the location mentioned above, restart geoserver, finish.

Afaik the current security subsystem watches the file contents for modifications, so the restart should
not be needed

Cheers
Andrea

–

Ing. Andrea Aime
GeoSolutions S.A.S.
Tech lead

Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy

phone: +39 0584 962313
fax: +39 0584 962313

http://www.geo-solutions.it
http://geo-solutions.blogspot.com/
http://www.youtube.com/user/GeoSolutionsIT
http://www.linkedin.com/in/andreaaime
http://twitter.com/geowolf