[Geoserver-users] Geoserver WMS cascade with web proxy user/password authentication

GeoServer GeoServer User
1

Hello,

When configuring Tomcat7 + GeoServer 2.7.2 (build 22-Jul-2015 18:35):

  • to Cascade external WMS;
  • via a corporate web proxy (requiring username and password authentication),
  • the Squid proxy is not receiving the Username and Password.

Tomcat7 proxy configuration in Catalina.sh is:
JAVA_OPTS=“-Dhttp.proxySet=true -Dhttp.proxyHost=bneqpwmgt -Dhttp.proxyPort=32001 -Dhttp.proxyUser=prxyuser -Dhttp.proxyPassword=prxypasswd -Dhttps.proxyHost=bneqpwmgt -Dhttps.proxyPort=32001”

WMS getCapabilities URL we are attempting to connect to:
http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer?REQUEST=getCapabilities&version=1.1.0

GeoServer WMS configuration:
“Use HTTP connection pooling” is disabled.

Squid error:
TCP_DENIED/407 1886 GET http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer

This indicates that:

  • Geoserver is using the configured Proxy Host and Proxy Port as expected;
  • Geoserver is not transmitting the username and password correctly.

If I reconfigure the corporate proxy to allow our Tomcat host to connect externally without providing a username and password, the WMS cascading data store works as expected.

Is anyone able to shed further light on this?

Regards,
Cliff

···

“We are dreamers, shapers, singers and makers…”

2

This could be related to the following bug

https://osgeo-org.atlassian.net/browse/GEOS-6044

Ian

···

On 26 July 2016 at 00:42, Cliff Broadbent <djseverin@anonymised.com> wrote:

Hello,

When configuring Tomcat7 + GeoServer 2.7.2 (build 22-Jul-2015 18:35):

  • to Cascade external WMS;
  • via a corporate web proxy (requiring username and password authentication),
  • the Squid proxy is not receiving the Username and Password.

Tomcat7 proxy configuration in Catalina.sh is:
JAVA_OPTS=“-Dhttp.proxySet=true -Dhttp.proxyHost=bneqpwmgt -Dhttp.proxyPort=32001 -Dhttp.proxyUser=prxyuser -Dhttp.proxyPassword=prxypasswd -Dhttps.proxyHost=bneqpwmgt -Dhttps.proxyPort=32001”

WMS getCapabilities URL we are attempting to connect to:
http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer?REQUEST=getCapabilities&version=1.1.0

GeoServer WMS configuration:
“Use HTTP connection pooling” is disabled.

Squid error:
TCP_DENIED/407 1886 GET http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer

This indicates that:

  • Geoserver is using the configured Proxy Host and Proxy Port as expected;
  • Geoserver is not transmitting the username and password correctly.

If I reconfigure the corporate proxy to allow our Tomcat host to connect externally without providing a username and password, the WMS cascading data store works as expected.

Is anyone able to shed further light on this?

Regards,
Cliff

–

“We are dreamers, shapers, singers and makers…”

What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

Ian Turton

3

Hi Ian,

Very interesting. I will give this a go tomorrow and verify.

Thank you.

···

On 26 July 2016 at 18:16, Ian Turton <ijturton@anonymised.com> wrote:

This could be related to the following bug

https://osgeo-org.atlassian.net/browse/GEOS-6044

Ian

–

On 26 July 2016 at 00:42, Cliff Broadbent <djseverin@anonymised.com> wrote:

Hello,

When configuring Tomcat7 + GeoServer 2.7.2 (build 22-Jul-2015 18:35):

  • to Cascade external WMS;
  • via a corporate web proxy (requiring username and password authentication),
  • the Squid proxy is not receiving the Username and Password.

Tomcat7 proxy configuration in Catalina.sh is:
JAVA_OPTS=“-Dhttp.proxySet=true -Dhttp.proxyHost=bneqpwmgt -Dhttp.proxyPort=32001 -Dhttp.proxyUser=prxyuser -Dhttp.proxyPassword=prxypasswd -Dhttps.proxyHost=bneqpwmgt -Dhttps.proxyPort=32001”

WMS getCapabilities URL we are attempting to connect to:
http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer?REQUEST=getCapabilities&version=1.1.0

GeoServer WMS configuration:
“Use HTTP connection pooling” is disabled.

Squid error:
TCP_DENIED/407 1886 GET http://geospatial.information.qld.gov.au/ArcGIS/services/QLD/LandParcelPropertyFramework/MapServer/WMSServer

This indicates that:

  • Geoserver is using the configured Proxy Host and Proxy Port as expected;
  • Geoserver is not transmitting the username and password correctly.

If I reconfigure the corporate proxy to allow our Tomcat host to connect externally without providing a username and password, the WMS cascading data store works as expected.

Is anyone able to shed further light on this?

Regards,
Cliff

–

“We are dreamers, shapers, singers and makers…”

What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev

Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

Ian Turton

“We are dreamers, shapers, singers and makers…”