[Geoserver-users] Problems security module?

Hi list

Strange behavior:

1 - Create a user (UserAdmin) with Administrator role.
2 - use this user to work with the curl command
3 - after a time I change the user password assigned UserAdmin, through the graphical interface of geoserver
4 - continue using the curl command with the new key

5 - reboot the server (linux)
6 - stopped working the curl command because the user “UserAdmin” but did not recognize the new key, then try entering the old password and to my surprise, it worked! that is, the key change not impact the geoserver.
7 - turned to restart linux, try again with the new password and now if it worked.
Apparently, the key change no impact at first, but after two restarts, yes!

I am using:

geoserver 2.5.2
Apache Tomcat / 7.0.53
Ubuntu Linux 12.04LTS

This is my script to start and stop tomcat:

#! /bin/sh

BEGIN INIT INFO

Provides: tomcat-apache

Required-Start: $remote_fs $syslog

Required-Stop: $remote_fs $syslog

Default-Start: 2 3 4 5

Default-Stop: 0 1 6

Short-Description: Start tomcat apache

END INIT INFO

case “$1” in
start)
echo “Starting Tomcat7…”
export GEOSERVER_DATA_DIR=/usr/local/geoserver_data
/usr/local/tomcat7/bin/startup.sh
;;
stop)
echo “Stopping Tomcat7…”
/usr/local/tomcat7/bin/shutdown.sh
;;
esac

exit 0

Thanks in advanced

Pablo

···

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "

Hi Pablo

Can you reproduce this scenario ?. GeoSever has a cache for stateless authentication, but after a restart of GeoServer the new password should work.

Cheers
Christian

···

On Tue, Jun 9, 2015 at 6:47 PM, pablo zader <pzader@anonymised.com> wrote:

Hi list

Strange behavior:

1 - Create a user (UserAdmin) with Administrator role.
2 - use this user to work with the curl command
3 - after a time I change the user password assigned UserAdmin, through the graphical interface of geoserver
4 - continue using the curl command with the new key

5 - reboot the server (linux)
6 - stopped working the curl command because the user “UserAdmin” but did not recognize the new key, then try entering the old password and to my surprise, it worked! that is, the key change not impact the geoserver.
7 - turned to restart linux, try again with the new password and now if it worked.
Apparently, the key change no impact at first, but after two restarts, yes!

I am using:

geoserver 2.5.2
Apache Tomcat / 7.0.53
Ubuntu Linux 12.04LTS

This is my script to start and stop tomcat:

#! /bin/sh

BEGIN INIT INFO

Provides: tomcat-apache

Required-Start: $remote_fs $syslog

Required-Stop: $remote_fs $syslog

Default-Start: 2 3 4 5

Default-Stop: 0 1 6

Short-Description: Start tomcat apache

END INIT INFO

case “$1” in
start)
echo “Starting Tomcat7…”
export GEOSERVER_DATA_DIR=/usr/local/geoserver_data
/usr/local/tomcat7/bin/startup.sh
;;
stop)
echo “Stopping Tomcat7…”
/usr/local/tomcat7/bin/shutdown.sh
;;
esac

exit 0

Thanks in advanced

Pablo

Pablo J. Zader
Lic. en Cs. de la Computación
pablo.zader@anonymised.com

"Los Grandes Hombres hablan sobre ideas…
Los Hombres Promedio hablan sobre cosas…
Los Hombres Pequeños hablan… de otros Hombres.

del libro Matemática estas ahi? A. Paenza "



Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH