[Geoserver-users] Proxy 403 error

GeoServer GeoServer User
1

Hello,

I'm trying to develop a WPS app using GeoServer - Openlayers/GeoExt.
The base url of my app is: http://127.0.0.1:8000/
For the wps process, I have integrated the code of the following example in
my app.

http://dev.openlayers.org/releases/OpenLayers-2.13.1/examples/wps.html

I have defined the ProxyHost as follow:

OpenLayers.ProxyHost = "http://127.0.0.1:8000/proxy/?url=";

and the wps url: wps = "http://127.0.0.1:8080/geoserver/wps"

Whenever the app runs the GetCapabilities and DescribeProcess operations of
the WPS process, everything works fine.
But when I execute the process, the terminal displays the following error:
[16/Jan/2014 11:43:22] "POST
/proxy/?url=http%3A%2F%2F127.0.0.1%3A8080%2Fgeoserver%2Fwps HTTP/1.1" 403
2282

How can I fix it ?

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Proxy-403-error-tp5098481.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

2

Hi Gi,

···

2014/1/16 Gpetr <gkpetrak@anonymised.com>

Hello,

I’m trying to develop a WPS app using GeoServer - Openlayers/GeoExt.
The base url of my app is: http://127.0.0.1:8000/
For the wps process, I have integrated the code of the following example in
my app.

http://dev.openlayers.org/releases/OpenLayers-2.13.1/examples/wps.html

I have defined the ProxyHost as follow:

OpenLayers.ProxyHost = “http://127.0.0.1:8000/proxy/?url=”;

and the wps url: wps = “http://127.0.0.1:8080/geoserver/wps”

Whenever the app runs the GetCapabilities and DescribeProcess operations of
the WPS process, everything works fine.
But when I execute the process, the terminal displays the following error:
[16/Jan/2014 11:43:22] “POST
/proxy/?url=http%3A%2F%2F127.0.0.1%3A8080%2Fgeoserver%2Fwps HTTP/1.1” 403
2282

How can I fix it ?

The error seems to be an authentication problem with either the proxy or GeoServer.
A couple of questions:

  • what kind of proxy are you using?
  • is the Geoserver wps service open to anyone or protected by security?

Regards,
Mauro Bartolomeoli

3

Hi Mauro,
thanks for your reply !

In my app, I'm using GeoNode as web platform. I think I use GeoNode's proxy
but I'm not sure cause
I'm newbie. I assume it, because geonode.proxy is being defined in the
settings.py file of GeoNode.

I use the development server of Django.
As far as your second question, how can I find out if Geoserver wps service
is open to anyone or not ?

Thanks in advance
George

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Proxy-403-error-tp5098481p5098733.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

4

Hi Gi,
I don’t know GeoNode and its proxy, and I think you should ask on GeoNode mailing lists for further info on the proxy, but maybe it needs to be configured some way to let your requests go through it.

For the geoserver related part, you can check if there are any security constraints on services, using the Geoserver Web Administrative interface, in the Security → Services section (some documentation here: http://docs.geoserver.org/stable/en/user/webadmin/security/services.html). Check if you can see any rule on wps.

Mauro

···

2014/1/18 Gpetr <gkpetrak@anonymised.com>

Hi Mauro,
thanks for your reply !

In my app, I’m using GeoNode as web platform. I think I use GeoNode’s proxy
but I’m not sure cause
I’m newbie. I assume it, because geonode.proxy is being defined in the
settings.py file of GeoNode.

I use the development server of Django.
As far as your second question, how can I find out if Geoserver wps service
is open to anyone or not ?

Thanks in advance
George

–
View this message in context: http://osgeo-org.1560.x6.nabble.com/Proxy-403-error-tp5098481p5098733.html

Sent from the GeoServer - User mailing list archive at Nabble.com.

CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today.
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

5

Hello Mauro, thanks for your reply

I checked for any security constraints on services, and I can't see any rule
on wps.
There is only one rule path that is called " *.* " with two selected
roles:
ROLE_AUTHENTICATED and ROLE_ANONYMOUS. I try some changes to the selected
roles,
but nothing change.
The problem renains the same.

Thanks in advance,
George

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Proxy-403-error-tp5098481p5099020.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

6

Hi George,

···

2014/1/20 Gpetr <gkpetrak@anonymised.com>

Hello Mauro, thanks for your reply

I checked for any security constraints on services, and I can’t see any rule
on wps.
There is only one rule path that is called " . " with two selected
roles:
ROLE_AUTHENTICATED and ROLE_ANONYMOUS. I try some changes to the selected
roles,
but nothing change.
The problem renains the same.

Then I would investigate what’s going wrong: is it Geoserver or the Geonode proxy?

Which results do you get trying the urls you are using in a browser?

For example, what do you get using http://127.0.0.1:8080/geoserver/wps (a 403 error?).

Or what do you get using http://127.0.0.1:8000/proxy/?url=http://www.google.com ?

Mauro

7

Hi Mauro, thank you for your help,

From url: http://127.0.0.1:8080/geoserver/wps in my browser, I got the

following xml:

<ows:ExceptionReport version="1.1.0"
xsi:schemaLocation="http://www.opengis.net/ows/1.1
http://127.0.0.1:8080/geoserver/schemas/ows/1.1.0/owsAll.xsd&quot;&gt;&lt;ows:Exception
exceptionCode="MissingParameterValue"
locator="request"><ows:ExceptionText>Could not determine geoserver request
from http request
org.geoserver.platform.AdvancedDispatchFilter$AdvancedDispatchHttpRequest@anonymised.com</ows:ExceptionText></ows:Exception></ows:ExceptionReport>

And from url: http://127.0.0.1:8000/proxy/?url=http://www.google.com I got
the following page:
302 Moved
The document has moved here.
And on the terminal the following:
[20/Jan/2014 12:01:30] "GET /proxy/?url=http://www.google.com HTTP/1.1" 302
258

But I just made a change in my code and I had a different result:
I replace the wps url to : http://demo.opengeo.org/geoserver/wps
and I remove the line : OpenLayers.ProxyHost =
"http://127.0.0.1:8000/proxy/?url=&quot;;
And it works fine ! The GetCapabilities, DescribeProcess and Execute
operations works without error !

Can you understand what's going wrong ? Is it my local GeoServer ?

Regards
George

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Proxy-403-error-tp5098481p5099078.html
Sent from the GeoServer - User mailing list archive at Nabble.com.