[Geoserver-users] Remote Access to Geoserver

GeoServer GeoServer User
1

Hi All,
I'm having a little difficulty accessing my Geoserver remotely.

The scenario: I have an application on a server in 'the cloud' that talks to my Geoserver sat in my office. We have the necessary firewall rules to allow 8080 traffic between the 2 servers. The cloud server runs MS Server 2008 and from there I can open a web browser and connect to the IP of my internal server fine - the Geoserver admin GUI loads fine.

However, if whilst logged on to the cloud sever I access the 'demo' feature on my internal server and run a WFS query (as my app would) I get an error message:

<servlet-exception>
HTTP response: 403
Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )
</servlet-exception>

How do I allow remote IP addresses to be able to run WFS/WMS queries against my data?

Many thanks,
Steve
IT Officer
Biodiversity Information Service

2

On Thu, Oct 3, 2013 at 5:21 PM, Steve Goddard <steve@anonymised.com> wrote:

Hi All,
I'm having a little difficulty accessing my Geoserver remotely.

The scenario: I have an application on a server in 'the cloud' that talks
to my Geoserver sat in my office. We have the necessary firewall rules to
allow 8080 traffic between the 2 servers. The cloud server runs MS Server
2008 and from there I can open a web browser and connect to the IP of my
internal server fine - the Geoserver admin GUI loads fine.

However, if whilst logged on to the cloud sever I access the 'demo'
feature on my internal server and run a WFS query (as my app would) I get
an error message:

<servlet-exception>
HTTP response: 403
Forbidden ( The server denied the specified Uniform Resource Locator
(URL). Contact the server administrator. )
</servlet-exception>

The 'demo' feature is not actually working "as your app would", because
GeoServer is basically building a request
and sending it towards itself, locally.
Are you proxying GeoServer,so that the public network name/port of that
GeoServer is different from the actual
machine name?

Cheers
Andrea

--

Our support, Your Success! Visit http://opensdi.geo-solutions.it for more
information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

-------------------------------------------------------

3

Hi Steve,
This is almost certainly because your browser doesn’t want you to. It’s a security thing - you can’t make WFS requests to a server that isn’t the host.
So:

GeoServer: www.example.com:8080
WWW: www.example.com:8080

Will work perfectly.
But the second the WWW is different from the GeoServer, either via Host name or port number, your browser won’t allow the request.

To get around it you’ll need to use a proxy server installed on the WWW which makes the requests to the GeoServer. Google around and you should find something - “cross domain” would be one set of keywords.

Regards,
Jonathan

This transmission is intended for the named addressee(s) only and may contain sensitive or protectively marked material up to RESTRICTED and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All email traffic sent to or from us, including without limitation all GCSX traffic, may be subject to recording and/or monitoring in accordance with relevant legislation.

···

On 3 October 2013 16:21, Steve Goddard <steve@anonymised.com> wrote:

Hi All,
I’m having a little difficulty accessing my Geoserver remotely.

The scenario: I have an application on a server in ‘the cloud’ that talks to my Geoserver sat in my office. We have the necessary firewall rules to allow 8080 traffic between the 2 servers. The cloud server runs MS Server 2008 and from there I can open a web browser and connect to the IP of my internal server fine - the Geoserver admin GUI loads fine.

However, if whilst logged on to the cloud sever I access the ‘demo’ feature on my internal server and run a WFS query (as my app would) I get an error message:

HTTP response: 403 Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )

How do I allow remote IP addresses to be able to run WFS/WMS queries against my data?

Many thanks,
Steve
IT Officer
Biodiversity Information Service

October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

4

Hi Jonathan,

My app uses PHP/CURL to send the XML query to the IP address of the server such as http://1.2.3.4:8080/geoserver/wfs.

Up till now (for testing the app) I have been using a copy of Geoserver installed locally on the server – which worked fine.

I’m struggling to get my head around the problem. Surly Geoserver listens on a given port and responds accordingly??

Thanks,

Steve

···

Hi Steve,

This is almost certainly because your browser doesn’t want you to. It’s a security thing - you can’t make WFS requests to a server that isn’t the host.

So:

GeoServer: www.example.com:8080

WWW: www.example.com:8080

Will work perfectly.

But the second the WWW is different from the GeoServer, either via Host name or port number, your browser won’t allow the request.

To get around it you’ll need to use a proxy server installed on the WWW which makes the requests to the GeoServer. Google around and you should find something - “cross domain” would be one set of keywords.

Regards,

Jonathan

On 3 October 2013 16:21, Steve Goddard <steve@anonymised.com> wrote:

Hi All,
I’m having a little difficulty accessing my Geoserver remotely.

The scenario: I have an application on a server in ‘the cloud’ that talks to my Geoserver sat in my office. We have the necessary firewall rules to allow 8080 traffic between the 2 servers. The cloud server runs MS Server 2008 and from there I can open a web browser and connect to the IP of my internal server fine - the Geoserver admin GUI loads fine.

However, if whilst logged on to the cloud sever I access the ‘demo’ feature on my internal server and run a WFS query (as my app would) I get an error message:

HTTP response: 403 Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )

How do I allow remote IP addresses to be able to run WFS/WMS queries against my data?

Many thanks,
Steve
IT Officer
Biodiversity Information Service

October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

This transmission is intended for the named addressee(s) only and may contain sensitive or protectively marked material up to RESTRICTED and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All email traffic sent to or from us, including without limitation all GCSX traffic, may be subject to recording and/or monitoring in accordance with relevant legislation.

5

Hello there Steve,

Like Jonathan pointed out, sounds like security restrictions on the environment you are using. Cross domain requests seems to be limited (or blocked) if you're using javascript e.g.

Im working with openlayers to design a map interface and got that same problem. Here are some explanations about this restriction considering openlayers, but it might be useful for you:

http://docs.openlayers.org/library/request.html

http://trac.osgeo.org/openlayers/wiki/FrequentlyAskedQuestions#ProxyHost

Guys at openlayers offers even a cgi proxy code to work around this limitation:

http://trac.osgeo.org/openlayers/browser/trunk/openlayers/examples/proxy.cgi

I hope it helps

Cheers,

Rodrigo Nascimento Hernandez
MinasAmbiente Eng. LTDA
http://www.minasambiente.com.br
+55 31 2551-5452

Em 03/10/2013 13:19, Steve Goddard escreveu:

Hi Jonathan,

My app uses PHP/CURL to send the XML query to the IP address of the server such as http://1.2.3.4:8080/geoserver/wfs.

Up till now (for testing the app) I have been using a copy of Geoserver installed locally on the server -- which worked fine.

I'm struggling to get my head around the problem. Surly Geoserver listens on a given port and responds accordingly??

Thanks,

Steve

*From:*Jonathan Moules [mailto:jonathanmoules@anonymised.com]
*Sent:* 03 October 2013 17:04
*To:* Steve Goddard
*Cc:* Geoserver-users@lists.sourceforge.net
*Subject:* Re: [Geoserver-users] Remote Access to Geoserver

Hi Steve,

This is almost certainly because your browser doesn't want you to. It's a security thing - you can't make WFS requests to a server that isn't the host.

So:

GeoServer: www.example.com:8080 <http://www.example.com:8080>

WWW: www.example.com:8080 <http://www.example.com:8080>

Will work perfectly.

But the second the WWW is different from the GeoServer, either via Host name or port number, your browser won't allow the request.

To get around it you'll need to use a proxy server installed on the WWW which makes the requests to the GeoServer. Google around and you should find something - "cross domain" would be one set of keywords.

Regards,

Jonathan

On 3 October 2013 16:21, Steve Goddard <steve@anonymised.com <mailto:steve@anonymised.com>> wrote:

Hi All,
I'm having a little difficulty accessing my Geoserver remotely.

The scenario: I have an application on a server in 'the cloud' that talks to my Geoserver sat in my office. We have the necessary firewall rules to allow 8080 traffic between the 2 servers. The cloud server runs MS Server 2008 and from there I can open a web browser and connect to the IP of my internal server fine - the Geoserver admin GUI loads fine.

However, if whilst logged on to the cloud sever I access the 'demo' feature on my internal server and run a WFS query (as my app would) I get an error message:

<servlet-exception>
HTTP response: 403
Forbidden ( The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. )
</servlet-exception>

How do I allow remote IP addresses to be able to run WFS/WMS queries against my data?

Many thanks,
Steve
IT Officer
Biodiversity Information Service

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net <mailto:Geoserver-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/geoserver-users

This transmission is intended for the named addressee(s) only and may contain sensitive or protectively marked material up to RESTRICTED and should be handled accordingly. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. All email traffic sent to or from us, including without limitation all GCSX traffic, may be subject to recording and/or monitoring in accordance with relevant legislation.

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk

_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users