[Geoserver-users] Tutorial/Detailed example to secure a workspace with user/passwd

GeoServer GeoServer User
1

Hi.

Is there a tutorial or walkthrough available which shows how to secure a
workspace with user and password?

I checked the Geoserver-Doc but thats to general for me.

I dont want any fancy roles or something similar.

It would be sufficient if geoserver just asks for user/pw for that
particular workspace.

Thanks
Andy

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

2

Hi Andreas

You will need a role to protect your workspace. Second, you have to assign this role to your user.

Greetings from Vienna :slight_smile:
Cheers
Christian

···

On Thu, Jan 8, 2015 at 3:03 PM, sulu <andreas.siegel@anonymised.com.6846…> wrote:

Hi.

Is there a tutorial or walkthrough available which shows how to secure a
workspace with user and password?

I checked the Geoserver-Doc but thats to general for me.

I dont want any fancy roles or something similar.

It would be sufficient if geoserver just asks for user/pw for that
particular workspace.

Thanks
Andy

–
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

3

Thanks for answering.

Ok.

Christian Mueller-3 wrote

You will need a role to protect your workspace. Second, you have to assign
this role to your user.

Thats what i figured allready. My problem is how to configure a meaningful
role.
I have only two templates in Geoserver-GUI for roles which are: ADMIN and
GROUP_ADMIN.
That doesnt sound right.
I would like a role like Read_ONLY_USER ore something similar.

Andy

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5182334.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

4

You can simply add a role using the Web GUI.

Christian

···

On Mon, Jan 19, 2015 at 2:58 PM, sulu <andreas.siegel@anonymised.com.6846…> wrote:

Thanks for answering.

Ok.

Christian Mueller-3 wrote

You will need a role to protect your workspace. Second, you have to assign
this role to your user.

Thats what i figured allready. My problem is how to configure a meaningful
role.
I have only two templates in Geoserver-GUI for roles which are: ADMIN and
GROUP_ADMIN.
That doesnt sound right.
I would like a role like Read_ONLY_USER ore something similar.

Andy

–
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5182334.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

5

Hi Christian.

Maybe i wasn't clear in my post.

Goal: /I want to create a read only user for certain workspaces./

I am aware of the GUI-Interface for configuring users/roles. My problem is
what to put in the Web-GUI.

e.g. Roles: How to create role is to choose for this read only user?

Then there is a feature where i can input key/value-pairs in free-form.

Do i need them or what is the use for this feature?

The freedom the interface provides might be nice, but it isn't if you dont
know how to use it.

Thats why i asked for a walkthrough or some use cases in order to use it
properly. Strangely the internet is quite dry in that respect.

Cheers
Andy

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5182478.html
Sent from the GeoServer - User mailing list archive at Nabble.com.

6

Hi Andy

Did you read
http://docs.geoserver.org/stable/en/user/security/layer.html

You need a rule like

myworkspace.*.r=MY_ROLE


Cheers

Christian

···

On Tue, Jan 20, 2015 at 8:34 AM, sulu <andreas.siegel@anonymised.com> wrote:

Hi Christian.

Maybe i wasn’t clear in my post.

Goal: /I want to create a read only user for certain workspaces./

I am aware of the GUI-Interface for configuring users/roles. My problem is
what to put in the Web-GUI.

e.g. Roles: How to create role is to choose for this read only user?

Then there is a feature where i can input key/value-pairs in free-form.

Do i need them or what is the use for this feature?

The freedom the interface provides might be nice, but it isn’t if you dont
know how to use it.

Thats why i asked for a walkthrough or some use cases in order to use it
properly. Strangely the internet is quite dry in that respect.

Cheers
Andy

–
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5182478.html

Sent from the GeoServer - User mailing list archive at Nabble.com.

New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

–

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH

7

Thanks Christian.

I browsed through the document and i should be able to figure it out ....
eventually.

Cheers
Andy

--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Tutorial-Detailed-example-to-secure-a-workspace-with-user-passwd-tp5180551p5184165.html
Sent from the GeoServer - User mailing list archive at Nabble.com.