All,
I have GeoServer 2.4.0 installed along with the integrated GeoWebCache 1.5.0. As for Web Administration configuration,
· I have a Layer defined within a GeoTIFF Raster data source Store.
· For the Tile Cache Configuration associated with the Layer, I have “Create a cached layer for this layer” enabled and “Enable tile caching for this layer” enabled as well.
· For the Caching Defaults, I have “Enable WMTS Service” enabled.
Using my client application under development, when I issue, via my client UI, a KVP call to get the ServiceMetadata document, the document returns my layer and I’m able to subsequently receive the tiles successfully and have them rendered into my client application. Ok.
However, I’m now trying to test out basic username/password authentication when I request the tiles. In the Web Administration interface, I have (within the Security section) configured users and placed them into roles. In the Data sub-section within Security section, I’ve created a Data Access Rule and have applied it against my defined Layer including the appropriate role my users are represented in. For Data Security, I’ve applied all 3 types of Catalog Mode (Challenge, Mixed, and Hide). But with whatever configuration combinations I’ve tried, I cannot seem to have authentication applied/imposed by GeoServer/GeoWebCache when I access the layer data. The layer data is rendered and displayed without the apparent need for authentication. I’m expecting the request for tiles to fail without authentication.
Is there some configuration I’m perhaps missing or some configuration I may have applied incorrectly?
Looking for any leads, ideas, or suggestions anyone may have.
Thank you.
Ron
Ron Pawlowski
Principal Test Engineer
Overwatch
An Operating Unit of Textron Systems
Ph: 781.569.0232
Fx: 781.937.9877
“WARNING: Documents that can be viewed, printed or retrieved from this E-Mail may contain technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.C., Sec 2751, et seq,) or the Export Administration Act of 1979, as amended, Title 50, U.S.C., App. 2401 et seq. and which may not be exported, released or disclosed to non-U.S. persons (i.e. persons who are not U.S. citizens or lawful permanent residents [“green card” holders]) inside or outside the United States, without first obtaining an export license. Violations of these export laws are subject to severe civil, criminal and administrative penalties.”