Hello James,

You have to build the sources using maven and then copy the generated 
war to your tomcat folder. As you have seen, it does not work if you 
just copy everything to the tomcat folder before running "mvn clean 
install".

See http://docs.geoserver.org/latest/en/developer/quickstart/index.html 
for full instructions for making modifications to geoserver.

By the way, the changes you mentioned look the same as the security 
issues reported by Sharath Shetty ([email protected]) in march 
25th on this list 
(https://sourceforge.net/p/geoserver/mailman/message/35748902/).

Andrea mentioned that the security issues are being fixed 
(https://sourceforge.net/p/geoserver/mailman/message/35754950/). Since 
you are still getting up to speed with geoserver development, maybe you 
could just implement countermeasures at the moment and wait for the 
official fixes. If you are not familiar with the application and with 
the development workflow used, you have a higher risk of introducing 
more security issues as you try to fix these.

If you are in a hurry, I suggest you work directly with the developers 
or/and fund the changes.

Best,

Daniel

-- 

Daniel Araújo Miranda
Forensics Expert
Inteligeo - Geographic Intelligence
National Institute of Criminalistics
Brazilian Federal Police
Brasilia - Brazil

Em 29/03/2017 09:26, peter james escreveu:
> Hi,
>
> I tried to run the geoserver application through source code(geoserver 
> version 2.9.0) in my local system,i download the source code, extract 
> it and copied the geoserver source code into the following location:-
> *C:\Program Files\Apache Software Foundation\Tomacat 8.0_Tomcat8-1\webapps
>
> Inline image 1
>
>
> *
> *
>
>
> Inline image 2
>
> *
> *but i tried to access the web administration interface through the 
> URL:- localhost:8080/geoserver,but it is giving the HTTP status 404- 
> /geoserver/ error,error image is attached below.
>
> Inline image 1
>
> *
> *Java used:- JDK 1.8.0_121
> *
> *Tomcat used:- apache-tomcat-8.0.41
> *
> *geoserver source code version:- 2.9.0
>
> *
> *i need to run the geoserver using source code(i need to run only 
> geoserver 2.9.0 version) not through by installing geoserver by 
> installer or using web archive file,because i have to do some changes 
> in source code like programmatically turn the AUTOCOMPLETE 
> functionality to OFF because by default in geoserver Autocomplete and 
> Remember password Field Enabled and also need to add the Captcha in 
> the login page or else to implement account lockout policy,and also 
> need to fix the session fixation like the application uses same 
> session ID for multiple login in the same browser untill user clear 
> his browser cookie,so i need to make when user logging into his 
> account the old session ID stored in browser should be expired .
> *
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> Geoserver-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/geoserver-users


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to