Hi Sander, see below for my comments:
- As Daniel points out, the Service option runs as the "NT AUTHORITY\Network Service" user. And yes, the installer will set write access to the appropriate folders for that user (or at least it should), no matter where the GEOSERVER_DATA_DIR or the GEOSERVER_HOME are located. => This worked fine for me on Server 2012R2 and Windows 10. - For manual installations, the write access for the appropriate folders are assigned to the "Users" group, so any user account in that group should have access. Please let me know if a different account is preferred or should be given write access instead. => What exactly do you mean by 'manual installation'? - Daniel also pointed out that he does not "like programs writing to the Program Files folder". Please note that both the suggested install directory and data directory can be set (overridden) in the installer wizard and will (should) be picked up by the Service or manual startup scripts accordingly. => I just wanted to show up another possibility to handle this situation. - I'm afraid that the NSIS installer does not write a log file somewhere unfortunately, except for the installer output window itself. We would have to use the NSISLog plugin for example to write to a file. However, I have modified the NSIS script now so that it should show the stderr of the wrapper installation and service start/stop commands in the installer output window. This will be available in a next version of the Windows installer. => Does this mean that the output window will be accessible after the installation has finished? - Have you tried opening https://geoserver.org? Gives me a NET::ERR_CERT_COMMON_NAME_INVALID in Chrome, so I guess there's some SSL/TLS certificate error there. => This happens because the certificate has been issued for '*.github.com' instead of 'geoserver.org'. So whoever maintains the website would have to apply a valid certificate. Regards Daniel From: Sander Schaminee [mailto:sander.schami...@geocat.net] Sent: Tuesday, October 5, 2021 12:02 PM To: Calliess Daniel Ing. <daniel.calli...@stadt-salzburg.at> Cc: Rahkonen Jukka (MML) <jukka.rahko...@maanmittauslaitos.fi>; Jody Garnett <jody.garn...@gmail.com>; GeoServer Users <geoserver-users@lists.sourceforge.net> Subject: [EXTERN!]: Re: [Geoserver-users] GeoServer 2.20-RC windows installer testing requested Hi all, Thanks for testing and the feedback. I am the bastard who wrote the installer ;) I am currently getting ready to get the PR ready for the Windows installer (so that it can be merged to the GeoServer main branch) and I am trying to incorporate some of the suggestions I have read here. Some remarks I have: - The installer should request elevation (admin) before it starts. It also checks if the user truly is an Administrator, else installing the Service will not work. However, it uses a standard NSIS plugin for that (UserInfo) which is rather old, so this check might no longer work properly? For example, I am not sure how it handles a local power user (as Jukka was using): is it considered an admin? Then the check will say all is fine, but the Service installation will fail, as was observed by Jukka. - As Daniel points out, the Service option runs as the "NT AUTHORITY\Network Service" user. And yes, the installer will set write access to the appropriate folders for that user (or at least it should), no matter where the GEOSERVER_DATA_DIR or the GEOSERVER_HOME are located. - For manual installations, the write access for the appropriate folders are assigned to the "Users" group, so any user account in that group should have access. Please let me know if a different account is preferred or should be given write access instead. - I'm afraid that the NSIS installer does not write a log file somewhere unfortunately, except for the installer output window itself. We would have to use the NSISLog plugin for example to write to a file. However, I have modified the NSIS script now so that it should show the stderr of the wrapper installation and service start/stop commands in the installer output window. This will be available in a next version of the Windows installer. - Daniel also pointed out that he does not "like programs writing to the Program Files folder". Please note that both the suggested install directory and data directory can be set (overridden) in the installer wizard and will (should) be picked up by the Service or manual startup scripts accordingly. Some comments about what Brad Hards mentioned earlier: It was a fairly minimal install, and didn't have JRE or JDK. The installer detected that, and directed me to AdoptOpenJDK. That could be updated to Adoptium in a future change. I have updated the NSIS script to suggest Adoptium instead of AdoptOpenJDK (I wasn't aware). Thanks for bringing this up. An upcoming installer exe should point to Adoptium from now on. After installing OpenJDK 11, the GeoServer installer still doesn't detect it until I close the installer and retry. Note that this is standard Windows behavior: you cannot expect an open application to pick up a change in the system environment variables (which is what the installer uses to detect a JDK). In the past you even needed to reboot... The "About GeoServer" start menu item goes to http://geoserver.org<http://geoserver.org/>. That could be updated to https in a future change. Have you tried opening https://geoserver.org? Gives me a NET::ERR_CERT_COMMON_NAME_INVALID in Chrome, so I guess there's some SSL/TLS certificate error there. Thanks again, Sander On Tue, Oct 5, 2021 at 10:59 AM Calliess Daniel Ing. <daniel.calli...@stadt-salzburg.at<mailto:daniel.calli...@stadt-salzburg.at>> wrote: Hi, I've been running the installer as a user that is part of the local administrators group but not the local Administrator user account itself. I then used 'Run as administrator' (which is necessary also for users with admin privileges) and installed GeoServer to the 'Program Files' folder. In the services console I then saw the GeoServer service which is by the default installed to run with the 'NT AUTHORITY\Network Service' user. So to successfully start the service, this user must have read access in the 'Program Files\GeoServer' folder and write access in the contained 'logs' and 'work' folders. The read access should be automatically set via the local 'Users' group, the write access will be explicitely set by the installer. Wherever the data directory is located, the 'Network Service' must have write access. As long as we don't know how to access the installer log you can record the screen while installing using a tool like OBS Studio (https://obsproject.com/). For better separation of different applications on the server I'm creating a local user account specially for GeoServer and am changing the configuration accordingly. As I don't like programs writing to the Program Files folder I am moving the work and logs folders to a different location: work: wrapper\jsl64.ini -> add '-Djava.io.tmpdir=<path to temp folder>' to the 'cmdline' parameter wrapper logs: wrapper\jsl64.ini -> set 'systemout' and ' systemerr' parameters jetty logs: etc\jetty.xml -> See 'ADD THIS' comments in the code sample -> <Set name="handler"> <New id="Handlers" class="org.eclipse.jetty.server.handler.HandlerCollection"> <Set name="handlers"> <Array type="org.eclipse.jetty.server.Handler"> <Item> <New id="Contexts" class="org.eclipse.jetty.server.handler.ContextHandlerCollection"/> </Item> <Item> <New id="DefaultHandler" class="org.eclipse.jetty.server.handler.DefaultHandler"/> </Item> <!-- ADD THIS: --> <Item> <New id="RequestLog" class="org.eclipse.jetty.server.handler.RequestLogHandler"/> </Item> </Array> </Set> </New> </Set> <!-- ADD THIS: --> <Ref id="RequestLog"> <Set name="requestLog"> <New id="RequestLogImpl" class="org.eclipse.jetty.server.NCSARequestLog"> <Arg><SystemProperty name="jetty.logs" default="D:\LogDateien\GeoServer\jetty"/>/yyyy_mm_dd.request.log</Arg> <!-- use E:\LogDateien\GeoServer\jetty for intranet--> <!-- use D:\Entwicklung\Server\LogDateien\WebGis for development --> <Set name="retainDays">90</Set> <Set name="append">true</Set> <Set name="extended">false</Set> <Set name="LogTimeZone">GMT</Set> </New> </Set> </Ref> By the way, this is the exact same procedure that I used with the previous installer. Hope this helps, regards Daniel From: Rahkonen Jukka (MML) [mailto:jukka.rahko...@maanmittauslaitos.fi<mailto:jukka.rahko...@maanmittauslaitos.fi>] Sent: Monday, October 4, 2021 9:37 PM To: Jody Garnett <jody.garn...@gmail.com<mailto:jody.garn...@gmail.com>> Cc: GeoServer Users <geoserver-users@lists.sourceforge.net<mailto:geoserver-users@lists.sourceforge.net>> Subject: [EXTERN!]: Re: [Geoserver-users] GeoServer 2.20-RC windows installer testing requested Hi, I do not quite understand what rights I have on my work computer so I changed to my home computer where I have full admin rights. I made installation a) as a normal user but running the installer as admin and b) when logged in as admin. The experience was better now but not perfect yet. - The installer prints a lot of text about how the installation proceeds but it all disappears immediately when the installation is ready. It would be nice to have an option to get the messages into a file. - I verified that the uninstaller does not remove GEOSERVER_DATA_DIR environment, even if the data directory folder is removed. Moreover, the installer does not set GEOSERVER_DATA_DIR right if some other location is specified for the data directory during the next installation. Because of that Geoserver does start, but without data even the new data directory is there. - If installation is made into Program Files then only admin user can start the service manually with startup.bat. The reason is that Jetty wants to create a new directory into Program Files. It might be good to document this and suggest non-admins to use some other directory. ProgramData seems to be OK for the data directory. - The installer still could did not install the Windows service for me. I could see some error messages flashing in the details window of the installer but I did not manage to read them properly. Maybe something about “invalid user or wrong password”. This happened even when I was logged in as admin. -Jukka Rahkonen- Lähettäjä: Jody Garnett <jody.garn...@gmail.com<mailto:jody.garn...@gmail.com>> Lähetetty: maanantai 4. lokakuuta 2021 19.50 Vastaanottaja: Rahkonen Jukka (MML) <jukka.rahko...@maanmittauslaitos.fi<mailto:jukka.rahko...@maanmittauslaitos.fi>> Kopio: GeoServer Users <geoserver-users@lists.sourceforge.net<mailto:geoserver-users@lists.sourceforge.net>> Aihe: Re: [Geoserver-users] GeoServer 2.20-RC windows installer testing requested I think you need to be administrator to install a service? I am sorry I am not that familiar with windows permissions (power user vs administrator huh?) Q: Did this situation you describe work with the previous geoserver 2.14 installer? Perhaps we can learn something. ProgramData is the “approved” location for applications to manage their configuration; I often wonder why tomcat does not placed its webapps folder in ProgramData. I am not sure what else I can determine due to your power user rights… Jody On Mon, Oct 4, 2021 at 12:56 AM Rahkonen Jukka (MML) <jukka.rahko...@maanmittauslaitos.fi<mailto:jukka.rahko...@maanmittauslaitos.fi>> wrote: Hi, I was testing with my work computer as a localpower user. That user does not have full rights but I do not know exactly the limits. My observations: • I used the Install as a service option but I could not start the service. Running the startService.bat did not start the service for me but yielded always these two lines net start GeoServer [Invalid service name] – translated from Finnish Installer creates also the startup.bat file and next results are obtained by running that. • Geoserver does not start if it is installed into the suggested location Program Files\GeoServer. With my rights it is not allowed to create a new layer during startup. Error: Please wait while loading GeoServer... 2021-10-04 09:43:02.572:INFO::main: Logging initialized @1579ms to org.eclipse.jetty.util.log.StdErrLog 2021-10-04 09:43:02.873:INFO:oejs.Server:main: jetty-9.4.36.v20210114; built: 2021-01-14T16:44:28.689Z; git: 238ec6997c7806b055319a6d11f8ae7564adc0de; jvm 1.8.0_252-b09 2021-10-04 09:43:02.888:INFO:oejdp.ScanningAppProvider:main: Deployment monitor [file:///C:/Program%20Files/GeoServer/webapps/] at interval 1 2021-10-04 09:43:02.988:WARN:oejw.WebAppContext:main: Failed startup of context o.e.j.w.WebAppContext@1e6d1014{geoserver,/geoserver,null,STOPPED}{C:\Program<mailto:o.e.j.w.WebAppContext@1e6d1014%7bgeoserver,/geoserver,null,STOPPED%7d%7bC:%5CProgram> Files\GeoServer\webapps\geoserver} java.lang.IllegalStateException: Unable to create temp dir C:\Program Files\GeoServer\work\jetty-0_0_0_0-8080-geoserver-_geoserver-any- • The first installation with the default settings created environmental variable GEOSERVER_DATA_DIR set to C:\ProgramData\GeoServer. It seems that uninstaller does not remove this variable and giving another path when running the installer again does not change GEOSERVER_DATA_DIR. Error: 04 lokakuuta 09:54:36 WARN [geoserver.platform] - Found Java environment variable GEOSERVER_DATA_DIR set to C:\ProgramData\GeoServer , but this path does not exist 04 lokakuuta 09:54:36 WARN [geoserver.platform] - Found System environment variable GEOSERVER_DATA_DIR set to C:\ProgramData\GeoServer , but this path does not exist 04 lokakuuta 09:54:36 INFO [geoserver.platform] - Falling back to embedded data directory: C:\ohjelmat\gs20rc\webapps\geoserver\data However, the directory that I gave for the installer was created and populated. As a result Geoserver did not start right because it was searching the data_dir from a wrong place. • Next I uninstalled again and removed the GEOSERVER_DATA_DIR environment variable before running the installer. I used a custom data_dir location but the installer did not set the variable at all. The data directory was created and populated and after setting the GEOSERVER_DATA_DIR manually I could run startup.bat and Geoserver 2.20-RC started. Conclusion: • There seems to be something to check with setting/removing/changing the location of the data_dir with installer and uninstaller • The run as service alternative did not work at all for me • Using directory “Program Files” may make troubles even the installation seems to be successful because Jetty wants to create a new directory when it starts. I do not know if using ProgramData may show similar issues because I used a custom data_dir location in most of my tests. -Jukka Rahkonen- Lähettäjä: Jody Garnett <jody.garn...@gmail.com<mailto:jody.garn...@gmail.com>> Lähetetty: sunnuntai 3. lokakuuta 2021 20.26 Vastaanottaja: GeoServer Users <geoserver-users@lists.sourceforge.net<mailto:geoserver-users@lists.sourceforge.net>> Aihe: [Geoserver-users] GeoServer 2.20-RC windows installer testing requested Reporting in from the foss4g code sprint, and I noticed that Sander and Juan produces a GeoServer-install-2.20-RC.exe last week... I do not have a windows environment handy, can I ask for testing please? Download is available from https://sourceforge.net/projects/geoserver/files/GeoServer/2.20-RC/ -- Jody Garnett -- -- Jody Garnett _______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net<mailto:Geoserver-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/geoserver-users
_______________________________________________ Geoserver-users mailing list Please make sure you read the following two resources before posting to this list: - Earning your support instead of buying it, but Ian Turton: http://www.ianturton.com/talks/foss4g.html#/ - The GeoServer user list posting guidelines: http://geoserver.org/comm/userlist-guidelines.html If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
