Re: [Geoserver-users] Authkey module questions

[Jim Hughes]

Hi Mauro,

I didn't try creating a new filter, so maybe that was there.  In terms 
of UI, I was looking here 
https://github.com/geoserver/geoserver/tree/master/src/community/authkey/src/main/java/org/geoserver/security/web 
and wondering where though components showed up since I didn't see a new 
link in the left-hand gutter.


The use case is to 1) allow access via authkeys and 2) restrict data 
access by key.  For example, one 'user' might see data in a given 
geographic region.


My understanding is that applying CQL filters via GeoFence requires the 
non-embedded GeoFence.  It sounds like this might be possible, but would 
require to two hops -- there'd be a mapping from keys to users 
(somewhere, somehow), and users to CQL (GeoFence).


Given that, I'm tempted to try alternatives.

Cheers,

Jim

On 2018-01-19 04:15, Mauro Bartolomeoli wrote:

Hi Jim,
you will find a new authkey option in the authentication filters list
(when you create a new filter).

Authkey can work with GeoFence, expecially the embedded version, you
can do authentication with authkey and then use geofence for
authorization purposes.
Can you explain your use case in more detail? Expecially the CQL
filters by key stuff.

Mauro

2018-01-18 23:44 GMT+01:00 Jim Hughes :


Hi all,

Does the Authkey community module have a UI?  I tossed the jar(s)
into a GeoServer 2.12.0, and I'm not seeing anything in the
GeoServer admin UI.

Second, does the Authkey module work with GeoFence?  I'd like to be
able to restrict Authkey access by applying additional CQL filters
by key.  (As an alternative, I'm thinking about trying out a custom
ResourceAccessManager to do so...)

Thanks in advance,

Jim



--

Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
Geoserver-users mailing list

Please make sure you read the following two resources before posting
to this list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/ [1]
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html [2]

If you want to request a feature or an improvement, also see this:


https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer

[3]

Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users [4]


--

Regards,

Mauro Bartolomeoli

==
GeoServer Professional Services from the experts! Visit
http://goo.gl/it488V for more information.
==

Dott. Mauro Bartolomeoli
@mauro_bart
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:  +39 0584 1660272

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

---

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility  for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.



Links:
--
[1] http://www.ianturton.com/talks/foss4g.html#/
[2] http://geoserver.org/comm/userlist-guidelines.html
[3]
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
[4] 

Re: [Geoserver-users] Failed to Add Raster Data Source

[Daniele Romagnoli]

Hi Kris,
I think that GeoServer is able to read/access that file since the metadata
parsing was able to open a stream on that (at least, this is what I see
from the logs).
In my opinion, it is unable to setup the CoordinateReferenceSystem due to a
not supported modelType found on the GeoTIFF tags:
*GeoTiffMetadata2CRSAdapter::createCoordinateSystem:Only Geographic &
Projected Systems are supported.*
Listgeo tool can be helpful to report the actual ModelType.

The GeoServer (GeoTools) GeoTiff reader only supports: ModelTypeGeographic
and ModelTypeProjected

References here: http://geotiff.maptools.org/spec/geotiff6.html#6.3

You may want to try writing a text file with the WKT CRS definition stored
on that (you may copy it from:
http://spatialreference.org/ref/epsg/26915/prettywkt/).
Then, rename that txt file to a file with .prj extension and same name of
your actual GeoTIFF file and put that prj file beside the GeoTIFF itself.
At that point, GeoServer will read the CoordinateReferenceSystem definition
from the prj file instead of trying to parse the inner GeoTIFF tags.

Please, let us know if that solves your problem.
Regards,
Daniele


On Thu, Jan 18, 2018 at 8:13 PM, Kris Johnson  wrote:

> Hi Russ,
>
> Thanks for this suggestion. I checked the permissions (via ls command) on
> the directory:
> drwxr-xr-x 2 root root0 Jan  3 18:17 DEM_3m_Statewide
> (Same permissions for all parent directories).
>
> ...and the files themselves:
> -rwxr-xr-x 1 root root   90 Dec 21 18:12 DEM_Statewide_3m1.tfw
> -rwxr-xr-x 1 root root  69G Dec 21 20:43 DEM_Statewide_3m1.tif
> -rwxr-xr-x 1 root root 5.2K Jan  3 18:15 DEM_Statewide_3m1.tif.aux.xml
> -rwxr-xr-x 1 root root  25G Dec 22 01:11 DEM_Statewide_3m1.tif.ovr
> -rwxr-xr-x 1 root root 6.1K Jan  3 18:17 DEM_Statewide_3m1.tif.xml
>
> Here's the result of stat command on the TIF file itself:
> File: /var/local/lidar/Statewide_NWI_LiDAR Derived_Data_Layers/DEM_3m_
> Statewide/DEM_Statewide_3m1.tif
>   Size: 73163857426 Blocks: 142898160  IO Block: 16384  regular file
> Device: 52h/82d Inode: 3096224743846410  Links: 1
> Access: (0755/-rwxr-xr-x)  Uid: (0/root)   Gid: (0/root)
> Access: 2017-12-21 18:12:46.841214100 +
> Modify: 2017-12-21 20:43:39.126323800 +
> Change: 2017-12-21 20:43:39.126323800 +
>  Birth: -
>
> I'm no linux expert, but I'm assuming geoserver would just need read
> access, which is looks like everyone has.
>
> Do you have another method I might be overlooking to make sure Geoserver
> has the proper access to those files and directories?
> Another thought that is that the mount is a network drive from a windows
> machine mounted on the host (and then mounted on the container). So this is
> why I was curious about permissions and access.
>
> On Thu, Jan 18, 2018 at 12:06 PM, Russ  wrote:
>
>> I sometimes get this and it is normally permissions on the
>> files/directory.
>>
>> On 18 Jan 2018, at 17:21, Daniele Romagnoli <
>> daniele.romagn...@geo-solutions.it> wrote:
>>
>> Hello Kris,
>> I see this message on your log:
>> GeoTiffMetadata2CRSAdapter::createCoordinateSystem:Only Geographic &
>> Projected Systems are supported.
>>
>> Do you have any chance to run "gdalinfo" on that file and report back the
>> output of that command?
>>
>> Regards,
>> Daniele
>>
>> On Thu, Jan 18, 2018 at 4:54 PM, Kris Johnson  wrote:
>>
>>> Hello,
>>>
>>> I am running Geoserver (v. 2.12.1) in a docker container based on this
>>> repo (https://github.com/oscarfonts/docker-geoserver)
>>>
>>> I am attempting to create a new layer based on a large GeoTIFF (150GB
>>> uncompressed). The TIF file is on a directory mounted to the container.
>>>
>>> Here is the error message that appears:
>>>
 ​
 Could not list layers for this store, an error occurred retrieving
 them: Failed to create reader from 
 file:///var/local/lidar/Statewide_NWI_LiDAR
 Derived_Data_Layers/DEM_3m_Statewide/DEM_Statewide_3m1.tif and hints
 Hints: EXECUTOR_SERVICE = java.util.concurrent.ThreadPoo
 lExecutor@691d105[Running, pool size = 0, active threads = 0, queued
 tasks = 0, completed tasks = 0] REPOSITORY = org.geoserver.catalog.CatalogR
 epository@6f576373 System defaults: FORCE_AXIS_ORDER_HONORING = http
 STYLE_FACTORY = StyleFactoryImpl COMPARISON_TOLERANCE = 1.0E-8
 LENIENT_DATUM_SHIFT = true FILTER_FACTORY = FilterFactoryImpl
 GRID_COVERAGE_FACTORY = GridCoverageFactory TILE_ENCODING = null
 FORCE_LONGITUDE_FIRST_AXIS_ORDER = true FEATURE_FACTORY =
 org.geotools.feature.LenientFeatureFactoryImpl@1a10bb77
>>>
>>>
>>> ​I have attached the logfile as well.
>>> Thank you for any help you can provide.​
>>>
>>> --
>>> Kris Johnson
>>> Natural Resources Research Institute
>>> 5013 Miller Trunk Highway, Duluth, MN 55811
>>> 
>>> p: 218.788.2767 <(218)%20788-2767>
>>> 

Re: [Geoserver-users] Authkey module questions

[Mauro Bartolomeoli]

Hi Jim,
you will find a new authkey option in the authentication filters list (when
you create a new filter).

Authkey can work with GeoFence, expecially the embedded version, you can do
authentication with authkey and then use geofence for authorization
purposes.
Can you explain your use case in more detail? Expecially the CQL filters by
key stuff.

Mauro

2018-01-18 23:44 GMT+01:00 Jim Hughes :

> Hi all,
>
> Does the Authkey community module have a UI?  I tossed the jar(s) into a
> GeoServer 2.12.0, and I'm not seeing anything in the GeoServer admin UI.
>
> Second, does the Authkey module work with GeoFence?  I'd like to be able
> to restrict Authkey access by applying additional CQL filters by key.  (As
> an alternative, I'm thinking about trying out a custom
> ResourceAccessManager to do so...)
>
> Thanks in advance,
>
> Jim
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines:
> http://geoserver.org/comm/userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-req
> uesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>



-- 

Regards,

Mauro Bartolomeoli

==
GeoServer Professional Services from the experts! Visit http://goo.gl/it488V
for more information.
==

Dott. Mauro Bartolomeoli
@mauro_bart
Technical Lead

GeoSolutions S.A.S.
Via di Montramito 3/A
55054  Massarosa (LU)
Italy
phone: +39 0584 962313
fax:  +39 0584 1660272

http://www.geo-solutions.it
http://twitter.com/geosolutions_it

---

AVVERTENZE AI SENSI DEL D.Lgs. 196/2003

Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.

The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility  for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users