Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-04 Thread Ian Turton 
If you think it would help future users with this problem you could add
this information with an outline of the problem and this solution to the
running in production pages of the user manual

Ian

On Wed, 3 Aug 2022 at 16:25, Frans Fierens  wrote:

> Wow! This is indeed the solution, together with the nginx config below
> (the allow/deny is to deny internet access). Thanks!!
>
> best regards
>
> Frans
>
> location /geoserver/ {
>  allow x.x.x.x;
>  deny all;
>  proxy_pass http://yourgeoserver:8080/geoserver/;
>  proxy_pass_header Set-Cookie;
>  proxy_set_header Host $host;
>  proxy_set_header X-Forwarded-Proto $scheme;
>  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> }
>
> location / {
>   allow x.x.x.x;
>   deny all;
>   proxy_pass http://yourgeoserver:8080/geoserver/;
>   proxy_pass_header Set-Cookie;
>   proxy_set_header Host $host;
>   proxy_set_header X-Forwarded-Proto $scheme;
>   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> }
> On 03/08/2022 15:58, Christian Mayer wrote:
>
> Hi Frans, hi all,
>
> I had running a GeoServer >2.19 with a nginx in the past. I remember some
> problems with unwanted redirects and similar when behind the proxy.
>
> Besides setting the "Proxy Base URL" I had to set the ENV VAR
> "GEOSERVER_CSRF_WHITELIST", like GEOSERVER_CSRF_WHITELIST=
> my-geoserver.server.de to get the Web-UI and all services fully
> functional.
>
> Not sure if it was exactly the same problems you had but maybe you want to
> give it a shot and report back here.
>
> Best regards
> Chris
> On 03.08.22 08:57, Frans Fierens wrote:
>
> Thx Graham.
>
> This is indeed a solution. But not everything is solved: a wfs/wms
> GetCapabilities request will rely on the Global proxy-base url. It seems
> that the "online resource" option in the wfs/wms service section is not
> being used (?)
>
> To illustrate this:
>
> 1. GetCapabilities using geoserver v2.18.6:
> https://geo.irceline.be/wfs?request=GetCapabilities : the xlinks
> are correctly pointing to the proxy url https://geo.irceline.be/wfs. Global
> proxy-base url=https://geo.irceline.be, admin pages are accessible.
>
> 2. GetCapabilities using geoserver v2.21.0 with empty  Global proxy-base
> url: https://geonew.irceline.be/wfs?request=GetCapabilities : the
> xlinks are pointing to http://georocky/geoserver/wfs and NOT to the
> correct proxy url https://geonew.irceline.be/wfs. This will only be
> correct when the Global proxy-base url is not empty ... but then the
> admin pages are not accessible anymore.
>
> catch 22 ...
>
> best regards,
>
> Frans
>
> On 03/08/2022 02:22, Humphries, Graham wrote:
>
> Hi Frans,
>
>
>
> I lodged the original issue about this. What I have done is set the
> proxy-base url for the workspace and left the Global proxy-base url unset.
> This allows me to access the admin pages.
>
>
>
> *From:* Frans Fierens  
> *Sent:* Wednesday, 3 August 2022 2:26 AM
> *To:* Andrea Aime 
> 
> *Cc:* geoserver-users@lists.sourceforge.net
> *Subject:* Re: [Geoserver-users] problem with Proxy Base URL as from
> version 2.19
>
>
>
> Thanks Andrea,
>
> I already tried to configure the nginx but without success. It would be
> interesting to get more info on the nginx config. There are also other
> issues to deal when using this option: you give internet access to the
> admin pages (which I would prefer not to do).
>
> best regards,
>
> Frans
>
> On 02/08/2022 18:09, Andrea Aime wrote:
>
> Hi Frans,
>
> maybe it just requires a different set up? These two servers are using
> nginx proxying, and a proxy base URL,
>
> but the UI works, as you can see:
>
>
>
> https://gs-main.geosolutionsgroup.com/geoserver/web/
> <https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Y5ciw1cuX%2FCeiIjZI3ISpIGmBi8p3pWbSp4UpZLBt7g%3D=0>
>
> http://gs-stable.geosolutionsgroup.com/geoserver/web/
> <https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgs-stable.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-03 Thread Frans Fierens 
Wow! This is indeed the solution, together with the nginx config below 
(the allow/deny is to deny internet access). Thanks!!


best regards

Frans

location /geoserver/ {
 allow x.x.x.x;
 deny all;
 proxy_pass http://yourgeoserver:8080/geoserver/;
 proxy_pass_header Set-Cookie;
 proxy_set_header Host $host;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    location / {
  allow x.x.x.x;
  deny all;
  proxy_pass http://yourgeoserver:8080/geoserver/;
  proxy_pass_header Set-Cookie;
  proxy_set_header Host $host;
  proxy_set_header X-Forwarded-Proto $scheme;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

On 03/08/2022 15:58, Christian Mayer wrote:


Hi Frans, hi all,

I had running a GeoServer >2.19 with a nginx in the past. I remember 
some problems with unwanted redirects and similar when behind the proxy.


Besides setting the "Proxy Base URL" I had to set the ENV VAR 
"GEOSERVER_CSRF_WHITELIST", like 
GEOSERVER_CSRF_WHITELIST=my-geoserver.server.de to get the Web-UI and 
all services fully functional.


Not sure if it was exactly the same problems you had but maybe you 
want to give it a shot and report back here.


Best regards
Chris

On 03.08.22 08:57, Frans Fierens wrote:


Thx Graham.

This is indeed a solution. But not everything is solved: a wfs/wms 
GetCapabilities request will rely on the Global proxy-base url. It 
seems that the "online resource" option in the wfs/wms service 
section is not being used (?)


To illustrate this:

1. GetCapabilities using geoserver v2.18.6: 
https://geo.irceline.be/wfs?request=GetCapabilities : the 
xlinks are correctly pointing to the proxy url 
https://geo.irceline.be/wfs. Global proxy-base 
url=https://geo.irceline.be, admin pages are accessible.


2. GetCapabilities using geoserver v2.21.0 with empty Global 
proxy-base url: 
https://geonew.irceline.be/wfs?request=GetCapabilities : the 
xlinks are pointing to http://georocky/geoserver/wfs and NOT to the 
correct proxy url https://geonew.irceline.be/wfs. This will only be 
correct when the Global proxy-base url is not empty ... but then the 
admin pages are not accessible anymore.


catch 22 ...

best regards,

Frans


On 03/08/2022 02:22, Humphries, Graham wrote:


Hi Frans,

I lodged the original issue about this. What I have done is set the 
proxy-base url for the workspace and left the Global proxy-base url 
unset. This allows me to access the admin pages.


*From:*Frans Fierens 
*Sent:* Wednesday, 3 August 2022 2:26 AM
*To:* Andrea Aime 
*Cc:* geoserver-users@lists.sourceforge.net
*Subject:* Re: [Geoserver-users] problem with Proxy Base URL as from 
version 2.19


Thanks Andrea,

I already tried to configure the nginx but without success. It would 
be interesting to get more info on the nginx config. There are also 
other issues to deal when using this option: you give internet 
access to the admin pages (which I would prefer not to do).


best regards,

Frans

On 02/08/2022 18:09, Andrea Aime wrote:

Hi Frans,

maybe it just requires a different set up? These two servers are
using nginx proxying, and a proxy base URL,

but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Y5ciw1cuX%2FCeiIjZI3ISpIGmBi8p3pWbSp4UpZLBt7g%3D=0>

http://gs-stable.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgs-stable.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=3h4L6AkboZxuA3v%2FDfIqeUfGG81V9j4YdwSf8lVX2iI%3D=0>

One is a 2.20.x, the other is a nightly build from the developer
series.

Unfortunately I don't know exactly how they are set up NGINX
wise, but I can tell you the proxy base URL configured in GeoServer

is simple, e.g.
"https://gs-main.geosolutionsgroup.com/geoserver/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=OAIceeGqwA3

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-03 Thread Christian Mayer 

Hi Frans, hi all,

I had running a GeoServer >2.19 with a nginx in the past. I remember 
some problems with unwanted redirects and similar when behind the proxy.


Besides setting the "Proxy Base URL" I had to set the ENV VAR 
"GEOSERVER_CSRF_WHITELIST", like 
GEOSERVER_CSRF_WHITELIST=my-geoserver.server.de to get the Web-UI and 
all services fully functional.


Not sure if it was exactly the same problems you had but maybe you want 
to give it a shot and report back here.


Best regards
Chris

On 03.08.22 08:57, Frans Fierens wrote:


Thx Graham.

This is indeed a solution. But not everything is solved: a wfs/wms 
GetCapabilities request will rely on the Global proxy-base url. It 
seems that the "online resource" option in the wfs/wms service section 
is not being used (?)


To illustrate this:

1. GetCapabilities using geoserver v2.18.6: 
https://geo.irceline.be/wfs?request=GetCapabilities : the 
xlinks are correctly pointing to the proxy url 
https://geo.irceline.be/wfs. Global proxy-base 
url=https://geo.irceline.be, admin pages are accessible.


2. GetCapabilities using geoserver v2.21.0 with empty Global 
proxy-base url: 
https://geonew.irceline.be/wfs?request=GetCapabilities : the 
xlinks are pointing to http://georocky/geoserver/wfs and NOT to the 
correct proxy url https://geonew.irceline.be/wfs. This will only be 
correct when the Global proxy-base url is not empty ... but then the 
admin pages are not accessible anymore.


catch 22 ...

best regards,

Frans


On 03/08/2022 02:22, Humphries, Graham wrote:


Hi Frans,

I lodged the original issue about this. What I have done is set the 
proxy-base url for the workspace and left the Global proxy-base url 
unset. This allows me to access the admin pages.


*From:*Frans Fierens 
*Sent:* Wednesday, 3 August 2022 2:26 AM
*To:* Andrea Aime 
*Cc:* geoserver-users@lists.sourceforge.net
*Subject:* Re: [Geoserver-users] problem with Proxy Base URL as from 
version 2.19


Thanks Andrea,

I already tried to configure the nginx but without success. It would 
be interesting to get more info on the nginx config. There are also 
other issues to deal when using this option: you give internet access 
to the admin pages (which I would prefer not to do).


best regards,

Frans

On 02/08/2022 18:09, Andrea Aime wrote:

Hi Frans,

maybe it just requires a different set up? These two servers are
using nginx proxying, and a proxy base URL,

but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Y5ciw1cuX%2FCeiIjZI3ISpIGmBi8p3pWbSp4UpZLBt7g%3D=0>

http://gs-stable.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgs-stable.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=3h4L6AkboZxuA3v%2FDfIqeUfGG81V9j4YdwSf8lVX2iI%3D=0>

One is a 2.20.x, the other is a nightly build from the developer
series.

Unfortunately I don't know exactly how they are set up NGINX
wise, but I can tell you the proxy base URL configured in GeoServer

is simple, e.g. "https://gs-main.geosolutionsgroup.com/geoserver/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=OAIceeGqwA31utgeJ0rg%2Bj6bRYkSIoDvyj97Es0TM8g%3D=0>"

Cheers

Andrea

On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens
 wrote:

Hello,

I do have the same problem as posted in:
https://sourceforge.net/p/geoserver/mailman/message/37250476/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsourceforge.net%2Fp%2Fgeoserver%2Fmailman%2Fmessage%2F37250476%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=lMSYlFLrdouEL3yOCAX3aGUljHhtm%2Br6oaFm0Hn%2B3Ns%3D=0>

When geoserver is behind a reverse proxy as nginx and when

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-03 Thread Frans Fierens 

Thx Graham.

This is indeed a solution. But not everything is solved: a wfs/wms 
GetCapabilities request will rely on the Global proxy-base url. It seems 
that the "online resource" option in the wfs/wms service section is not 
being used (?)


To illustrate this:

1. GetCapabilities using geoserver v2.18.6: 
https://geo.irceline.be/wfs?request=GetCapabilities : the xlinks 
are correctly pointing to the proxy url https://geo.irceline.be/wfs. 
Global proxy-base url=https://geo.irceline.be, admin pages are accessible.


2. GetCapabilities using geoserver v2.21.0 with empty Global proxy-base 
url: https://geonew.irceline.be/wfs?request=GetCapabilities : 
the xlinks are pointing to http://georocky/geoserver/wfs and NOT to the 
correct proxy url https://geonew.irceline.be/wfs. This will only be 
correct when the Global proxy-base url is not empty ... but then the 
admin pages are not accessible anymore.


catch 22 ...

best regards,

Frans


On 03/08/2022 02:22, Humphries, Graham wrote:


Hi Frans,

I lodged the original issue about this. What I have done is set the 
proxy-base url for the workspace and left the Global proxy-base url 
unset. This allows me to access the admin pages.


*From:*Frans Fierens 
*Sent:* Wednesday, 3 August 2022 2:26 AM
*To:* Andrea Aime 
*Cc:* geoserver-users@lists.sourceforge.net
*Subject:* Re: [Geoserver-users] problem with Proxy Base URL as from 
version 2.19


Thanks Andrea,

I already tried to configure the nginx but without success. It would 
be interesting to get more info on the nginx config. There are also 
other issues to deal when using this option: you give internet access 
to the admin pages (which I would prefer not to do).


best regards,

Frans

On 02/08/2022 18:09, Andrea Aime wrote:

Hi Frans,

maybe it just requires a different set up? These two servers are
using nginx proxying, and a proxy base URL,

but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Y5ciw1cuX%2FCeiIjZI3ISpIGmBi8p3pWbSp4UpZLBt7g%3D=0>

http://gs-stable.geosolutionsgroup.com/geoserver/web/

<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgs-stable.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=3h4L6AkboZxuA3v%2FDfIqeUfGG81V9j4YdwSf8lVX2iI%3D=0>

One is a 2.20.x, the other is a nightly build from the developer
series.

Unfortunately I don't know exactly how they are set up NGINX wise,
but I can tell you the proxy base URL configured in GeoServer

is simple, e.g. "https://gs-main.geosolutionsgroup.com/geoserver/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=OAIceeGqwA31utgeJ0rg%2Bj6bRYkSIoDvyj97Es0TM8g%3D=0>"

Cheers

Andrea

On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens 
wrote:

Hello,

I do have the same problem as posted in:
https://sourceforge.net/p/geoserver/mailman/message/37250476/

<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsourceforge.net%2Fp%2Fgeoserver%2Fmailman%2Fmessage%2F37250476%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=lMSYlFLrdouEL3yOCAX3aGUljHhtm%2Br6oaFm0Hn%2B3Ns%3D=0>

When geoserver is behind a reverse proxy as nginx and when
"Proxy Base
URL" is not empty in the global setting,  it is not possible
to access
the web user interface anymore. I also did some tests, and
this issue
starts at version 2.19.

This is very annoying.

When "Proxy Base URL" is empty, you can login to the webui,
but a wfs or
wms?request=GetCapabilities will not be given the
correct xlinks
( xlink:href="https://proxy_url_name/wfs;) but will show
(xlink:href="http://servername:8080/g

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-02 Thread Humphries, Graham 
Hi Frans,

I lodged the original issue about this. What I have done is set the proxy-base 
url for the workspace and left the Global proxy-base url unset. This allows me 
to access the admin pages.

From: Frans Fierens 
Sent: Wednesday, 3 August 2022 2:26 AM
To: Andrea Aime 
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19


Thanks Andrea,

I already tried to configure the nginx but without success. It would be 
interesting to get more info on the nginx config. There are also other issues 
to deal when using this option: you give internet access to the admin pages 
(which I would prefer not to do).

best regards,

Frans
On 02/08/2022 18:09, Andrea Aime wrote:
Hi Frans,
maybe it just requires a different set up? These two servers are using nginx 
proxying, and a proxy base URL,
but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=Y5ciw1cuX%2FCeiIjZI3ISpIGmBi8p3pWbSp4UpZLBt7g%3D=0>
http://gs-stable.geosolutionsgroup.com/geoserver/web/<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgs-stable.geosolutionsgroup.com%2Fgeoserver%2Fweb%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=3h4L6AkboZxuA3v%2FDfIqeUfGG81V9j4YdwSf8lVX2iI%3D=0>

One is a 2.20.x, the other is a nightly build from the developer series.
Unfortunately I don't know exactly how they are set up NGINX wise, but I can 
tell you the proxy base URL configured in GeoServer
is simple, e.g. 
"https://gs-main.geosolutionsgroup.com/geoserver/<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgs-main.geosolutionsgroup.com%2Fgeoserver%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=OAIceeGqwA31utgeJ0rg%2Bj6bRYkSIoDvyj97Es0TM8g%3D=0>"

Cheers
Andrea


On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens 
mailto:fier...@irceline.be>> wrote:
Hello,

I do have the same problem as posted in:
https://sourceforge.net/p/geoserver/mailman/message/37250476/<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsourceforge.net%2Fp%2Fgeoserver%2Fmailman%2Fmessage%2F37250476%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=lMSYlFLrdouEL3yOCAX3aGUljHhtm%2Br6oaFm0Hn%2B3Ns%3D=0>

When geoserver is behind a reverse proxy as nginx and when "Proxy Base
URL" is not empty in the global setting,  it is not possible to access
the web user interface anymore. I also did some tests, and this issue
starts at version 2.19.

This is very annoying.

When "Proxy Base URL" is empty, you can login to the webui, but a wfs or
wms?request=GetCapabilities will not be given the correct xlinks
( xlink:href="https://proxy_url_name/wfs;) but will show
(xlink:href="http://servername:8080/geoserver/wfs (or wms)")

When "Proxy Base URL" is not empty (https://proxy_url_name), then it is
not possible to login via the webinterface.

Is it possible to solve this?

thanks.

Frans Fierens



___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ianturton.com%2Ftalks%2Ffoss4g.html%23%2F=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde468dde9808da74a3e9a2%7C64ebab8accf44b5ca2d32b4e972d96b2%7C0%7C0%7C637950544616078904%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=V8AbocMv5m1a2TDtBej8l7jtkOofoF6UTx7qsr6g7UA%3D=0>
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html<https://aus01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgeoserver.org%2Fcomm%2Fuserlist-guidelines.html=05%7C01%7Cgraham.humphries%40stategrowth.tas.gov.au%7C44b6a4196cde

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-02 Thread Andrea Aime 
In our case we want to give internet access. Unfortunately I did not set it
up, and I have no experience
with Nginx myself, so I can't get into more details, sorry. Hopefully
someone else on this list is more
proficient with deployments.

Cheers
Andrea

On Tue, Aug 2, 2022 at 6:26 PM Frans Fierens  wrote:

> Thanks Andrea,
>
> I already tried to configure the nginx but without success. It would be
> interesting to get more info on the nginx config. There are also other
> issues to deal when using this option: you give internet access to the
> admin pages (which I would prefer not to do).
>
> best regards,
>
> Frans
> On 02/08/2022 18:09, Andrea Aime wrote:
>
> Hi Frans,
> maybe it just requires a different set up? These two servers are using
> nginx proxying, and a proxy base URL,
> but the UI works, as you can see:
>
> https://gs-main.geosolutionsgroup.com/geoserver/web/
> http://gs-stable.geosolutionsgroup.com/geoserver/web/
>
> One is a 2.20.x, the other is a nightly build from the developer series.
> Unfortunately I don't know exactly how they are set up NGINX wise, but I
> can tell you the proxy base URL configured in GeoServer
> is simple, e.g. "https://gs-main.geosolutionsgroup.com/geoserver/;
>
> Cheers
> Andrea
>
>
> On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens  wrote:
>
>> Hello,
>>
>> I do have the same problem as posted in:
>> https://sourceforge.net/p/geoserver/mailman/message/37250476/
>>
>> When geoserver is behind a reverse proxy as nginx and when "Proxy Base
>> URL" is not empty in the global setting,  it is not possible to access
>> the web user interface anymore. I also did some tests, and this issue
>> starts at version 2.19.
>>
>> This is very annoying.
>>
>> When "Proxy Base URL" is empty, you can login to the webui, but a wfs or
>> wms?request=GetCapabilities will not be given the correct xlinks
>> ( xlink:href="https://proxy_url_name/wfs;) but will show
>> (xlink:href="http://servername:8080/geoserver/wfs (or wms)")
>>
>> When "Proxy Base URL" is not empty (https://proxy_url_name), then it is
>> not possible to login via the webinterface.
>>
>> Is it possible to solve this?
>>
>> thanks.
>>
>> Frans Fierens
>>
>>
>>
>> ___
>> Geoserver-users mailing list
>>
>> Please make sure you read the following two resources before posting to
>> this list:
>> - Earning your support instead of buying it, but Ian Turton:
>> http://www.ianturton.com/talks/foss4g.html#/
>> - The GeoServer user list posting guidelines:
>> http://geoserver.org/comm/userlist-guidelines.html
>>
>> If you want to request a feature or an improvement, also see this:
>> https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
>>
>>
>> Geoserver-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>>
>
>
> --
>
> Regards,
>
> Andrea Aime
>
> == GeoServer Professional Services from the experts!
>
> Visit http://bit.ly/gs-services-us for more information. == Ing. Andrea
> Aime @geowolf Technical Lead
>
> GeoSolutions Group phone: +39 0584 962313
>
> fax: +39 0584 1660272
>
> mob:   +39  339 8844549
>
> https://www.geosolutionsgroup.com/
>
> http://twitter.com/geosolutions_it
>
> ---
>
> Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE
> 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
> precisa che ogni circostanza inerente alla presente email (il suo
> contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
> riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
> messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
> operazione è illecita. Le sarei comunque grato se potesse darmene notizia. 
> This
> email is intended only for the person or entity to which it is addressed
> and may contain information that is privileged, confidential or otherwise
> protected from disclosure. We remind that - as provided by European
> Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail
> or the information herein by anyone other than the intended recipient is
> prohibited. If you have received this email by mistake, please notify us
> immediately by telephone or e-mail
>
> --
> Frans Fierens
> Medewerker van de Vlaamse Milieumaatschappij (VMM, http://www.vmm.be) 
> aangesteld bij de Intergewestelijke Cel voor het Leefmilieu (IRCEL).
> --
> Intergewestelijke Cel voor het Leefmilieu (IRCEL)
> Gaucheretstraat 92-94
> 1030 
> Brusselhttp://www.irceline.behttp://twitter.com/SMOG_BEhttps://www.facebook.com/ircel.celine
> Tel 00 32(0)2 227 56 71
> GSM 00 32(0)494 62 91 40
> Skype Frans_JMC.Fierens
>
>

-- 

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-02 Thread Frans Fierens 

Thanks Andrea,

I already tried to configure the nginx but without success. It would be 
interesting to get more info on the nginx config. There are also other 
issues to deal when using this option: you give internet access to the 
admin pages (which I would prefer not to do).


best regards,

Frans

On 02/08/2022 18:09, Andrea Aime wrote:

Hi Frans,
maybe it just requires a different set up? These two servers are using 
nginx proxying, and a proxy base URL,

but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/
http://gs-stable.geosolutionsgroup.com/geoserver/web/

One is a 2.20.x, the other is a nightly build from the developer series.
Unfortunately I don't know exactly how they are set up NGINX wise, but 
I can tell you the proxy base URL configured in GeoServer

is simple, e.g. "https://gs-main.geosolutionsgroup.com/geoserver/;

Cheers
Andrea


On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens  wrote:

Hello,

I do have the same problem as posted in:
https://sourceforge.net/p/geoserver/mailman/message/37250476/

When geoserver is behind a reverse proxy as nginx and when "Proxy
Base
URL" is not empty in the global setting,  it is not possible to
access
the web user interface anymore. I also did some tests, and this issue
starts at version 2.19.

This is very annoying.

When "Proxy Base URL" is empty, you can login to the webui, but a
wfs or
wms?request=GetCapabilities will not be given the correct
xlinks
( xlink:href="https://proxy_url_name/wfs;) but will show
(xlink:href="http://servername:8080/geoserver/wfs (or wms)")

When "Proxy Base URL" is not empty (https://proxy_url_name), then
it is
not possible to login via the webinterface.

Is it possible to solve this?

thanks.

Frans Fierens



___
Geoserver-users mailing list

Please make sure you read the following two resources before
posting to this list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this:

https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users



--

Regards,

Andrea Aime

==GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for 
more information.==Ing. Andrea Aime @geowolfTechnical Lead


GeoSolutions Groupphone: +39 0584 962313

fax:     +39 0584 1660272

mob:   +39  339 8844549


https://www.geosolutionsgroup.com/ 

http://twitter.com/geosolutions_it 

---


Con riferimento alla normativa sul trattamento dei dati personali 
(Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati 
“GDPR”), si precisa che ogni circostanza inerente alla presente email 
(il suo contenuto, gli eventuali allegati, etc.) è un dato la cui 
conoscenza è riservata al/i solo/i destinatario/i indicati dallo 
scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a 
cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato 
se potesse darmene notizia.This email is intended only for the person 
or entity to which it is addressed and may contain information that is 
privileged, confidential or otherwise protected from disclosure. We 
remind that - as provided by European Regulation 2016/679 “GDPR” - 
copying, dissemination or use of this e-mail or the information herein 
by anyone other than the intended recipient is prohibited. If you have 
received this email by mistake, please notify us immediately by 
telephone or e-mail


--
Frans Fierens
Medewerker van de Vlaamse Milieumaatschappij (VMM,http://www.vmm.be) aangesteld 
bij de Intergewestelijke Cel voor het Leefmilieu (IRCEL).
--
Intergewestelijke Cel voor het Leefmilieu (IRCEL)
Gaucheretstraat 92-94
1030 Brussel
http://www.irceline.be
http://twitter.com/SMOG_BE
https://www.facebook.com/ircel.celine
Tel 00 32(0)2 227 56 71
GSM 00 32(0)494 62 91 40
Skype Frans_JMC.Fierens
___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this:

Re: [Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-02 Thread Andrea Aime 
Hi Frans,
maybe it just requires a different set up? These two servers are using
nginx proxying, and a proxy base URL,
but the UI works, as you can see:

https://gs-main.geosolutionsgroup.com/geoserver/web/
http://gs-stable.geosolutionsgroup.com/geoserver/web/

One is a 2.20.x, the other is a nightly build from the developer series.
Unfortunately I don't know exactly how they are set up NGINX wise, but I
can tell you the proxy base URL configured in GeoServer
is simple, e.g. "https://gs-main.geosolutionsgroup.com/geoserver/;

Cheers
Andrea


On Tue, Aug 2, 2022 at 3:10 PM Frans Fierens  wrote:

> Hello,
>
> I do have the same problem as posted in:
> https://sourceforge.net/p/geoserver/mailman/message/37250476/
>
> When geoserver is behind a reverse proxy as nginx and when "Proxy Base
> URL" is not empty in the global setting,  it is not possible to access
> the web user interface anymore. I also did some tests, and this issue
> starts at version 2.19.
>
> This is very annoying.
>
> When "Proxy Base URL" is empty, you can login to the webui, but a wfs or
> wms?request=GetCapabilities will not be given the correct xlinks
> ( xlink:href="https://proxy_url_name/wfs;) but will show
> (xlink:href="http://servername:8080/geoserver/wfs (or wms)")
>
> When "Proxy Base URL" is not empty (https://proxy_url_name), then it is
> not possible to login via the webinterface.
>
> Is it possible to solve this?
>
> thanks.
>
> Frans Fierens
>
>
>
> ___
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines:
> http://geoserver.org/comm/userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>


-- 

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.
==

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax: +39 0584 1660272

mob:   +39  339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

---

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE
2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si
precisa che ogni circostanza inerente alla presente email (il suo
contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è
riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il
messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra
operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is
addressed and may contain information that is privileged, confidential or
otherwise protected from disclosure. We remind that - as provided by
European Regulation 2016/679 “GDPR” - copying, dissemination or use of this
e-mail or the information herein by anyone other than the intended
recipient is prohibited. If you have received this email by mistake, please
notify us immediately by telephone or e-mail
___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

[Geoserver-users] problem with Proxy Base URL as from version 2.19

2022-08-02 Thread Frans Fierens 

Hello,

I do have the same problem as posted in: 
https://sourceforge.net/p/geoserver/mailman/message/37250476/


When geoserver is behind a reverse proxy as nginx and when "Proxy Base 
URL" is not empty in the global setting,  it is not possible to access 
the web user interface anymore. I also did some tests, and this issue 
starts at version 2.19.


This is very annoying.

When "Proxy Base URL" is empty, you can login to the webui, but a wfs or 
wms?request=GetCapabilities will not be given the correct xlinks 
( xlink:href="https://proxy_url_name/wfs;) but will show 
(xlink:href="http://servername:8080/geoserver/wfs (or wms)")


When "Proxy Base URL" is not empty (https://proxy_url_name), then it is 
not possible to login via the webinterface.


Is it possible to solve this?

thanks.

Frans Fierens



___
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users