[GeoNode-users] Random 403 error using Geonode behind a web-gateway

Francesco Bartoli xbartolone at gmail.com
Wed Jul 6 06:31:23 PDT 2016


Hi Amedeo,

just one question, is there a security requirement to keep your internal proxy to geoserver under a SSL channel? In that case I would recommend to follow this directive [1] and those below

Ciao
Francesco

[1] http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslproxycacertificatefile
 
Il giorno 06/lug/2016, alle ore 15:08, Amedeo Fadini <amefad at gmail.com> ha scritto:

> Hi everybody,
> 
> so my installation  of geonode  with ssl works fine (2.4 on Ubuntu
> server via apt-get) but I still haven't found the time to update the
> ssl guide because we're unable to view geonode from outside...
> 
> we ave a web gateway with apache 2.2 that forwards the request from
> outside using proxy directive
> 
> gis.mydomain.com >> mygeonode
> 
> I had to set the SITEURL to the external name gis.mydomain.com as the
> ssl certificate is issued for that domain, I also used
> https://gis.mydomain.com as LOCATION in geoserver section of
> local_settings.py (otherwise the command geonode updatelayers doesn't
> work due to authorization failure)
> 
> Browsing the maps with geoexplorer the WMS requests are correctly addressed to
> 
> https://gis.mydomain.com/geoserver/wms  and the response is ok , but
> sometimes apparently random a few of that requests fails with 403
> Forbidden error, altought the same request is working after half a
> second. There's any logic on the errors, just happens after a few time
> browsing.. then works then happens again.
> 
> Apache logs and geoserver logs don't file any error on these requests and
> using ssl with the machine hostname inside our network works fine, so
> the problem is on the gateway configuration.
> 
> Any clue on how should be configurated the gateway proxy? Other
> directives than these?
> 
>    ProxyPreserveHost On
>    ProxyPass /geoserver https://mygeonode/geoserver
>    ProxyPassReverse /geoserver https://mygeonode/geoserver
> 
> 
> Amedeo Fadini
> _______________________________________________
> geonode-users mailing list
> geonode-users at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/geonode-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20160706/2e861ed4/attachment.html>


More information about the geonode-users mailing list