[GeoNode-users] GeoNode 2.10 + GeoServer 2.14.x Authentication Problem

[Berger, Steffen]

Hi!

I've got a problem here with my GeoNode 2.10 with GeoServer 2.14.x within a docker setup. I guess it must be a OAuth2 or GeoFence problem.

When I add a layer to GeoNode, the layer can be viewed/added to map etc. without any problems. With a non-admin user I can see layer the layer in the layer list, but when load this layer into a map, the tiles are not loaded from GeoServer. The response ist "Could not find layer..."

Another problem, which might be related ist that the GeoNode-Loginbutton of Geoserver does not work. It forwards me to the GeoNode-Login but then I get the error: "invalid_request Missing client_id parameter"

Here are of my settings:


Proxy URL: http://geonode:80/geoserver
security -> Settings -> "aktive role service": default
security -> authentication -> filter - > geonode-oauth2 :
access token uri: http://geonode:80/o/token/
user authorization URI: http://geonode:80/o/authorize/
Redirect URI: http://geonode:80/geoserver/index.html
Check Token Endpoint URL: http://geonode:80/api/o/v4/tokeninfo/
Logout URI: http://geonode:80/account/logout/
security->users,groups,roles -> role services -> geonode REST role service ->

administrator role -> empty
group administrator -> empty
base server URL -> http://geonode:80
... the rest is default

security -> GeoFende Data Rules : one rule with DENY for all roles, users, services, request, workspace and layers

Thanks you so much for help!

Regards,
Steffen


[cid:atene_logo_1133be95-9699-480d-b2d9-203a3b08d087.png]

Steffen Berger
Geo-Informatiker
Anwendungsentwicklung
Tel. +49 30 22183-3534 | Fax +49 30 22183-1199
s.berger at atenekom.eu
atene KOM GmbH
Agentur für Kommunikation, Organisation und Management
Invalidenstr. 91 | 10115 Berlin



www.atenekom.eu<http://www.atenekom.eu/> | Datenschutzerklärung<https://atenekom.eu/impressum/datenschutz/>
Apps <https://atenekom.eu/kompetenzen/foerdermittelberatung/foerdermittel-app/> | facebook<https://www.facebook.com/atenekom> | XING<https://www.xing.com/companies/atenekomgmbh%25257Cagenturf%2525C3%25259Crkommunikationorganisationundmanagement?user_view=true> | Twitter<https://twitter.com/atenekom>

Geschäftsführer: Tim Brauckmüller  |  AG Berlin Charlottenburg  |  HRB 111699  |  USt-ID: DE259091767



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20190412/184fe1cb/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: atene_logo_1133be95-9699-480d-b2d9-203a3b08d087.png
Type: image/png
Size: 12897 bytes
Desc: atene_logo_1133be95-9699-480d-b2d9-203a3b08d087.png
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20190412/184fe1cb/attachment-0001.png>