<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Unfortunately I have to come back again on this topic, that seemed to be almost solved yesterday, because this morning I realized that in my running configuration I cannot view any layer (i.e. in the info page I see the pink tiles) if I'm not logged in geoserver
 as admin, and since the authentication via geonode dosen't currently work fine that is a problem. </p>
<p>This happen both from the master and from geosites.</p>
<p>I think there still is some problem on geoserver configuration.</p>
<p>No useful info on logs.</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Da:</b> Simone Dalmasso <simone.dalmasso@gmail.com><br>
<b>Inviato:</b> mercoledì 5 aprile 2017 15.39<br>
<b>A:</b> Eugenio Trumpy<br>
<b>Cc:</b> geonode-users@lists.osgeo.org<br>
<b>Oggetto:</b> Re: geoserver authentication in multi-geosites</font>
<div> </div>
</div>
<div>
<div dir="ltr">Eugenio, I don't see wrong config. It is ok I guess to leave the master site host in the gs config as well as I think it is ok that you cannot log in directly into gs from a child site. That said, when geosites was developed, the geoserver ext
 was modified to make sure that geoserver pings the same host that made the http request for authentication instead of relying on the base url parameter. So ideally it should work as you would expect. 
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-04-05 14:39 GMT+02:00 Eugenio Trumpy <span dir="ltr">
<<a href="mailto:frippe12573@hotmail.com" target="_blank">frippe12573@hotmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div id="m_8958335284791106177divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hi,</p>
<p><br>
</p>
<p>I'm working on geonode 2.4 in a Ubuntu server 14.04LTS (tomcat7, java8).</p>
<p>I had to upgrade geoserver from 2.7.x version up to 2.9.x.</p>
<p>In the system I configured geonode to work as multi-geosites.</p>
<p>The master site is the normal geonode site, I mean it use the local_setting.py I have in /geonode/geonode</p>
<p>The geosites are in /geonode/geonode/contrib/<wbr>geosites, and they use the relative config files.</p>
<p><br>
</p>
<p>The documentation: <a href="https://github.com/terranodo/geosites-project/blob/master/GEOSITES-README.md" class="m_8958335284791106177OWAAutoLink" id="m_8958335284791106177LPlnk952912" target="_blank">https://github.<wbr>com/terranodo/geosites-<wbr>project/blob/master/GEOSITES-<wbr>README.md</a></p>
<p>indicates to leave empty <baseurl> in config.xml in security/auth/<wbr>geonodeauthprovider/</p>
<p>In that way I have this error:</p>
<p></p>
<pre>java.lang.<wbr>IllegalArgumentException: host parameter is null
        org.apache.commons.httpclient.<wbr>HttpConnection.<init>(<wbr>HttpConnection.java:206)
        org.apache.commons.httpclient.<wbr>HttpConnection.<init>(<wbr>HttpConnection.java:155)
        org.apache.commons.httpclient.<wbr>SimpleHttpConnectionManager.<wbr>getConnectionWithTimeout(<wbr>SimpleHttpConnectionManager.<wbr>java:175)
        org.apache.commons.httpclient.<wbr>HttpMethodDirector.<wbr>executeMethod(<wbr>HttpMethodDirector.java:153)
        org.apache.commons.httpclient.<wbr>HttpClient.executeMethod(<wbr>HttpClient.java:397)
        org.apache.commons.httpclient.<wbr>HttpClient.executeMethod(<wbr>HttpClient.java:323)
        org.geonode.security.<wbr>HTTPClient.sendGET(HTTPClient.<wbr>java:89)
        org.geonode.security.<wbr>DefaultSecurityClient.<wbr>authenticate(<wbr>DefaultSecurityClient.java:<wbr>185)
        org.geonode.security.<wbr>DefaultSecurityClient.<wbr>authenticateCookie(<wbr>DefaultSecurityClient.java:<wbr>116)
        org.geonode.security.<wbr>GeoNodeAuthenticationProvider.<wbr>authenticate(<wbr>GeoNodeAuthenticationProvider.<wbr>java:66)
        org.geoserver.security.<wbr>GeoServerAuthenticationProvide<wbr>r.authenticate(<wbr>GeoServerAuthenticationProvide<wbr>r.java:58)
        org.springframework.security.<wbr>authentication.<wbr>ProviderManager.authenticate(<wbr>ProviderManager.java:167)
        org.geoserver.security.<wbr>GeoServerSecurityManager$1.<wbr>authenticate(<wbr>GeoServerSecurityManager.java:<wbr>323)
        org.geonode.security.<wbr>GeoNodeCookieProcessingFilter.<wbr>doFilter(<wbr>GeoNodeCookieProcessingFilter.<wbr>java:94)
        org.springframework.security.<wbr>web.FilterChainProxy$<wbr>VirtualFilterChain.doFilter(<wbr>FilterChainProxy.java:330)
        org.geoserver.security.filter.<wbr>GeoServerCompositeFilter$<wbr>NestedFilterChain.doFilter(<wbr>GeoServerCompositeFilter.java:<wbr>69)
        org.springframework.security.<wbr>web.context.<wbr>SecurityContextPersistenceFilt<wbr>er.doFilter(<wbr>SecurityContextPersistenceFilt<wbr>er.java:91)
        org.geoserver.security.filter.<wbr>GeoServerSecurityContextPersis<wbr>tenceFilter$1.doFilter(<wbr>GeoServerSecurityContextPersis<wbr>tenceFilter.java:53)
        org.geoserver.security.filter.<wbr>GeoServerCompositeFilter$<wbr>NestedFilterChain.doFilter(<wbr>GeoServerCompositeFilter.java:<wbr>73)
        org.geoserver.security.filter.<wbr>GeoServerCompositeFilter.<wbr>doFilter(<wbr>GeoServerCompositeFilter.java:<wbr>92)
        org.springframework.security.<wbr>web.FilterChainProxy$<wbr>VirtualFilterChain.doFilter(<wbr>FilterChainProxy.java:330)
        org.springframework.security.<wbr>web.FilterChainProxy.<wbr>doFilterInternal(<wbr>FilterChainProxy.java:213)
        org.springframework.security.<wbr>web.FilterChainProxy.doFilter(<wbr>FilterChainProxy.java:176)
        org.geoserver.security.<wbr>GeoServerSecurityFilterChainPr<wbr>oxy.doFilter(<wbr>GeoServerSecurityFilterChainPr<wbr>oxy.java:152)
        org.springframework.web.<wbr>filter.DelegatingFilterProxy.<wbr>invokeDelegate(<wbr>DelegatingFilterProxy.java:<wbr>346)
        org.springframework.web.<wbr>filter.DelegatingFilterProxy.<wbr>doFilter(<wbr>DelegatingFilterProxy.java:<wbr>262)
        org.geoserver.filters.<wbr>LoggingFilter.doFilter(<wbr>LoggingFilter.java:87)
        org.geoserver.filters.<wbr>GZIPFilter.doFilter(<wbr>GZIPFilter.java:42)
        org.geoserver.filters.<wbr>SessionDebugFilter.doFilter(<wbr>SessionDebugFilter.java:48)
        org.geoserver.filters.<wbr>FlushSafeFilter.doFilter(<wbr>FlushSafeFilter.java:44)
        org.springframework.web.<wbr>filter.<wbr>CharacterEncodingFilter.<wbr>doFilterIntaernal(<wbr>CharacterEncodingFilter.java:<wbr>121)
        org.springframework.web.<wbr>filter.OncePerRequestFilter.<wbr>doFilter(OncePerRequestFilter.<wbr>java:107)</pre>
both if I use the geoserver link in the menu (once logged in) and if I call geoserver by using the geoserver url in the browser address bar.
<p></p>
<p><br>
</p>
<p>If set the doman name of the master site in <span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px"><baseurl> in config.xml in security/auth/<wbr>geonodeauthprovider/</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">I'm able to enter in geoserver as admin from the menu, by the way doing the same
 operation from a geosite</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">I got the geoserverage but not logged.</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px"><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px"><span>The master site virtualhost as well as those of the geosites have the proxypass
 and reverse pointing to <a href="http://localhost:8080/geoserver" class="m_8958335284791106177OWAAutoLink" id="m_8958335284791106177LPlnk163963" target="_blank">
http://localhost:8080/<wbr>geoserver</a></span><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">The same in /geonode/geonode/contrib/<wbr>geosites/local_setting.py and pre-setting.py
 I have <a href="http://localhost:8080/geoserver" class="m_8958335284791106177OWAAutoLink" id="m_8958335284791106177LPlnk531949" target="_blank">http://localhost:8080/<wbr>geoserver</a></span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px"><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">Is there a wrong configuration?</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; font-size:16px">Any hints?</span></p>
<p><br>
</p>
<p><br>
</p>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature">Simone </div>
</div>
</div>
</div>
</div>
</body>
</html>