<div dir="ltr">Hi Simone,<div>as far as I have seen Eugenio is still using the old A&A method based on cookies not OAuth2 yet.</div><div><br></div><div>The problem of download the raster layer is due to the fact the that layer has been configured as a cascaded WMS, which is currently not handled by GeoNode.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 31, 2017 at 4:02 PM, Simone Dalmasso <span dir="ltr"><<a href="mailto:simone.dalmasso@gmail.com" target="_blank">simone.dalmasso@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Ciao guys, just to point out that I think Eugenio is the first one using the new oauth2 with geosites, none of us ever tested it I think :) we should though to make sure everything is still working. Eugenio thanks for the feedbacks so far.</div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">2017-05-31 15:55 GMT+02:00 Alessio Fabiani <span dir="ltr"><<a href="mailto:alessio.fabiani@gmail.com" target="_blank">alessio.fabiani@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I guess I got the problem, you configured the layer as a cascade WMS.<div><br></div><div>However, sorry... what was exactly the issue?</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 31, 2017 at 3:52 PM, Eugenio Trumpy <span dir="ltr"><<a href="mailto:frippe12573@hotmail.com" target="_blank">frippe12573@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif" dir="ltr">
<p>I see that layer as anonymous user.</p>
<p><br>
</p>
<p>E.</p>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Da:</b> Alessio Fabiani <<a href="mailto:alessio.fabiani@gmail.com" target="_blank">alessio.fabiani@gmail.com</a>><br>
<b>Inviato:</b> mercoledì 31 maggio 2017 15:45<div><div class="m_-5689380533396717649m_6401410526870264067h5"><br>
<b>A:</b> Eugenio Trumpy<br>
<b>Cc:</b> geonode-users; Simone Dalmasso<br>
<b>Oggetto:</b> Re: [GeoNode-users] geoserver authentication in multi-geosites</div></div></font>
<div> </div>
</div><div><div class="m_-5689380533396717649m_6401410526870264067h5">
<div>
<div dir="ltr">Hello Eugenio,
<div>so, just do a quick test... if the layer is public, go to <a href="http://geothoponode.igg.cnr.it/geoserver2" id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778LPlnk64625" target="_blank">http://geothoponode.igg.cnr<wbr>.it/geoserver2</a> and, as anonymous user, try to hit Layer Preview.</div>
<div><br>
</div>
<div>If you don't see your layer listed here, that means that the security (at least on that geoserver2 instance) does not allow you to access it as an anonymous user.</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, May 31, 2017 at 3:20 PM, Eugenio Trumpy <span dir="ltr">
<<a href="mailto:frippe12573@hotmail.com" target="_blank">frippe12573@hotmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p>Hi Alessio,</p>
<p><br>
</p>
<p>the raster layer is a public layer. It can be seen by anyone (check box marked). There is also my name among the users. The same for download capabilities.</p>
<p>I saw this information in the 'Change layer permissions' panel. </p>
<p>What do you mean with "<span style="font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">Is the geotiff present and configured on the
second instance too</span>"? If you mean that the raster layer is listed also in the child site,</p>
<p>the answer is yes.</p>
<p>I don't know how to catch the request, however the geoserver log output is:</p>
<p><a href="https://pastebin.com/W0K9LHde" class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048OWAAutoLink" id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048LPlnk800025" target="_blank">https://pastebin.com/W0K9LHde</a></p>
<p><br>
</p>
<p>any hints?</p>
<p><br>
</p>
<p>E. </p>
<br>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Da:</b> Alessio Fabiani <<a href="mailto:alessio.fabiani@gmail.com" target="_blank">alessio.fabiani@gmail.com</a>><br>
<b>Inviato:</b> mercoledì 24 maggio 2017 15.50<br>
<b>A:</b> Eugenio Trumpy<br>
<b>Cc:</b> geonode-users; Simone Dalmasso<span><br>
<b>Oggetto:</b> Re: [GeoNode-users] geoserver authentication in multi-geosites</span></font>
<div> </div>
</div>
<div>
<div class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778h5">
<div>
<div dir="auto">Is the geotiff present and configured on the second instance too? Is it private or publicly accessible? Can you somehow intercept the requests and send them here? </div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On May 20, 2017 15:20, "Eugenio Trumpy" <<a href="mailto:frippe12573@hotmail.com" target="_blank">frippe12573@hotmail.com</a>> wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p>Hi all,</p>
<p><br>
</p>
<p>unfortunately I was not able to solve the issue raised in this thread. I was just living in the situation described.</p>
<p>However, today I have to face a consequent, I guess, issue.</p>
<p>From a child site I'm not able to download a raster layer (uploaded as tif) in geotiff format (i.e. in the download menu there is not the item 'Geotiff').</p>
<p>If I try to download the same raster layer from the master site it is possible <span style="font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">(i.e.
in the download menu there is the item 'Geotiff'</span><span style="font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">)</span>.</p>
<p>I think is a matter of geoserver configuration/authentication in geonode-multitenancy environment.</p>
<p><br>
</p>
<p>Have you got any suggestion?</p>
<p><br>
</p>
<p>E.</p>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Da:</b> Simone Dalmasso <<a href="mailto:simone.dalmasso@gmail.com" target="_blank">simone.dalmasso@gmail.com</a>><br>
<b>Inviato:</b> mercoledì 5 aprile 2017 15.39<br>
<b>A:</b> Eugenio Trumpy<br>
<b>Cc:</b> <a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<b>Oggetto:</b> Re: geoserver authentication in multi-geosites</font>
<div> </div>
</div>
<div>
<div dir="ltr">Eugenio, I don't see wrong config. It is ok I guess to leave the master site host in the gs config as well as I think it is ok that you cannot log in directly into gs from a child site. That said, when geosites was developed, the geoserver ext
was modified to make sure that geoserver pings the same host that made the http request for authentication instead of relying on the base url parameter. So ideally it should work as you would expect.
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-04-05 14:39 GMT+02:00 Eugenio Trumpy <span dir="ltr">
<<a href="mailto:frippe12573@hotmail.com" target="_blank">frippe12573@hotmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177divtagdefaultwrapper" dir="ltr" style="font-size:12pt;color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif,EmojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols">
<p>Hi,</p>
<p><br>
</p>
<p>I'm working on geonode 2.4 in a Ubuntu server 14.04LTS (tomcat7, java8).</p>
<p>I had to upgrade geoserver from 2.7.x version up to 2.9.x.</p>
<p>In the system I configured geonode to work as multi-geosites.</p>
<p>The master site is the normal geonode site, I mean it use the local_setting.py I have in /geonode/geonode</p>
<p>The geosites are in /geonode/geonode/contrib/geosi<wbr>tes, and they use the relative config files.</p>
<p><br>
</p>
<p>The documentation: <a href="https://github.com/terranodo/geosites-project/blob/master/GEOSITES-README.md" class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177OWAAutoLink" id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177LPlnk952912" target="_blank">https://github.<wbr>com/terranodo/geosites-project<wbr>/blob/master/GEOSITES-README.m<wbr>d</a></p>
<p>indicates to leave empty <baseurl> in config.xml in security/auth/geonodeauthprovi<wbr>der/</p>
<p>In that way I have this error:</p>
<p></p>
<pre>java.lang.IllegalArgumentExcep<wbr>tion: host parameter is null
org.apache.commons.httpclient.<wbr>HttpConnection.<init>(HttpConn<wbr>ection.java:206)
org.apache.commons.httpclient.<wbr>HttpConnection.<init>(HttpConn<wbr>ection.java:155)
org.apache.commons.httpclient.<wbr>SimpleHttpConnectionManager.ge<wbr>tConnectionWithTimeout(SimpleH<wbr>ttpConnectionManager.java:175)
org.apache.commons.httpclient.<wbr>HttpMethodDirector.executeMeth<wbr>od(HttpMethodDirector.java:153<wbr>)
org.apache.commons.httpclient.<wbr>HttpClient.executeMethod(HttpC<wbr>lient.java:397)
org.apache.commons.httpclient.<wbr>HttpClient.executeMethod(HttpC<wbr>lient.java:323)
org.geonode.security.HTTPClien<wbr>t.sendGET(HTTPClient.java:89)
org.geonode.security.DefaultSe<wbr>curityClient.authenticate(Defa<wbr>ultSecurityClient.java:185)
org.geonode.security.DefaultSe<wbr>curityClient.authenticateCooki<wbr>e(DefaultSecurityClient.java:1<wbr>16)
org.geonode.security.GeoNodeAu<wbr>thenticationProvider.authentic<wbr>ate(GeoNodeAuthenticationProvi<wbr>der.java:66)
org.geoserver.security.GeoServ<wbr>erAuthenticationProvider.authe<wbr>nticate(GeoServerAuthenticatio<wbr>nProvider.java:58)
org.springframework.security.a<wbr>uthentication.ProviderManager.<wbr>authenticate(ProviderManager.j<wbr>ava:167)
org.geoserver.security.GeoServ<wbr>erSecurityManager$1.authentica<wbr>te(GeoServerSecurityManager.ja<wbr>va:323)
org.geonode.security.GeoNodeCo<wbr>okieProcessingFilter.doFilter(<wbr>GeoNodeCookieProcessingFilter.<wbr>java:94)
org.springframework.security.w<wbr>eb.FilterChainProxy$VirtualFil<wbr>terChain.doFilter(FilterChainP<wbr>roxy.java:330)
org.geoserver.security.filter.<wbr>GeoServerCompositeFilter$Neste<wbr>dFilterChain.doFilter(GeoServe<wbr>rCompositeFilter.java:69)
org.springframework.security.w<wbr>eb.context.SecurityContextPers<wbr>istenceFilter.doFilter(Securit<wbr>yContextPersistenceFilter.java<wbr>:91)
org.geoserver.security.filter.<wbr>GeoServerSecurityContextPersis<wbr>tenceFilter$1.doFilter(GeoServ<wbr>erSecurityContextPersistenceFi<wbr>lter.java:53)
org.geoserver.security.filter.<wbr>GeoServerCompositeFilter$Neste<wbr>dFilterChain.doFilter(GeoServe<wbr>rCompositeFilter.java:73)
org.geoserver.security.filter.<wbr>GeoServerCompositeFilter.doFil<wbr>ter(GeoServerCompositeFilter.j<wbr>ava:92)
org.springframework.security.w<wbr>eb.FilterChainProxy$VirtualFil<wbr>terChain.doFilter(FilterChainP<wbr>roxy.java:330)
org.springframework.security.w<wbr>eb.FilterChainProxy.doFilterIn<wbr>ternal(FilterChainProxy.java:2<wbr>13)
org.springframework.security.w<wbr>eb.FilterChainProxy.doFilter(F<wbr>ilterChainProxy.java:176)
org.geoserver.security.GeoServ<wbr>erSecurityFilterChainProxy.doF<wbr>ilter(GeoServerSecurityFilterC<wbr>hainProxy.java:152)
org.springframework.web.filter<wbr>.DelegatingFilterProxy.invokeD<wbr>elegate(DelegatingFilterProxy.<wbr>java:346)
org.springframework.web.filter<wbr>.DelegatingFilterProxy.doFilte<wbr>r(DelegatingFilterProxy.java:2<wbr>62)
org.geoserver.filters.LoggingF<wbr>ilter.doFilter(LoggingFilter.j<wbr>ava:87)
org.geoserver.filters.GZIPFilt<wbr>er.doFilter(GZIPFilter.java:42<wbr>)
org.geoserver.filters.SessionD<wbr>ebugFilter.doFilter(SessionDeb<wbr>ugFilter.java:48)
org.geoserver.filters.FlushSaf<wbr>eFilter.doFilter(FlushSafeFilt<wbr>er.java:44)
org.springframework.web.filter<wbr>.CharacterEncodingFilter.doFil<wbr>terIntaernal(CharacterEncoding<wbr>Filter.java:121)
org.springframework.web.filter<wbr>.OncePerRequestFilter.doFilter<wbr>(OncePerRequestFilter.java:107<wbr>)</pre>
both if I use the geoserver link in the menu (once logged in) and if I call geoserver by using the geoserver url in the browser address bar.
<p></p>
<p><br>
</p>
<p>If set the doman name of the master site in <span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><baseurl> in config.xml in security/auth/geonodeauthprovi<wbr>der/</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">I'm able to enter in geoserver as admin from the menu, by the way doing the same
operation from a geosite</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">I got the geoserverage but not logged.</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><span>The master site virtualhost as well as those of the geosites have the proxypass
and reverse pointing to <a href="http://localhost:8080/geoserver" class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177OWAAutoLink" id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177LPlnk163963" target="_blank">
http://localhost:8080/geoserve<wbr>r</a></span><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">The same in /geonode/geonode/contrib/geosi<wbr>tes/local_setting.py and pre-setting.py
I have <a href="http://localhost:8080/geoserver" class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177OWAAutoLink" id="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940m_8958335284791106177LPlnk531949" target="_blank">http://localhost:8080/geo<wbr>server</a></span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px"><br>
</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">Is there a wrong configuration?</span></p>
<p><span style="font-family:Calibri,Arial,Helvetica,sans-serif,"Apple Color Emoji","Segoe UI Emoji",NotoColorEmoji,"Segoe UI Symbol","Android Emoji",EmojiSymbols;font-size:16px">Any hints?</span></p>
<p><br>
</p>
<p><br>
</p>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all"><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
<div><br>
</div>
-- <br>
<div class="m_-5689380533396717649m_6401410526870264067m_-1404417816227171778m_4479607435758456048m_-3639788991529324940gmail_signature">Simone </div>
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
<br>
______________________________<wbr>_________________<br>
geonode-users mailing list<br>
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<a href="https://lists.osgeo.org/mailman/listinfo/geonode-users" rel="noreferrer" target="_blank">https://lists.osgeo.org/mailma<wbr>n/listinfo/geonode-users</a><br>
<br>
</font></span></blockquote><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></blockquote><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
</font></span></div><span class="m_-5689380533396717649HOEnZb"><font color="#888888">
<br>
</font></span></div>
</div>
</div></div></div>
</div>
</div>
</blockquote></div><br></div>
</blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div class="m_-5689380533396717649gmail_signature" data-smartmail="gmail_signature">Simone </div>
</font></span></div>
</blockquote></div><br></div>