[Qgis-user] QGIS and Mango

Thu Feb 22 10:19:18 PST 2024

Thank you for your response, see my answers below.

  *
Note "the server understands the request but refuses to authorize it".
     *
That was my thought, as if I shut the Apache service down, the request times out instead.

  *
Looking at your URL, it appears your request doesn't go directly to the QGIS server, but rather goes to mangomap.com<https://urldefense.com/v3/__http://mangomap.com__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WPE90Tv8$> (it is "mangomap" and not "mangomaps", correct?).
     *
The URL that we program into Mango is below, the one from the error is what I assume is Mango reformatting the URL behind the scenes as it presents in their UI to me. Note this URL is something that Mango advised us to use for the call on our server. We have tried it with the one specified in the below question as well to the same results.
        *
https://wms.vanburencountymi.gov/cgi-bin/qgis_mapserv.fcgi.exe?service=WMS&request=GetCapabilities&version=1.3.0

  *
Is your qgis server / apache server / network policy set up to accept requests from outside your network?
     *
It is. We have tested with ARCGIS and it is able to pull in the WMS data fine with the below URL
        *
https://wms.vanburencountymi.gov/cgi-bin/qgis_mapserv.fcgi.exe?service=WMS&request=GetCapabilities&version=1.3.0&crs=EPSG:3857&map=VBCWMS1.qgz&layers=APTEST

  *
The text "(anonymous)" appears in the log following.  Could this mean that mangomap.com<https://urldefense.com/v3/__http://mangomap.com__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WPE90Tv8$> is trying to access your qgis server as user "anonymous"?
     *
It is trying to access it anonymously, but I will note that ARCGIS also accesses it this way and works fine

  *
When you configure MangoMap(s) to talk to your qgis server, have you entered the necessary credentials (user name and password)?
     *
See above, it is availible anonymously. We will be locking it down with creds eventually, but for testing it is

  *
Can you verify that your qgis server is ok to respond to the "getcapabilities" request with the parameters supplied?  Ie maybe try it with curl from inside your network?
     *
This is one spot that I am thinking I am missing. I do have the allowed access type of GET allowed, in fact for testing we have all access types allowed at the moment, but I am not sure that we have set that up properly. Below is a screencap of that part of my Apache config file. I shared that with the Mango folks, and they seen to think it looks good.

[cid:c1b12bff-f1ad-406f-90aa-324b2b271dd5]

  [cid:8bdf3d35-b4d6-4140-a875-9eea1d4a196e]

  [Facebook] <https://www.facebook.com/VanBurenCountyMI/>     [LinkedIn] <https://www.linkedin.com/company/van-buren-county-government>     [Twitter] <https://twitter.com/VanBurenCoMI>

Collin Coe

IT Operations Manager

Van Buren County Information Services

a:

219 E. Paw Paw St, Suite 202

Paw Paw, MI 49079

t:

269-657-8266 ext. 1248

f:

269-657-8297

w:

https://www.vanburencountymi.gov<https://www.vanburencountymi.gov/>  e: coec at vanburencountymi.gov<mailto:coec at vanburencountymi.gov>

Need to meet with me? Book a meeting or check my availability with this link: Microsoft Bookings<https://outlook.office365.com/owa/calendar/CollinCoePersonalBookings@VanBurenCo.onmicrosoft.com/bookings/>

________________________________
From: chris hermansen <clhermansen at gmail.com>
Sent: Thursday, February 22, 2024 1:02 PM
To: Collin Coe <CoeC at vanburencountymi.gov>
Cc: qgis-user at lists.osgeo.org <qgis-user at lists.osgeo.org>
Subject: Re: [Qgis-user] QGIS and Mango

This email was sent from outside your organization. Please use caution when clicking links or opening attachments.
________________________________
Collin and list,

On Thu, Feb 22, 2024 at 7:43 AM Collin Coe via QGIS-User <qgis-user at lists.osgeo.org<mailto:qgis-user at lists.osgeo.org>> wrote:
Hey All,

Let me know if this is the appropriate place to send a question like this, or if there is a better support channel I might be able to reach out to.

So I, internal IT, have been tasked with assisting our GIS department with standing up a WMS server to serve local mapping data to MangoMaps. This is all in an effort to distance ourselves from ESRI as they want big money to store the volume of GIS data we have on their hosted solution.

I have stood up the QGIS server on a Windows 2019 server we are running here, gotten our GIS director connected to it using QGIS desktop, and he has even published a project that we can open just fine using the FQDN of our QGIS server externally. But here is the catch, while he can load the WMS data just fine in ARCGIS Pro on his home desktop, whenever we attempt to plug the string into MangoMaps as a WMS data source we get a 403 error and a 500 error on the Mango side and it fails to pull in the data.

My question is this, does anyone here have the same setup we do, pumping WMS data from QGIS server over https to MangoMaps, and would you be able to give some advice on how you were able to get that working? We are working with Mango support, but this falls a bit out of their wheelhouse, as it seems like our Apache QGIS server is the one giving the 403 error. The bit that confuses me, is that it is working just fine in ARCGIS traversing the same network, from the same host. This leads me to believe that Mango needs something special/different done on their end to make it work.

I will also be the first to note that I am not an Apache/GIS expert, and it very well could be an error we have made in our servers configuration. We have gone over the configuration with Mango, and they do not see any errors, but again, that is not their wheelhouse.

A 403 error usually indicates something along the lines that the web client is trying to access something for which it doesn't have permission.  For example Mozilla docs state:

403 Forbidden
The HTTP 403 Forbidden response status code indicates that the server understands the request but refuses to authorize it.
This status is similar to 401, but for the 403 Forbidden status code, re-authenticating makes no difference. The access is tied to the application logic, such as insufficient rights to a resource.

Note "the server understands the request but refuses to authorize it".

Looking at your URL, it appears your request doesn't go directly to the QGIS server, but rather goes to mangomap.com<https://urldefense.com/v3/__http://mangomap.com__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WPE90Tv8$> (it is "mangomap" and not "mangomaps", correct?).

Is your qgis server / apache server / network policy set up to accept requests from outside your network?

The text "(anonymous)" appears in the log following.  Could this mean that mangomap.com<https://urldefense.com/v3/__http://mangomap.com__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WPE90Tv8$> is trying to access your qgis server as user "anonymous"?

When you configure MangoMap(s) to talk to your qgis server, have you entered the necessary credentials (user name and password)?

Can you verify that your qgis server is ok to respond to the "getcapabilities" request with the parameters supplied?  Ie maybe try it with curl from inside your network?

At any rate, see the error that we get in Mango below, and let me know if you have any advice.

application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:63
GET https://mangomap.com/clients/5dfb3952-42b1-11ee-83b6-027d7e0bb32b/coverage_stores/get_wms_layers?wms_source=https%253A%252F%252Fwms.vanburencountymi.gov%252Fcgi-bin%252Fqgis_mapserv.fcgi.exe%253Fservice%253DWMS%2526request%253DGetCapabilities%2526version%253D1.3.0&_=1708610138093<https://urldefense.com/v3/__https://mangomap.com/clients/5dfb3952-42b1-11ee-83b6-027d7e0bb32b/coverage_stores/get_wms_layers?wms_source=https*253A*252F*252Fwms.vanburencountymi.gov*252Fcgi-bin*252Fqgis_mapserv.fcgi.exe*253Fservice*253DWMS*2526request*253DGetCapabilities*2526version*253D1.3.0&_=1708610138093__;JSUlJSUlJSUlJSU!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WINEeiEH$> 403 (Forbidden)
send @ application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:63
ajax @ application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:63
request @ application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:640
connectWms @ application_data_portal-f8ccb478ddb794401762bdd65a58df88cca0a03a304324c540f5d9b97c5622bd.js:11
(anonymous) @ application_data_portal-f8ccb478ddb794401762bdd65a58df88cca0a03a304324c540f5d9b97c5622bd.js:13
dispatch @ application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:62
v.handle @ application_one_page_app-e0c184742f67970dfcbc711490e8927caf4b7d25f000dd69df5a805edeca457b.js:61

  [cid:ii_18dd1ec780e1f6b60b81]

  [Facebook] <https://urldefense.com/v3/__https://www.facebook.com/VanBurenCountyMI/__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WE8bKqw9$>     [LinkedIn] <https://urldefense.com/v3/__https://www.linkedin.com/company/van-buren-county-government__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WN6rNoRA$>     [Twitter] <https://urldefense.com/v3/__https://twitter.com/VanBurenCoMI__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WEPYaF60$>

Collin Coe

IT Operations Manager

Van Buren County Information Services

a:

219 E. Paw Paw St, Suite 202

Paw Paw, MI 49079

t:

269-657-8266 ext. 1248

f:

269-657-8297

w:

https://www.vanburencountymi.gov<https://www.vanburencountymi.gov/>  e: coec at vanburencountymi.gov<mailto:coec at vanburencountymi.gov>

Need to meet with me? Book a meeting or check my availability with this link: Microsoft Bookings<https://urldefense.com/v3/__https://outlook.office365.com/owa/calendar/CollinCoePersonalBookings@VanBurenCo.onmicrosoft.com/bookings/__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WDlduL7c$>

_______________________________________________
QGIS-User mailing list
QGIS-User at lists.osgeo.org<mailto:QGIS-User at lists.osgeo.org>
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user<https://urldefense.com/v3/__https://lists.osgeo.org/mailman/listinfo/qgis-user__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WMUqthRv$>
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user<https://urldefense.com/v3/__https://lists.osgeo.org/mailman/listinfo/qgis-user__;!!PO4-HVKE-L9l8-c!hPRhCbuNMimPUluNMhaOjOJgXVTDfVBj1JPev1G7lPbcxJRAJ-TJ3tF3MBfmcrEf2zi3lwhtSo22EFtbSFQ2WMUqthRv$>

--
Chris Hermansen · clhermansen "at" gmail "dot" com

C'est ma façon de parler.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-awrjoqmz.png
Type: image/png
Size: 20796 bytes
Desc: Outlook-awrjoqmz.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Facebook.png
Type: image/png
Size: 1820 bytes
Desc: Outlook-Facebook.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-LinkedIn.png
Type: image/png
Size: 1796 bytes
Desc: Outlook-LinkedIn.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0011.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Twitter.png
Type: image/png
Size: 1483 bytes
Desc: Outlook-Twitter.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 626158 bytes
Desc: image.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0013.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-niqk24rx.png
Type: image/png
Size: 20796 bytes
Desc: Outlook-niqk24rx.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0014.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Facebook.png
Type: image/png
Size: 1820 bytes
Desc: Outlook-Facebook.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0015.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-LinkedIn.png
Type: image/png
Size: 1796 bytes
Desc: Outlook-LinkedIn.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0016.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-Twitter.png
Type: image/png
Size: 1483 bytes
Desc: Outlook-Twitter.png
URL: <http://lists.osgeo.org/pipermail/qgis-user/attachments/20240222/b028743a/attachment-0017.png>