[GeoNode-users] Issue with admin authentication
Alessio Fabiani
alessio.fabiani at geo-solutions.it
Thu Jul 20 02:19:38 PDT 2017
You need to change those values:
1. GeoNode REST Role Service to -> <baseUrl>http://192.168.31.80</baseUrl>
2. Authentication filters, geonode-oauth2:
Access Token URI to -> http://192.168.31.80/o/token/
Check Token Endpoint URL to -> http://192.168.31.80/api/o/v4/tokeninfo/
Scopes to -> write
Regards,
Alessio Fabiani
==
GeoServer Professional Services from the experts! Visit http://goo.gl/it488V
for more information.
==
Ing. Alessio Fabiani
@alfa7691
Founder/Technical Lead
GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 331 6233686
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
On Wed, Jul 19, 2017 at 3:25 PM, Annalisa Schiavon <
annalisa.schiavon at gmail.com> wrote:
> I can enter in GeoNode REST Role Service. <baseUrl> was my ip:
>
> <baseUrl>http:// <http://localhost/>192.168.31.80</baseUrl>
>
> Now I set it to localhost. This is my screenshot:
>
> [image: Immagine incorporata 1]
>
>
> In Authentication filters, geonode-oauth2 is setted as below:
>
> [image: Immagine incorporata 2]
>
> what I wrong?
> ClientID and Client Secret are equal to those in Geonode Admin
>
> Thanks
>
> 2017-07-19 13:56 GMT+02:00 Alessio Fabiani <alessio.fabiani at geo-
> solutions.it>:
>
>> In that case it might be a misconfiguration of the "GeoNode REST Role
>> Service". Most likely if you try to enter it you will receive an error.
>>
>> You need to double check manually the file inside the GEOSERVER_DATA_DIR:
>>
>> $GEOSERVER_DATA_DIR/security/role/geonode\ REST\ role\ service/config.xml
>>
>> and make sure this parameter points correctly to the base URL of your
>> GeoNode instance
>>
>> <baseUrl>http://localhost</baseUrl>
>>
>>
>>
>> Regards,
>>
>> Alessio Fabiani
>>
>> ==
>> GeoServer Professional Services from the experts! Visit
>> http://goo.gl/it488V for more information.
>> ==
>>
>> Ing. Alessio Fabiani
>>
>> @alfa7691
>> Founder/Technical Lead
>>
>>
>> GeoSolutions S.A.S.
>> Via di Montramito 3/A
>> 55054 Massarosa (LU)
>> Italy
>> phone: +39 0584 962313 <+39%200584%20962313>
>> fax: +39 0584 1660272 <+39%200584%20166%200272>
>> mob: +39 331 6233686 <+39%20331%20623%203686>
>>
>> http://www.geo-solutions.it
>> http://twitter.com/geosolutions_it
>>
>> -------------------------------------------------------
>>
>> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
>>
>> Le informazioni contenute in questo messaggio di posta elettronica e/o
>> nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
>> loro utilizzo è consentito esclusivamente al destinatario del messaggio,
>> per le finalità indicate nel messaggio stesso. Qualora riceviate questo
>> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
>> darcene notizia via e-mail e di procedere alla distruzione del messaggio
>> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
>> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
>> utilizzarlo per finalità diverse, costituisce comportamento contrario ai
>> principi dettati dal D.Lgs. 196/2003.
>>
>> The information in this message and/or attachments, is intended solely
>> for the attention and use of the named addressee(s) and may be confidential
>> or proprietary in nature or covered by the provisions of privacy act
>> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
>> Code).Any use not in accord with its purpose, any disclosure, reproduction,
>> copying, distribution, or either dissemination, either whole or partial, is
>> strictly forbidden except previous formal approval of the named
>> addressee(s). If you are not the intended recipient, please contact
>> immediately the sender by telephone, fax or e-mail and delete the
>> information in this message that has been received in error. The sender
>> does not give any warranty or accept liability as the content, accuracy or
>> completeness of sent messages and accepts no responsibility for changes
>> made after they were sent or for other risks which arise as a result of
>> e-mail transmission, viruses, etc.
>>
>> On Wed, Jul 19, 2017 at 1:41 PM, Annalisa Schiavon <
>> annalisa.schiavon at gmail.com> wrote:
>>
>>> I didn't delete the "admin" user in geonode, but ... there is a default
>>> admin user in geonode? My superuser created with
>>>
>>> geonode createsuperuser
>>>
>>> is named "geonode".
>>> I migrated a geonode 2.4 db (than execute $ geonode migrate
>>> --fake-initial); maybe I lost the admin user?
>>> Among geonode users I have geonode, AnonymousUser and than my users
>>> created in 2.4.
>>>
>>> In Geoserver, I've changed the default password of admin user and stop.
>>>
>>>
>>>
>>> 2017-07-19 11:42 GMT+02:00 Alessio Fabiani <
>>> alessio.fabiani at geo-solutions.it>:
>>>
>>>> Did you deleted the "admin" user from GeoNode? Or removed privileged
>>>> status? If yes it is normal, otherwise not.
>>>>
>>>> Regards,
>>>>
>>>> Alessio Fabiani
>>>>
>>>> ==
>>>> GeoServer Professional Services from the experts! Visit
>>>> http://goo.gl/it488V for more information.
>>>> ==
>>>>
>>>> Ing. Alessio Fabiani
>>>>
>>>> @alfa7691
>>>> Founder/Technical Lead
>>>>
>>>>
>>>> GeoSolutions S.A.S.
>>>> Via di Montramito 3/A
>>>> 55054 Massarosa (LU)
>>>> Italy
>>>> phone: +39 0584 962313 <+39%200584%20962313>
>>>> fax: +39 0584 1660272 <+39%200584%20166%200272>
>>>> mob: +39 331 6233686 <+39%20331%20623%203686>
>>>>
>>>> http://www.geo-solutions.it
>>>> http://twitter.com/geosolutions_it
>>>>
>>>> -------------------------------------------------------
>>>>
>>>> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
>>>>
>>>> Le informazioni contenute in questo messaggio di posta elettronica e/o
>>>> nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
>>>> loro utilizzo è consentito esclusivamente al destinatario del messaggio,
>>>> per le finalità indicate nel messaggio stesso. Qualora riceviate questo
>>>> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
>>>> darcene notizia via e-mail e di procedere alla distruzione del messaggio
>>>> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
>>>> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
>>>> utilizzarlo per finalità diverse, costituisce comportamento contrario ai
>>>> principi dettati dal D.Lgs. 196/2003.
>>>>
>>>> The information in this message and/or attachments, is intended solely
>>>> for the attention and use of the named addressee(s) and may be confidential
>>>> or proprietary in nature or covered by the provisions of privacy act
>>>> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
>>>> Code).Any use not in accord with its purpose, any disclosure, reproduction,
>>>> copying, distribution, or either dissemination, either whole or partial, is
>>>> strictly forbidden except previous formal approval of the named
>>>> addressee(s). If you are not the intended recipient, please contact
>>>> immediately the sender by telephone, fax or e-mail and delete the
>>>> information in this message that has been received in error. The sender
>>>> does not give any warranty or accept liability as the content, accuracy or
>>>> completeness of sent messages and accepts no responsibility for changes
>>>> made after they were sent or for other risks which arise as a result of
>>>> e-mail transmission, viruses, etc.
>>>>
>>>> On Thu, Jul 13, 2017 at 9:29 AM, Annalisa Schiavon <
>>>> annalisa.schiavon at gmail.com> wrote:
>>>>
>>>>> I don't want to create a different admin user of Geoserver. But
>>>>> "admin" user (the default of Geoserver) is an Administrator if I set in
>>>>> Security settings, "Active role service" = "default". If I set "Active role
>>>>> service" = "geonode REST role service", the "admin" user is no longer an
>>>>> administrator but a common user with no permission.
>>>>> This is my edit user page of admin user, when I set geonode REST role
>>>>> service:
>>>>>
>>>>> [image: Immagine incorporata 1]
>>>>>
>>>>> Is it normal? It's ok?
>>>>>
>>>>> Thanks
>>>>> Annalisa
>>>>>
>>>>> 2017-07-13 8:25 GMT+02:00 Alessio Fabiani <
>>>>> alessio.fabiani at geo-solutions.it>:
>>>>>
>>>>>> As stated in the documentation, GeoServer still has its own internal
>>>>>> users.
>>>>>>
>>>>>> If you want to create an admin different from the default one in
>>>>>> GeoServer also which works with basic auth also, you need to create a
>>>>>> GeoServer internal user too.
>>>>>>
>>>>>> Regards,
>>>>>>
>>>>>> Alessio Fabiani
>>>>>>
>>>>>> ==
>>>>>> GeoServer Professional Services from the experts! Visit
>>>>>> http://goo.gl/it488V for more information.
>>>>>> ==
>>>>>>
>>>>>> Ing. Alessio Fabiani
>>>>>>
>>>>>> @alfa7691
>>>>>> Founder/Technical Lead
>>>>>>
>>>>>>
>>>>>> GeoSolutions S.A.S.
>>>>>> Via di Montramito 3/A
>>>>>> 55054 Massarosa (LU)
>>>>>> Italy
>>>>>> phone: +39 0584 962313 <+39%200584%20962313>
>>>>>> fax: +39 0584 1660272 <+39%200584%20166%200272>
>>>>>> mob: +39 331 6233686 <+39%20331%20623%203686>
>>>>>>
>>>>>> http://www.geo-solutions.it
>>>>>> http://twitter.com/geosolutions_it
>>>>>>
>>>>>> -------------------------------------------------------
>>>>>>
>>>>>> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
>>>>>>
>>>>>> Le informazioni contenute in questo messaggio di posta elettronica
>>>>>> e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
>>>>>> loro utilizzo è consentito esclusivamente al destinatario del messaggio,
>>>>>> per le finalità indicate nel messaggio stesso. Qualora riceviate questo
>>>>>> messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
>>>>>> darcene notizia via e-mail e di procedere alla distruzione del messaggio
>>>>>> stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
>>>>>> divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
>>>>>> utilizzarlo per finalità diverse, costituisce comportamento contrario ai
>>>>>> principi dettati dal D.Lgs. 196/2003.
>>>>>>
>>>>>> The information in this message and/or attachments, is intended
>>>>>> solely for the attention and use of the named addressee(s) and may be
>>>>>> confidential or proprietary in nature or covered by the provisions of
>>>>>> privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data
>>>>>> Protection Code).Any use not in accord with its purpose, any disclosure,
>>>>>> reproduction, copying, distribution, or either dissemination, either whole
>>>>>> or partial, is strictly forbidden except previous formal approval of the
>>>>>> named addressee(s). If you are not the intended recipient, please contact
>>>>>> immediately the sender by telephone, fax or e-mail and delete the
>>>>>> information in this message that has been received in error. The sender
>>>>>> does not give any warranty or accept liability as the content, accuracy or
>>>>>> completeness of sent messages and accepts no responsibility for changes
>>>>>> made after they were sent or for other risks which arise as a result of
>>>>>> e-mail transmission, viruses, etc.
>>>>>>
>>>>>> On Wed, Jul 12, 2017 at 2:09 PM, Annalisa Schiavon <
>>>>>> annalisa.schiavon at gmail.com> wrote:
>>>>>>
>>>>>>> I add that if I run this command:
>>>>>>>
>>>>>>> $ curl http://localhost/api/users/admin
>>>>>>>
>>>>>>> I get:
>>>>>>> {"users": []}
>>>>>>>
>>>>>>> The other cmd:
>>>>>>>
>>>>>>> curl http://localhost/api/adminRole
>>>>>>> curl http://localhost/api/users
>>>>>>> curl http://localhost/api/roles
>>>>>>>
>>>>>>> are ok.
>>>>>>>
>>>>>>> I attach the last lines of geoserver.log
>>>>>>>
>>>>>>> I've migrated from geonode 2.4 to geonode 2.6.
>>>>>>> I've changed the geoserver data dir coping the original 2.9 and than
>>>>>>> replacing these directories from my geoserver 2.7:
>>>>>>>
>>>>>>> - data
>>>>>>> - layergroups
>>>>>>> - legendsamples
>>>>>>> - styles
>>>>>>> - workspace
>>>>>>>
>>>>>>> Thanks for any reply
>>>>>>> Annalisa
>>>>>>>
>>>>>>>
>>>>>>> 2017-07-12 12:48 GMT+02:00 Annalisa Schiavon <
>>>>>>> annalisa.schiavon at gmail.com>:
>>>>>>>
>>>>>>>> Hi all.
>>>>>>>> I've followed this doc because I had some problems with permissions
>>>>>>>> on layers: http://docs.geonode.org/en/mas
>>>>>>>> ter/tutorials/admin/geoserver_geonode_security/index.html .
>>>>>>>>
>>>>>>>> My geonode superuser is "*geonode*", so I access Geoserver with
>>>>>>>> geonode and setted geonode REST role service as Active role service
>>>>>>>> in Security settings.
>>>>>>>>
>>>>>>>> After doing this, I can no more login in Geoserver with *admin*
>>>>>>>> user.
>>>>>>>> Unfortunately, I made a "updatelayer" with --remove-deleted option
>>>>>>>> and this deleted all my layers from geonode. In geoserver there are all
>>>>>>>> layers.
>>>>>>>>
>>>>>>>> I try to change back Security settings and set it to "default". Now
>>>>>>>> if I make an updatelayers, geonode recreate my layers (but I have to
>>>>>>>> restore my old backups because I lost all metadata and link with the maps).
>>>>>>>>
>>>>>>>> I hope that after restoring geonode DB and doing "geonode migrate
>>>>>>>> --fake-initial" I'll return to my situation of yesterday.
>>>>>>>> But how should I set Security settings?
>>>>>>>>
>>>>>>>> Thanks
>>>>>>>> Annalisa
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> geonode-users mailing list
>>>>> geonode-users at lists.osgeo.org
>>>>> https://lists.osgeo.org/mailman/listinfo/geonode-users
>>>>>
>>>>>
>>>>
>>>
>>> _______________________________________________
>>> geonode-users mailing list
>>> geonode-users at lists.osgeo.org
>>> https://lists.osgeo.org/mailman/listinfo/geonode-users
>>>
>>>
>>
>
> _______________________________________________
> geonode-users mailing list
> geonode-users at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/geonode-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20170720/7b761f2e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 143763 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20170720/7b761f2e/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 204972 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20170720/7b761f2e/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 169565 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20170720/7b761f2e/attachment-0005.png>
More information about the geonode-users
mailing list