<div dir="ltr">Alessio,<div><br></div><div>Thank you for your reply. I think that I did understand what you were saying... After some improvements, geonode and geoserver are still unable to communicate when a user is logged on geonode (this time, independently of being logged on geoserver).</div><div><br></div><div>On local_settings.py:</div><div><br></div><div><div># OGC (WMS/WFS/WCS) Server Settings</div><div>OGC_SERVER = {</div><div> 'default' : {</div><div> 'BACKEND' : 'geonode.geoserver',</div><div> 'LOCATION' : '<a href="http://atlas.example.com:8080/geoserver/">http://atlas.example.com:8080/geoserver/</a>',</div><div> 'PUBLIC_LOCATION' : GEOSERVER_URL,</div><div> 'USER' : 'admin',</div><div> 'PASSWORD' : '*********************'</div></div><div><br></div><div>[...]</div><div><div><br></div><div>ALLOWED_HOSTS=['<a href="http://atlas.example.com">atlas.example.com</a>']</div></div><div><br></div><div><br></div><div>On geonodeAuthProvider/config.xml:</div><div><br></div><div><div> <baseUrl><a href="http://atlas.example.com/">http://atlas.example.com/</a></baseUrl></div></div><div><br></div><div>Does anyone have a clue of what is the problem? It seems the same problem Ariel had in November: <a href="https://lists.osgeo.org/pipermail/geonode-users/2015-November/001150.html">https://lists.osgeo.org/pipermail/geonode-users/2015-November/001150.html</a></div><div><br></div><div>Best regards,</div><div>Ivo</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-01-20 15:19 GMT+00:00 Alessio Fabiani <span dir="ltr"><<a href="mailto:alessio.fabiani@geo-solutions.it" target="_blank">alessio.fabiani@geo-solutions.it</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">The GeoNode/GeoServer security, right now, in order to work correctly needs both GeoNode and GeoServer exposed under the same domain (and the same port).<div><br></div><div>Therefore if you expose GeoNode as <a href="http://mysite/" target="_blank">http://mysite/</a> you must also expose GeoServer as <a href="http://mysite/geoserver" target="_blank">http://mysite/geoserver</a></div><div><br></div><div>The GeoNode authentication provider can be configured with <a href="http://localhost" target="_blank">http://localhost</a>, I guess, but you must be sure that GeoServer is also exposed as <a href="http://localhost/geoserver" target="_blank">http://localhost/geoserver</a>.</div><div><br></div><div>The rationale is that the GeoNodeSecurityClient looks for the AuthPrincipal from the cookies.</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>==<br>GeoServer Professional Services from the experts! Visit<br><a href="http://goo.gl/NWWaa2" style="color:rgb(17,85,204)" target="_blank">http://goo.gl/NWWaa2</a> for more information.<br>==<br></div><div><br></div><div>Ing. Alessio Fabiani</div><div>@alfa7691</div><div>Founder/Technical Lead</div><div><br></div><div>GeoSolutions S.A.S.</div><div>Via Poggio alle Viti 1187</div><div>55054 Massarosa (LU)</div><div>Italy</div><div>phone: <a href="tel:%2B39%200584%20962313" value="+390584962313" target="_blank">+39 0584 962313</a></div><div>fax: <a href="tel:%2B39%200584%201660272" value="+3905841660272" target="_blank">+39 0584 1660272</a></div><div>mob: <a href="tel:%2B39%20%C2%A0331%206233686" value="+393316233686" target="_blank">+39 331 6233686</a></div><div><br></div><div><a href="http://www.geo-solutions.it" target="_blank">http://www.geo-solutions.it</a></div><div><a href="http://twitter.com/geosolutions_it" target="_blank">http://twitter.com/geosolutions_it</a></div><div><br></div><div>-------------------------------------------------------</div><div><br></div><div><p><span lang="IT"><font size="1"><b>AVVERTENZE AI SENSI DEL D.Lgs. 196/2003</b></font></span></p><p><span lang="IT"><font size="1">Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.</font></span></p><p><span lang="IT"><font size="1"> </font></span></p><p><font size="1">The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.</font></p></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote"><div><div class="h5">On Wed, Jan 20, 2016 at 3:58 PM, Ivo Santos <span dir="ltr"><<a href="mailto:ivojfs@gmail.com" target="_blank">ivojfs@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi everyone,<div><br></div><div>After several limiting issues concerning the configuration of apache that I have to thank you especially to Simone for all the help and guidance, I am now with a problem with the connection between geonode and geoserver:</div><div><br></div><div>If user as log in on geoserver but not on geonode, he can view the layers.</div><div>If user is not loged on geoserver, he can not view the layers and the error is:</div><div>2016-01-20 14:39:59,947 WARN [geonode.security] - Error connecting to the GeoNode server for authentication purposes<div>org.springframework.security.authentication.AuthenticationServiceException: Communication with GeoNode failed (UsernamePasswordAuthenticationToken)</div><div><br></div><div>If user is logged on both geonode and geoserver it gives a internal error (500).</div><div><br></div><div>Following this <a href="https://groups.google.com/forum/m/#!topic/geonode-users/84HvjbarPE8" target="_blank">thread </a>I tried to apply this <a href="https://github.com/GeoNode/geonode/commit/cc732e0a73c6d04d8f57fdf376dfb9a9848abd86" target="_blank">doc </a>to my installation but it didn't worked.</div><div>Does it have to remain like "<a href="http://localhost/" target="_blank">http://localhost/</a>" on both files or should I substitute by "<a href="http://atlas.example.com" target="_blank">http://atlas.example.com</a>" on both? If you need more info please let me know.</div><div><br></div><div>Thank you for all the help and patience for this newcomer,</div><div>regards,</div><div>Ivo</div><span><font color="#888888"><div><br></div><div><br></div>-- <br><div>Ivo Santos</div>
</font></span></div></div>
<br></div></div>_______________________________________________<br>
geonode-users mailing list<br>
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<a href="http://lists.osgeo.org/mailman/listinfo/geonode-users" rel="noreferrer" target="_blank">http://lists.osgeo.org/mailman/listinfo/geonode-users</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Ivo Santos</div>
</div>