Requested to sign in when accessing viewer https://ggis.un-igrac.org/view/G3P/

[seabilwe]

Please see issue logged through the support portal: https://kartoza.com/app/issue/ISS-2024-00006

Dear colleagues, when visiting the page https://ggis.un-igrac.org/view/G3P/, you are requested to sign in. Why is that? Could you please remove this sign in request?

Priority: Medium
cc @meomancer

[meomancer]

hi @NyakudyaA
i think it is permission issue
could you help me check it? Arnaud tried to access the view, and i think some of dataset can't be accessed

[NyakudyaA]

Ok, I will take a look

[meomancer]

The problem:
https://ggis.un-igrac.org/geoserver/gwc/service/wmts?service=WMTS&REQUEST=DescribeDomains&version=1.0.0&layer=groundwater:GWSA&tileMatrixSet=EPSG:4326&expandLimit=10
It is asked authentication when not login

[robertohuru]

Resolved by:

Creating a new filter chain matching the URL pattern /gwc/service/** in Geoserver > Authentication > Filter Section with "no security" checked, only "GET" HTTP method checked, and only "anonymous" active in the "chain filter" list. Then position the /gwc/service/** on top of the /gwc/** to override it.

@meomancer restart of GeoServer required to test if this setting persists.

cc: @tharanathkartoza @EliVolsch

[meomancer]

Thank you @robertohuru
It works, i also update it on DO server
cc @EliVolsch

[meomancer]

Hi @robertohuru cc @EliVolsch
The settings is being restored on geoserver restarted
Could you help me how to make it persist

[robertohuru]

@meomancer please mount /spcgeonode-geodatadir/security/config.xml similar to #719 to persist the changes.

[meomancer]

Hi @robertohuru
I have tried to mount the file, but when restarting, there is error

"sed: cannot rename /spcgeonode-geodatadir/security/sedHQkVgT: Device or resource busy"

It seems the geoserver try to rename some file but because it is mounted, it gives error
I tried to check the entrypoints or any calls for rename, but i can't find it

Could you help me check it? Thank you so much