Ticket #3091 (closed defect: fixed)

Opened 4 years ago

Last modified 3 years ago

GDAL WCS driver should support authentification (username and password)

Reported by: gaopeng Owned by: warmerdam
Priority: normal Milestone: 1.7.0
Component: GDAL_Raster Version: 1.6.1
Severity: normal Keywords: WCS
Cc:

Description

ArcGIS online services are secured services. Creating WCS layer with these URL will fail. To repro:

Use this string for Make WCS layer input

 http://imagery.arcgisonline.com/ArcGIS/services/WORLD_LAN_123457/ImageServer/WCSServer? Then you will be prompted to enter user name/password ISUser/ags After this, the tool should work, but it does not pass validation for the input.

Change History

Changed 4 years ago by warmerdam

  • status changed from new to closed
  • resolution set to fixed
  • milestone changed from 1.6.3 to 1.7.0

I have added support for the HttpAuth? and UserPwd? elements in the WCS control file to enable authentication. It seems that this server is using "NTLM" authentication - something specific to Microsoft. My linux based curl does not use this authentication by default, so I have to force it to use this authentication. This can be accomplished with the following .wcs control file: 

<WCS_GDAL>
<ServiceURL>http://imagery.arcgisonline.com/ArcGIS/services/WORLD_LAN_123457/ImageServer/WCSServer?</ServiceURL>
  <CoverageName>1</CoverageName>
  <Version>1.1.1</Version>
  <HttpAuth>NTLM</HttpAuth>
  <UserPwd>ISUser:ags</UserPwd>
</WCS_GDAL>

One of the supported values for HttpAuth? is "ANY" which is supposed to use any of the authentication schemes, but pick the strongest. For some reason this does not work for me against your server so it may be that you need to specifically set NTLM for some servers. Behavior may be somewhat different with windows based libcurl.

Support implemented in trunk (r17920,r17921). Ported into 1.6-esri branch (r17922).

Changed 4 years ago by gaopeng

I confirmed that the fix resolved my problem.

Changed 3 years ago by gaopeng

Frank, The recent JPIP change overwrote the HTTP user/password support. I merged the HTTP user/password back, and committed the change. Could you review?

Changed 3 years ago by warmerdam

Gao,

Your re-incorporation of HTTP user/password support (r29444) looks fine. I'm not sure what lead to me accidentally removing it during the jpip work (r19111). Sorry.

Changed 3 years ago by warmerdam

Ahem, that was r20444, not r29444.

Changed 3 years ago by warmerdam

I have migrated this feature back to the 1.4-esri tree (r20476) and done some minimal testing.

Note: See TracTickets for help on using tickets.