GDAL WCS driver should support authentification (username and password)

[gaopeng]

ArcGIS online services are secured services. Creating WCS layer with these URL will fail. To repro:

Use this string for Make WCS layer input

​http://imagery.arcgisonline.com/ArcGIS/services/WORLD_LAN_123457/ImageServer/WCSServer? Then you will be prompted to enter user name/password ISUser/ags After this, the tool should work, but it does not pass validation for the input.

[warmerdam]

I have added support for the HttpAuth and UserPwd elements in the WCS control file to enable authentication. It seems that this server is using "NTLM" authentication - something specific to Microsoft. My linux based curl does not use this authentication by default, so I have to force it to use this authentication. This can be accomplished with the following .wcs control file:

<WCS_GDAL>
<ServiceURL>http://imagery.arcgisonline.com/ArcGIS/services/WORLD_LAN_123457/ImageServer/WCSServer?</ServiceURL>
  <CoverageName>1</CoverageName>
  <Version>1.1.1</Version>
  <HttpAuth>NTLM</HttpAuth>
  <UserPwd>ISUser:ags</UserPwd>
</WCS_GDAL>

One of the supported values for HttpAuth is "ANY" which is supposed to use any of the authentication schemes, but pick the strongest. For some reason this does not work for me against your server so it may be that you need to specifically set NTLM for some servers. Behavior may be somewhat different with windows based libcurl.

Support implemented in trunk (r17920,r17921). Ported into 1.6-esri branch (r17922).

[gaopeng]

I confirmed that the fix resolved my problem.

[gaopeng]

Frank, The recent JPIP change overwrote the HTTP user/password support. I merged the HTTP user/password back, and committed the change. Could you review?

[warmerdam]

Gao,

Your re-incorporation of HTTP user/password support (r29444) looks fine. I'm not sure what lead to me accidentally removing it during the jpip work (r19111). Sorry.

[warmerdam]

Ahem, that was r20444, not r29444.

[warmerdam]

I have migrated this feature back to the 1.4-esri tree (r20476) and done some minimal testing.