03-20-2018 08:21 PM
With 2018 release, we can now create CSW services in Apollo.
I created an aggregate, set up the security for the aggregate to use anonymous, then I grabbed the CSW end point from Catalog Web Interface.
I then opened QGIS CSW client, connected to the CSW service fine and I could search for the schools dataset:
However when I tried to examine the school dataset in details by double-clicking on it, the follow error message pops up:
I figured this might be a Apollo permission issue. Then I ran up Fiddler, found that QGIS was trying to request http:/[ServerName]/erdas-apollo/catalog/wrs/WRS?outputFormat=application%2Fxml&service=CSW&outputSchema=http%3A%2F%2Fwww.opengis.net%2Fcat%2Fcsw%2F2.0.2&request=GetRecordById&version=2.0.2&elementsetname=full&id=MSSql%3A%2F%2FGeoTrainSpatial%3Fdataset%23schools
If I then open this URL in browser, I was prompt to authenticate. I used Apollo logon to pass the authentication.
I was hoping by setting the aggregate to use anonymous access, the CSW won't need to be authenticated, but unfortunately it's not the case.
Could you please clarify if this is working as designed or there will be future improvement to this? I could log a ticket but I just would like to see you response first.
A typical use case would be the members of the public would want to access the CSW but they do not have Apollo log ins.
Solved! Go to Solution.
03-21-2018 08:32 AM
You should be able to make the CSW public by editing this file: C:\Program Files\Hexagon\ERDAS APOLLO\webapps\erdas-apollo\WEB-INF\config\security-config.xml
Modify the CSW filter and restart Tomcat:
03-21-2018 02:34 PM
Thanks for responding promlty.
I tried what you suggested, it still didn't work, then I looked a bit close into the URL that QGIS trying to request:
Then I figured I might need to set pattern="\A/catalog/wrs/.*\Z" to use IS_AUTHENTICATED_ANONYMOUSLY as well.
So I went head making the change:
<sec:intercept-url pattern="\A/catalog/wrs/.*\Z" access="IS_AUTHENTICATED_ANONYMOUSLY"/>
Now I can see open the detailed Metadata window fine.
By the way is there any security precautions that I need to be ware of after setting up WRS to use anonymous?