Support #3579

SK: Problems to open get capabilities

Added by Martin Tuchyna over 1 year ago. Updated 5 months ago.

Status:ClosedStart date:26 Apr 2019
Priority:HighDue date:
Assignee:Angelo Quaglia% Done:

0%

Category:Harvesting results
Target version:-
Submitting Organisation:SK Knowledge-Base relevant?:No
Proactive:No Keyword #1:
Country:SK - Slovakia Keyword #2:
Originating UI: Keyword #3:

Description

Dear Geoportal Team,

when harvesting this MD record https://rpi.gov.sk/rpi_csw/service.svc/get?request=GetRecordById&service=CSW&version=2.0.2&elementSetName=full&outputschema=http://www.isotc211.org/2005/gmd&Id=https://data.gov.sk/set/rpi/gmd/42181810/4F1D29041153596EE0530210000A8020

we still don't see working linkage in harvesting console.

During the check we have recieved this error>

 http://sluzby.vuvh.sk:8080/arcgis/services/RiverBasinDistrict_external/MapServer/WMSServer?request=getCapabilities&version=1.3.0&service=WMS: Connect to sluzby.vuvh.sk:8080 [sluzby.vuvh.sk/80.81.229.18] failed: Connection refused (Connection refused)

Any idea, why Connection is refused, whilst the links works correctly?

Thanks in advance,

Best regards,

Martin

 

 

History

#1 Updated by Tomas Kliment over 1 year ago

Ciao Angelo, Might the port 8080 cause this problem? Tomáš

#2 Updated by Angelo Quaglia over 1 year ago

  • Subject changed from Problems to open get capabilities to SK: Problems to open get capabilities
  • Status changed from New to Feedback
  • Assignee set to Angelo Quaglia
  • Submitting Organisation set to SK

Dear Martin,

I am not at the office right now but I see two possible explanations:

1) port 8080 is blocked on the sandbox machine.

2) The IP address of the service  is considered unsafe (usually because of some illicit activity performed by the previous owner of the IP address)

I plan to go to the office later, today.

In any case, I do recommend you expose your services through ports 80 or 443, putting in place a reverse proxy (with apache or nginx for example)  in order to better protect your own network.

 

Best regards,

Angelo

#3 Updated by Martin Tuchyna over 1 year ago

Thanks a lot Angelo,

we have contacted the Service provider with your recomendations.

I will update you as soon we will get an feedback.

Best regards,

Martin

#4 Updated by Angelo Quaglia over 1 year ago

Dear Martin,

the sandbox machine is not allowed to contact resources on port 8080.

Best regards,

Angelo

#5 Updated by Tomas Kliment over 1 year ago

Dear Angelo, The service provider asked when and why the port 8080 got blocked on your side, since he claims his services had been already available through INSPIRE Geoportal client application. Is there any near future plan to deploy a production instance out of the sandbox? Thanks, Tomáš

#6 Updated by Angelo Quaglia over 1 year ago

Dear Tomas,

yes, the previous geoportal had a lower security profile.

I can ask but it would be better to switch to the 80 port. Actually, 443 would be better.

The INSPIRE Geoportal is also switching to https.

I see it as mostly in their own interest to adopt a more secure approach.

In addition, other INSPIRE clients might face the same problem.

Best regards,

Angelo

#7 Updated by Angelo Quaglia over 1 year ago

  • Category set to Harvesting results

#8 Updated by Tomas Kliment 5 months ago

  • Status changed from Feedback to Closed

Also available in: Atom PDF