Antw: [Mapbender-users] Secure a WMS

[Ronald Woita]

Hi Johannes,

in my opinion the only solution is to protect your ows services
depending on the software you use.
With mapserver UMN first you can hide the path details from your local
file system by this instruction
http://www.mapbender.org/Kapseln_der_MapServer_Konfigurationsparameter

The second step is to protect the resulting cgi for the ows service
with the functionality of your web server
Here is an example for Apache :
<FILES ows_map1>
  order deny, allow
  deny from all
  allow from 192.3.0.123
</FILES>

Another interesting approach I'm testing at the moment is the
layer-level-security by GeoServer.
http://geoserver.org/display/GEOSDOC/Layer+level+security 

greetings
Ronald





--
Ronald Woita
http://geoportal.rostock.de
Hansestadt Rostock
Kataster-, Vermessungs- und Liegenschaftsamt
Holbeinplatz 14, 18069 Rostock
email: ronald.woita at rostock.de 
phone: +49 (0)381 - 381 6256

>>> loose at lwf.uni-muenchen.de 03.12.2008 11:29 >>>
Hello List,

Maybe my mail some days ago has been too complex or too many questions
in one thread, 
so that there have been no replies so far. I'll try to ask my main
question again, but shorter:

What is the recommendet was to secure a geodata service (WMS)? The
mapbender wiki 
tells how to set up the owsproxy and use it to access a service. It
also points out the 
neccesity to secure the service for unauthorized access independet of
the mapbender, but it 
does not tell how that can be done.

Could anyone point me to docs about that issue or give me a small
example on how to 
achieve that?

Thanks in advance

Johannes
_______________________________________________
Mapbender_users mailing list
Mapbender_users at lists.osgeo.org 
http://lists.osgeo.org/mailman/listinfo/mapbender_users