[mapguide-dev] Authorization errors

Fri Sep 15 18:13:07 EDT 2006

Hi Jason,

The FastCGI MapAgent traps a couple of "authorization" exceptions and
converts them to the appropriate 401 status code.  But it looks as
though it does not trap this specific exception.  Can you log this as a
defect in Project Tracker?

Thanks,
Trevor

-----Original Message-----
From: Jason Birch [mailto:Jason.Birch at nanaimo.ca] 
Sent: Friday, September 15, 2006 4:03 PM
To: dev at mapguide.osgeo.org
Subject: [mapguide-dev] Authorization errors

Hi all,

I've noticed that the MapAgent returns a 559 error code when
authentication fails:

-----------------------------------------------

Response Headers -
http://vm-jb-w2k3/mapguide/mapagent/mapagent.fcgi?OPERATION=GETMAPIMAGE&
VERSION=1.0.0LOCALE=en&MAPDEFINITION=Library%3A%2F%2FSamples%2FSheboygan
%2FMaps%2FSheboygan.MapDefinition&FORMAT=PNG&SETDISPLAYDPI=96&SETDISPLAY
WIDTH=512&SETDISPLAYHEIGHT=396

Connection: close
Date: Fri, 15 Sep 2006 21:52:05 GMT
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Status: 559 MgUserNotFoundException
Content-Type: text/html

559 MgUserNotFoundException

<html>
<head>
<title>MgUserNotFoundException</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head> <body> <h2>The specified user was not found: asdddd</h2> The
specified user was not found: asdddd Exception occurred in method
MgSecurityCache.GetUserInfo at line 149 in file
d:\osgeo\mgbuild\server\src\common\manager\SecurityCache.cpp

</body>
</html>

-----------------------------------------------

If you're going to use HTTP authentication, wouldn't it be more
"web-friendly" to return a 401 response instead?  This would allow
clients that support it to prompt the user to re-autheticate.

Jason

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe at mapguide.osgeo.org
For additional commands, e-mail: dev-help at mapguide.osgeo.org