<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><DIV></DIV>
<DIV>IOW, you can't simply do away with mg users and groups.<BR> </DIV>
<DIV><FONT color=#0000ff>Ed Jobe</FONT></DIV>
<DIV><BR></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: arial, helvetica, sans-serif"><BR>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif">----- Original Message ----<BR>From: Jason Birch <Jason.Birch@nanaimo.ca><BR>To: MapGuide Users Mail List <mapguide-users@lists.osgeo.org><BR>Sent: Friday, October 10, 2008 11:22:33 AM<BR>Subject: RE: [mapguide-users] SQL Import Spatial Data<BR><BR>
<STYLE>
<!--
_filtered {font-family:"Cambria Math";panose-1:2 4 5 3 5 4 6 3 2 4;}
_filtered {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:"Times New Roman", "serif";}
a:link, span.MsoHyperlink
{color:blue;text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{margin-right:0in;margin-left:0in;font-size:10.0pt;font-family:"Times New Roman", "serif";}
span.emailstyle17
{font-family:"Calibri", "sans-serif";color:#1F497D;}
span.EmailStyle19
{font-family:"Calibri", "sans-serif";color:#1F497D;}
.MsoChpDefault
{font-size:10.0pt;}
_filtered {margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{}
-->
</STYLE>
<DIV class=Section1>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'">Ah. Yes, I think MapGuide¢s authentication is fine, but the authorization model is a bit dysfunctional.</SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'"> </SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'">Active Directory / LDAP are not directly supported, so you¢d have to test group membership in your application and map this to the appropriate RO/RW users on the MapGuide server, and make sure that everything goes over SSL.</SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'"> </SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'">This doesn¢t isolate you from poorly-behaved users or CSS attacks stealing a session key and using it directly against the web tier though. I think the only way of dealing with this particular issue is fixing the MapGuide security model.</SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'"> </SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'">Jason</SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'"> </SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri', 'sans-serif'"> </SPAN></P>
<DIV>
<DIV style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=MsoNormal><B><SPAN lang=EN-US style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma', 'sans-serif'">From:</SPAN></B><SPAN lang=EN-US style="FONT-SIZE: 10pt; FONT-FAMILY: 'Tahoma', 'sans-serif'"> ed57gmc-bus<BR><B>Subject:</B> Re: [mapguide-users] SQL Import Spatial Data</SPAN></P></DIV></DIV>
<P class=MsoNormal> </P>
<DIV>
<DIV>
<P class=MsoNormal><SPAN style="FONT-FAMILY: 'Arial', 'sans-serif'">AD is Active Directory. I was planning on using it for authentication. I forgot who it was that said it, but they felt that mg's security was "broken". <BR> </SPAN></P></DIV></DIV></DIV></DIV></DIV></div></body></html>