[MapServer-users] MSSQL plugin path outside of the global CONFIG file

[Steve Lime]

One point of clarification. If a config file is referenced then when the
mapfile is read then the value for PLUGIN is always interpreted as a key to
the list of plugins. That is always the case for CGI/FastCGI where a config
file is required. In the case of MapScript (or shp2map) loading a mapfile,
the config file is optional and the value for PLUGIN works as prior
versions if a config file is not referenced. This was done to minimize
impact on scripts. If a mapfile serves dual purposes then a config file
will be required and PLUGIN values represent keys.

--Steve

On Mon, Mar 20, 2023 at 9:13 AM Jörg Thomsen (WhereGroup) <
joerg.thomsen at wheregroup.com> wrote:

> Hello Benedek,
>
>  > Is it mandatory now, to define the PLUGIN path from the global CONFIG
> file?
>
> short answer: yes it's mandatory and it's a security issue.
>
> the documentation is very explizit
> (see https://mapserver.org/mapfile/layer.html):
>
> > For MapServer >=8:
> defining plugins for dataconnections in the config-gile
> ...
> > For MapServer <8:
> defining plugins for dataconnections in the mapfile
>
> further in https://mapserver.org/mapfile/config.html :
> > This block allows for keys to be mapped to plugin library paths.
>  > For example the MS SQL Plugin.
>  > **This registry of plugins avoids possible unsafe libraries being
>  >  loaded by a mapfile.**
>
> Regards, Jörg
>
>
>
>
>
>
> Am 20.03.23 um 14:51 schrieb Benedek Petrovicz:
> > Hi!
> >
> > Before MapServer 8, I always defined the mssql plugin path in the
> > mapfiles directly.
> > It was a convenient way for my use case.
> >
> > Now from MapServer 8 there's the required global CONFIG file I have to
> > define.
> > Which is fine, but MapServer will only allow loading the plugin through
> > that global CONFIG file.
> >
> > The CONFIG reference states the following:
> >
> >     /"PLUGINS: This block allows for keys to be mapped to plugin library
> >     paths."/
> >
> > For me, this means I can define a global plugin keyword if I want to,
> > but I don't have to.
> > In reality I don't have other options. At least I don't know about any.
> >
> > Is it mandatory now, to define the PLUGIN path from the global CONFIG
> file?
> >
> > Thank you!
> > Benedek Petrovicz
> >
> > _______________________________________________
> > MapServer-users mailing list
> > MapServer-users at lists.osgeo.org
> > https://lists.osgeo.org/mailman/listinfo/mapserver-users
>
> --
> Viele Grüße,
> Jörg Thomsen
> ---------------------------------------------
> Aufwind durch Wissen!
> Web-Seminare und Online-Schulungen
> bei der www.foss-academy.com
> ---------------------------------------------
>
>
> Jörg Thomsen
> WhereGroup GmbH
> Bundesallee 23
> 10717 Berlin
> Germany
>
> Tel: +49 (0)30 / 5130 278 74
> Fax: +49 (0)30 / 5130 278 11
>
> joerg.thomsen at wheregroup.com
> www.wheregroup.com
>
> Geschäftsführer:
> Olaf Knopp, Peter Stamm
> Amtsgericht Bonn, HRB 9885
>
> -------------------------------
> Folgen Sie der WhereGroup auf twitter: http://twitter.com/WhereGroup_com
>
> _______________________________________________
> MapServer-users mailing list
> MapServer-users at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/mapserver-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-users/attachments/20230324/e74cabad/attachment.htm>