but if the request is generated in other layer, people can ask with a browser to the mapserver changing the name of the layer on the WMS,<br>We have a WMS accesible with some layer to everybody and other to authenticate users.
<br>we are thinking on using a remoteWMS like deegree (with WASS) with mapserver, a single sign-on or something on apache (mod_auth or similiar).<br>but we want to know how people use to implement this issue.<br><br>Thanks.
<br><br><div><span class="gmail_quote">2007/7/30, Gregor Mosheh <<a href="mailto:gregor@hostgis.com">gregor@hostgis.com</a>>:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Ruben Pardo wrote:<br>> We want to protect a number of layers to non-authenticate users.<br>> I want to ask how people use to protect layers served by mapserver? is<br>> there any mechanism inside mapserver for this?
<br><br>There sure isn't. Authentication has to be done at some other layer,<br>typically the webserver layer. If Tomcat is generating the requests,<br>then that'd be the best place to do the authentication.<br><br>
--<br>Gregor Mosheh / Greg Allensworth<br>System Administrator, HostGIS cartographic development & hosting services<br><a href="http://www.HostGIS.com/">http://www.HostGIS.com/</a><br><br>"Remember that no one cares if you can back up,
<br> only if you can restore." - AMANDA<br></blockquote></div><br>