Our problem is that we dinamically have to create user group authorization with different layers, in that case we have to create a mapfile dinamically with the layers and configure the control access (with apache authorization?) of the user.
<br>The proxy approach is one of the option that we are considering,<br>thanks.<br><br><div><span class="gmail_quote">2007/7/30, Rahkonen Jukka <<a href="mailto:Jukka.Rahkonen@mmmtike.fi">Jukka.Rahkonen@mmmtike.fi</a>>:
</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi,<br><br>Perhaps you could make a separate WMS-service for each user group you have? With Mapserver it is easy because you only need to create a new mapfile and then control which mapfile the current user can access. This should at least prevent fiddling with layer names.
<br><br>We are using proxy approach which creates a facede server on a local port after successful login and we are rather satisfied with that. System is self made but it is in principle close to OWS-proxy by deegree, of Web security service by
<a href="http://52nort.org">52nort.org</a>.<br><br>-Jukka Rahkonen-<br><br><br>________________________________<br><br>Lähettäjä: UMN MapServer Users List puolesta: Ruben Pardo<br>Lähetetty: ma 30.7.2007 10:59<br>Vastaanottaja:
<a href="mailto:MAPSERVER-USERS@LISTS.UMN.EDU">MAPSERVER-USERS@LISTS.UMN.EDU</a><br>Aihe: Re: [UMN_MAPSERVER-USERS] Authentication<br><br><br>but if the request is generated in other layer, people can ask with a browser to the mapserver changing the name of the layer on the WMS,
<br>We have a WMS accesible with some layer to everybody and other to authenticate users.<br>we are thinking on using a remoteWMS like deegree (with WASS) with mapserver, a single sign-on or something on apache (mod_auth or similiar).
<br>but we want to know how people use to implement this issue.<br><br>Thanks.<br><br><br>2007/7/30, Gregor Mosheh <<a href="mailto:gregor@hostgis.com">gregor@hostgis.com</a>>:<br><br> Ruben Pardo wrote:<br> > We want to protect a number of layers to non-authenticate users.
<br> > I want to ask how people use to protect layers served by mapserver? is<br> > there any mechanism inside mapserver for this?<br><br> There sure isn't. Authentication has to be done at some other layer,
<br> typically the webserver layer. If Tomcat is generating the requests,<br> then that'd be the best place to do the authentication.<br><br> --<br> Gregor Mosheh / Greg Allensworth<br> System Administrator, HostGIS cartographic development & hosting services
<br> <a href="http://www.HostGIS.com/">http://www.HostGIS.com/</a><br><br> "Remember that no one cares if you can back up,<br> only if you can restore." - AMANDA<br><br><br><br></blockquote>
</div><br>