<br><font size=2 face="sans-serif">Thanks Robert,</font>
<br><font size=2 face="sans-serif">Interesting.</font>
<br><font size=2 face="sans-serif">If someone is using a client such as
gaia or qgis, can he access the layers only by entering "</font><a href="http://10.64.20.120/cgi-bin/gsswms.exe"><font size=3 color=blue><u>http://10.64.20.120/cgi-bin/gsswms.exe</u></font></a><font size=3>?</font><font size=2 face="sans-serif">"
as the URL</font>
<br><font size=2 face="sans-serif">Or if we do a getMap request, what happen?</font>
<br>
<br><font size=2 face="sans-serif">I tried, but maybe it is not a public
site</font>
<br><font size=2 face="sans-serif">Steve</font>
<br><font size=2 face="sans-serif"><br>
</font><font size=3 color=#0066ff><i>Steve Toutant, M. Sc.</i></font><font size=3><br>
Analyste en géomatique<br>
Secteur environnement<br>
Direction des risques biologiques, environnementaux et occupationnels<br>
Institut national de santé publique du Québec<br>
945, avenue Wolfe<br>
Québec, Qc G1V 5B3 </font>
<p><font size=3>Tél.: (418) 650-5115 #5281<br>
Fax.: (418) 654-3144</font><font size=3 color=blue><u><br>
</u></font><a href=mailto:steve.toutant@inspq.qc.ca><font size=3 color=blue><u>steve.toutant@inspq.qc.ca</u></font></a><font size=3 color=blue><u><br>
</u></font><a href=http://www.inspq.qc.ca/><font size=3 color=blue><u>http://www.inspq.qc.ca</u></font></a>
<p><font size=3> </font>
<p>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>"Robert Sanson"
<SansonR@asurequality.com>@openlayers.org</b> </font>
<br><font size=1 face="sans-serif">Envoyé par : users-bounces@openlayers.org</font>
<p><font size=1 face="sans-serif">14/10/2009 03:34 PM</font>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">A</font></div>
<td><font size=1 face="sans-serif"><Steve.Toutant@inspq.qc.ca>, "Daniel
Morissette" <dmorissette@mapgears.com>, <users-bounces@openlayers.org></font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td><font size=1 face="sans-serif">users@openlayers.org</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Objet</font></div>
<td><font size=1 face="sans-serif">Re: [OpenLayers-Users] Control access
to WMS</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br>
<br>
<br><font size=3>I have made copies of mapserv.exe in my cgi-bin to other
names such as gsswms.exe. I then have a line at the bottom of httpd.conf:</font>
<br><font size=3> </font>
<br><font size=3>SetEnvIf Request_URI "/cgi-bin/gsswms.exe?"
MS_MAPFILE=/ms4w/apps/service/nztm.map</font>
<br><font size=3> </font>
<br><font size=3>So I then use a layer definition for OL such as :</font>
<br><font size=3> </font>
<br><font size=3>var topowms = new OpenLayers.Layer.WMS( "Topos",<br>
"</font><a href="http://10.64.20.120/cgi-bin/gsswms.exe"><font size=3 color=blue><u>http://10.64.20.120/cgi-bin/gsswms.exe</u></font></a><font size=3>?",<br>
{layers: ['nzislands','nznoaa','nz1mtm','nz250ktm','ci250k','nz50ktm','ci50kcitm'],
transparent: 'true',format: "image/png"},<br>
{singleTile: true, isBaseLayer: false, minResolution:
2000, visibility: false} );</font>
<br><font size=3> </font>
<br><font size=3>regards,</font>
<br><font size=3> </font>
<br><font size=3>Robert Sanson<br>
<br>
>>> <Steve.Toutant@inspq.qc.ca> 15/10/2009 2:53 a.m. >>><br>
</font><font size=2 face="sans-serif"><br>
Thanks all for your help,</font><font size=3> </font><font size=2 face="sans-serif"><br>
I'll have in a near future to implement a fully secured private site since
I'm gonna have to publish VERY sensible data via WMS. I can tell that this
issue scares the IT group. Story to follow...</font><font size=3> </font><font size=2 face="sans-serif"><br>
But for now, obscurity is sufficient.</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
I'm a bit in obscurity myself regardin http_referer...I need to know more
about the mechanic...</font><font size=3> </font><font size=2 face="sans-serif"><br>
It's not clear what I should do in the mapfile and in my OpenLayers code?</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
I added Daniel's code in Apache conf.</font><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
"</font><tt><font size=2>Then your WMS requests should refer to the
mapfile using "map=MYMAP" <br>
instead of a full path. If the referrer is not valid, then MYMAP will <br>
not be set and MapServer will spit out an error."</font></tt><font size=3><br>
</font><tt><font size=2><br>
Do I need to use the MYMAP environment variabble in the mapfile or in OL
code, or both?</font></tt><font size=3> <br>
</font><font size=2 face="sans-serif"><br>
I'm using OpenLayers to create a WMS layer with new OpenLayers.Layer.WMS(name,
url, params, options);</font><font size=3> </font><font size=2 face="sans-serif"><br>
Instead of the path of the mapfile should I use MYMAP (Environment variable
MYMAP defined in the conf of Apache). If so, Is there some magic there
to get the environment variable value? Should I get it with some php code?</font><font size=3>
<br>
</font><font size=2 face="sans-serif"><br>
Thanks</font><font size=3> </font><font size=2 face="sans-serif"><br>
Steve</font><font size=3> <br>
<br>
</font><font size=2 face="sans-serif"><br>
</font><font size=3><br>
<br>
<br>
</font>
<table width=100%>
<tr valign=top>
<td width=58%><font size=1 face="sans-serif"><b>Daniel Morissette <dmorissette@mapgears.com>@openlayers.org</b>
<br>
Envoyé par : users-bounces@openlayers.org</font><font size=3> </font>
<p><font size=1 face="sans-serif">13/10/2009 02:56 PM</font><font size=3>
</font>
<td width=41%>
<br>
<table width=100%>
<tr valign=top>
<td width=10%>
<div align=right><font size=1 face="sans-serif">A</font></div>
<td width=89%><font size=1 face="sans-serif">users@openlayers.org</font><font size=3>
</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Objet</font></div>
<td><font size=1 face="sans-serif">Re: [OpenLayers-Users] Control access
to WMS</font></table>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=50%>
<td width=50%></table>
<br></table>
<br><font size=3><br>
<br>
<br>
<br>
</font><tt><font size=2><br>
Christopher Schmidt wrote:<br>
> <br>
> If you care about people 'stumbling in', this would be sufficient.
If you<br>
> actually want to ensure people can't use the data outside of your
app,<br>
> it's not.<br>
> <br>
[...]<br>
> <br>
> Yeah, something like that is what I would probably do if I wanted
something<br>
> taht was obscurity and not security. :)<br>
> <br>
<br>
I agree (and I never used the word security). But this may be sufficient
<br>
in some simple cases. :)<br>
<br>
And for a more complete Access Control solution, everyone is invited to
<br>
a presentation of the new GeoPrisma project in a conference near you:<br>
<br>
FOSS4G 2009 (Sydney, 2009-10-23):<br>
http://2009.foss4g.org/presentations/#presentation_146<br>
<br>
Géomatique 2009 (Montréal, 2009-10-21):<br>
http://www.geomatique2009.com/en/papers/program<br>
<br>
Daniel<br>
-- <br>
Daniel Morissette<br>
http://www.mapgears.com/<br>
_______________________________________________<br>
Users mailing list<br>
Users@openlayers.org<br>
http://openlayers.org/mailman/listinfo/users</font></tt><font size=3><br>
<br>
<br>
<br>
<br>
</font>
<div align=center>
<p><font size=3>Click </font><a href="https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg=="><font size=3 color=blue><u>here</u></font></a><font size=3>
to report this email as spam.</font></div>
<p><font size=3><br>
</font>
<table width=100%>
<tr>
<td width=100% bgcolor=white><font size=3><br>
------------------------------------------------------------------<br>
The contents of this email are confidential to AsureQuality. If you have
received this communication in error please notify the sender immediately
and delete the message and any attachments. The opinions expressed in this
email are not necessarily those of AsureQuality. This message has been
scanned for known viruses before delivery. AsureQuality supports the Unsolicited
Electronic Messages Act 2007. If you do not wish to receive similar communications
in future, please notify the sender of this message.<br>
------------------------------------------------------------------</font></table>
<br><font size=3><br>
</font>
<p><font size=3>This message has been scanned for malware by SurfControl
plc. </font><a href=http://www.surfcontrol.com/><font size=3><u>www.surfcontrol.com</u></font></a><tt><font size=2>_______________________________________________<br>
Users mailing list<br>
Users@openlayers.org<br>
http://openlayers.org/mailman/listinfo/users<br>
</font></tt>
<br>
<br>
<br>