<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Thank you for the recommendation, Luis.</p>
<p>/H.<br>
</p>
<div class="moz-cite-prefix">On 2019-11-20 18:24, Luis Franco
Vázquez wrote:<br>
</div>
<blockquote type="cite"
cite="mid:kA3wGmZGbrNQTdfOGDASlIRt5npnmURQUOI0blTJ0F9J7jASLPw6njmkJUoMCfq1cxUTPRrQrCraSi7iCA9AWakuwt-0AnicdU6LFeihGEE=@luisfranco.es">
<div>By mistake I didn't answered in the thread. Here are my two
cents.<br>
</div>
<div> <br>
</div>
<div>You should avoid opening ports in postgresql server by using
ssh tunneling.<br>
</div>
<div>My experience is that this kind of infrastructure can be slow
for remote
connections. Take a look to the offline editing plugin or maybe
(it's
only an idea) you can have slave postgresql servers in each
building and some kind of synchronization with the master one.<br>
</div>
<div class="protonmail_signature_block
protonmail_signature_block-empty">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"><br>
</div>
<div class="protonmail_signature_block-proton
protonmail_signature_block-empty"><br>
</div>
</div>
<div><br>
</div>
<div class="protonmail_signature_block
protonmail_signature_block-empty">
<div class="protonmail_signature_block-user
protonmail_signature_block-empty"><br>
</div>
<div class="protonmail_signature_block-proton
protonmail_signature_block-empty"><br>
</div>
</div>
<div><br>
</div>
<div>‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐<br>
</div>
<div> El miércoles, 20 de noviembre de 2019 14:15, Andreas Neumann
<a class="moz-txt-link-rfc2396E" href="mailto:a.neumann@carto.net"><a.neumann@carto.net></a> escribió:<br>
</div>
<div> <br>
</div>
<blockquote class="protonmail_quote" type="cite">
<p>Hi Luigi and Alessandro,<br>
</p>
<p>thanks for the clarifications.<br>
</p>
<p>Quick other question: is it correct that the id MUST be
exactly 7 characters Less than or more than 7 characters won't
work? At least on my system saving the config is deactivated
if it is less than 7 chars.<br>
</p>
<p>Thanks,<br>
</p>
<p>Andreas<br>
</p>
<p>On 2019-11-20 13:46, Alessandro Pasotti wrote:<br>
</p>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">
<div dir="ltr"> <br>
</div>
<div><br>
</div>
<div>
<div dir="ltr">On Wed, Nov 20, 2019 at 1:24 PM Andreas
Neumann <<a href="mailto:a.neumann@carto.net"
rel="noreferrer" moz-do-not-send="true">a.neumann@carto.net</a>>
wrote:<br>
</div>
<blockquote>
<div>
<p>Hi,<br>
</p>
<p>I wonder what is best practice to handle auth
configs across several users for sharing of
projects?<br>
</p>
<p>Should we ask users to create the same
auth-config ids/names to make projects
interoperable, where each users would have
different credentials, but share the auth-config
id that is stored in the QGIS project file?<br>
</p>
<p>Is this how we should do it? Otherwise users
would end up with different auth-ids and then
can't open QGIS files from their colleagues
without a hassle ...<br>
</p>
<p>Or are there better/alternative approaches?<br>
</p>
</div>
</blockquote>
<div> <br>
</div>
<div>One of the best ways we've used so far was to
pre-define at the organization level a small set of
authids, you are limited to 7 chars but that's not a
big issue.<br>
</div>
<div> <br>
</div>
<div>So, when creating project you will use one of the
pre-defined auth ids, of course every user will have
to use his own local QGIS auth DB (this is all
handled transparently by the QGIS auth system) where
he stores his own credentials.<br>
</div>
<div> <br>
</div>
<div>If you share your project within your
organization, as long as the user who receives the
project has his credentials already sets for the
given auth ids access will be granted automatically,
if not he will be prompted to enter credentials and
if he stores them in the QGIS auth local DB this
will be required only for the first time.<br>
</div>
<div> <br>
</div>
<div>This system gives the sysadmins full flexibility:
individual credentials can be revoked/granted, no
need to share any auth DB in any case.<br>
</div>
<div> <br>
</div>
<div>Hope this helps.<br>
</div>
<div> <br>
</div>
<blockquote>
<div>
<p>Andreas<br>
</p>
<p>On 2019-11-20 13:14, Hernán De Angelis wrote:<br>
</p>
<blockquote>
<div>
<div>
<p>Interesting point, Luigi. Thank you!<br>
</p>
<p>Hernán<br>
</p>
<p><br>
</p>
<div>On 2019-11-20 12:58, Luigi Pirelli
wrote:<br>
</div>
<blockquote>
<div dir="ltr">
<div>this is not an issue, Postgres
support many auth systems most of them
paired with the authentication system
implemented in QGIS. Other problem is
how to share (auth.db) credentials or
security setting among different
users.<br>
</div>
<div> <br>
</div>
<div>
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div> <br>
</div>
<div>
<div>Luigi Pirelli<br>
</div>
<div><br>
</div>
<div>**************************************************************************************************<br>
</div>
<div>* LinkedIn: <a
href="https://www.linkedin.com/in/luigipirelli" target="_blank"
rel="noopener
noreferrer"
moz-do-not-send="true">https://www.linkedin.com/in/luigipirelli</a><br>
</div>
<div>*
Stackexchange: <a
href="http://gis.stackexchange.com/users/19667/luigi-pirelli"
target="_blank"
rel="noopener
noreferrer"
moz-do-not-send="true">http://gis.stackexchange.com/users/19667/luigi-pirelli</a><br>
</div>
<div>* GitHub: <a
href="https://github.com/luipir"
target="_blank"
rel="noopener
noreferrer"
moz-do-not-send="true">https://github.com/luipir</a><br>
</div>
<div>* Book: <a
href="https://www.packtpub.com/eu/application-development/mastering-geospatial-development-qgis-3x-third-edition"
target="_blank"
rel="noopener
noreferrer"
moz-do-not-send="true">Mastering
QGIS3 - 3rd
Edition</a><br>
</div>
</div>
<div>
<div>* Hire a team:
<a
href="http://www.qcooperative.net"
target="_blank"
rel="noopener
noreferrer"
moz-do-not-send="true">http://www.qcooperative.net</a><br>
</div>
<div>**************************************************************************************************<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<div>
<div dir="ltr">On Wed, 20 Nov 2019 at
11:53, Jan-Eric Oskarsson <<a
href="mailto:jan-eric@kregis.se"
rel="noreferrer"
moz-do-not-send="true">jan-eric@kregis.se</a>>
wrote:<br>
</div>
<blockquote type="cite">
<div>Hi Hernán!<br>
</div>
<div>Maybe this comment is redundant
but you have to set up a strong
security to prevent hackers to hack
your database and steal your data
and cause damage.<br>
</div>
<div>I hope uthat you already have
thought about this issu!<br>
</div>
<div><br>
</div>
<div>Kind Regards<br>
</div>
<div>Jan-Eric<br>
</div>
<div><br>
</div>
<div>-----Ursprungligt meddelande-----<br>
</div>
<div>Från: Qgis-user <<a
href="mailto:qgis-user-bounces@lists.osgeo.org"
rel="noreferrer"
moz-do-not-send="true">qgis-user-bounces@lists.osgeo.org</a>>
För Hernán De Angelis<br>
</div>
<div>Skickat: den 20 november 2019
11:10<br>
</div>
<div>Till: qgis-user <<a
href="mailto:qgis-user@lists.osgeo.org"
rel="noreferrer"
moz-do-not-send="true">qgis-user@lists.osgeo.org</a>><br>
</div>
<div>Ämne: [Qgis-user] Experiences
using QGIS + PostgreSQL/PostGIS in a
multiuser environment?<br>
</div>
<div><br>
</div>
<div>Hello QGIS:ers<br>
</div>
<div><br>
</div>
<div>I am evaluating setting up a
server running PostgreSQL/PostGIS
for use as data
sharing/collaborating environment
for spatial data. The user group may
consist of up to 15 people, mostly
using QGIS but one or two may use
other software (non OS). Data is
almost exclusively of vector type.
The use is within a single
organization.<br>
</div>
<div><br>
</div>
<div>I understand some people in this
list have experience with this kind
of environment and would appreciate
if any of you would share any useful
experience, challenges, thought or
things to watch out for. I
understand basic management routines
are critical (user management, user
rights), as well as a sound backup
and update strategy. I also
understand that proper data
management procedures have to be in
place, like rules for table creation
and eventual deletion, attribute
selection, etc. But what else can go
wrong with this kind of setup if not
managed properly? <br>
</div>
<div>Thoughts and experiences welcome!<br>
</div>
<div><br>
</div>
<div>Best regards and thanks in
advance<br>
</div>
<div><br>
</div>
<div>Hernán<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>_______________________________________________<br>
</div>
<div>Qgis-user mailing list<br>
</div>
<div><a
href="mailto:Qgis-user@lists.osgeo.org"
rel="noreferrer"
moz-do-not-send="true">Qgis-user@lists.osgeo.org</a><br>
</div>
<div>List info: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener
noreferrer" moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
<div>Unsubscribe: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener
noreferrer" moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
<div><br>
</div>
<div>_______________________________________________<br>
</div>
<div>Qgis-user mailing list<br>
</div>
<div><a
href="mailto:Qgis-user@lists.osgeo.org"
rel="noreferrer"
moz-do-not-send="true">Qgis-user@lists.osgeo.org</a><br>
</div>
<div>List info: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener
noreferrer" moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
<div>Unsubscribe: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener
noreferrer" moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
</blockquote>
</div>
</blockquote>
</div>
</div>
<div><br>
</div>
<div>
<div>_______________________________________________<br>
</div>
<div>Qgis-user mailing list<br>
</div>
<div><a
href="mailto:Qgis-user@lists.osgeo.org"
rel="noreferrer" moz-do-not-send="true">Qgis-user@lists.osgeo.org</a><br>
</div>
<div>List info: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
<div>Unsubscribe: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
</div>
</blockquote>
<p><br>
</p>
</div>
<div>_______________________________________________<br>
</div>
<div>Qgis-user mailing list<br>
</div>
<div><a href="mailto:Qgis-user@lists.osgeo.org"
rel="noreferrer" moz-do-not-send="true">Qgis-user@lists.osgeo.org</a><br>
</div>
<div>List info: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
<div>Unsubscribe: <a
href="https://lists.osgeo.org/mailman/listinfo/qgis-user"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">https://lists.osgeo.org/mailman/listinfo/qgis-user</a><br>
</div>
</blockquote>
</div>
<div><br>
</div>
<div><br>
</div>
<div>-- <br>
</div>
<div> <br>
</div>
<div dir="ltr">
<div>Alessandro Pasotti<br>
</div>
<div>w3: <a href="http://www.itopen.it"
target="_blank" rel="noopener noreferrer"
moz-do-not-send="true">www.itopen.it</a><br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<p><br>
</p>
</blockquote>
<div><br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Qgis-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Qgis-user@lists.osgeo.org">Qgis-user@lists.osgeo.org</a>
List info: <a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/qgis-user">https://lists.osgeo.org/mailman/listinfo/qgis-user</a>
Unsubscribe: <a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/qgis-user">https://lists.osgeo.org/mailman/listinfo/qgis-user</a></pre>
</blockquote>
</body>
</html>