[mapguide-users] authentication II

[Martin Morrison]

By using an iframe the login credentials don't show up in the address bar.  Use https for further security.

Martin Morrison
Application Engineer
Engineering Design Systems, Inc.
3780 Peters Creek Rd Ext SW
Roanoke, VA  24018
540.345.1410
gis.edsi.com


-----Original Message-----
From: mapguide-users-bounces at lists.osgeo.org [mailto:mapguide-users-bounces at lists.osgeo.org] On Behalf Of U. Schlachter
Sent: Monday, February 25, 2013 9:12 AM
To: mapguide-users at lists.osgeo.org
Subject: Re: [mapguide-users] authentication II

Yes, I know that. 

I now use a html-form to input the username and password.
then the only way I found was to pass these to fields as url parameters to the main page:

"http://192.168.1.217/mapguide/fusion/templates/mapguide/maw/index.html?ApplicationDefinition=Library://Eckental/Layouts/MAWgis.ApplicationDefinition&locale=en&username=xxxx&password=yyyyy"

So everybody can the the password in browsers adressbar. Do you know an other way to transmit the password ?







Martin Morrison wrote
> You are logged in as Anonymous.  You will simply get access denied to 
> the protected object.
> 
> You need to think outside MapGuide's box and handle your login there.  
> Put a login box in an iframe and then call MapGuide from there passing 
> the login to the server to start the session.
> 
> Martin Morrison
> Application Engineer
> Engineering Design Systems, Inc.
> 3780 Peters Creek Rd Ext SW
> Roanoke, VA  24018
> 540.345.1410
> gis.edsi.com
> 
> -----Original Message-----
> From: 

> mapguide-users-bounces at .osgeo

>  [mailto:

> mapguide-users-bounces at .osgeo

> ] On Behalf Of U. Schlachter
> Sent: Saturday, February 23, 2013 8:44 AM
> To: 

> mapguide-users at .osgeo

> Subject: Re: [mapguide-users] authentication II
> 
> Hello,
> 
> MGOS 2.4 , Win 2008, IIS 7
> 
> I did all this steps above, but I still get no Login-Dialog.   The access
> is
> denied. Does anybody knows where I can search ?
> 
> My errorlog :
> 
> <2013-02-23T14:25:19> 	2224	MapGuide Developer	192.168.1.66	Anonymous
>  Error: Permission denied to resource:
> Library://Eckental/Layouts/test.ApplicationDefinition
>  StackTrace:
>   - MgResourceServiceHandler.ProcessOperation() line 80 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ResourceServiceHandler.cpp
>   - MgOpGetResourceContent.Execute() line 120 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\OpGetResourceContent.cpp
>   - MgServerResourceService.GetResourceContent() line 1222 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ServerResourceService.cpp
>   - MgApplicationRepositoryManager.GetResourceContent() line 385 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ApplicationRepositoryManager.cpp
>   - MgResourceDefinitionManager.GetResource
> (MgLibraryResourceContents.dbxml)() line 320 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ResourceDefinitionManager.cpp
>   - MgResourceContentManager.GetDocument() line 590 file 
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ResourceContentManager.cpp
>   - MgResourceHeaderManager.CheckPermission() line 2558 file
> c:\mg-2.4-x86\mgdev\server\src\services\resource\ResourceHeaderManager.cpp	
> 
> 
> 
> --
> View this message in context:
> http://osgeo-org.1560.n6.nabble.com/authentication-II-tp5025338p503635
> 3.html Sent from the MapGuide Users mailing list archive at 
> Nabble.com.
> _______________________________________________
> mapguide-users mailing list

> mapguide-users at .osgeo

> http://lists.osgeo.org/mailman/listinfo/mapguide-users
> 
> _______________________________________________
> mapguide-users mailing list

> mapguide-users at .osgeo

> http://lists.osgeo.org/mailman/listinfo/mapguide-users





--
View this message in context: http://osgeo-org.1560.n6.nabble.com/authentication-II-tp5025338p5036665.html
Sent from the MapGuide Users mailing list archive at Nabble.com.
_______________________________________________
mapguide-users mailing list
mapguide-users at lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapguide-users