[mapserver-users] Control access to WMS

[Joshua Hevenor]

Hi Steve,
I haven't seen a reply here yet so I thought I throw in my 2 cents. I don't know of anything specific in MapServer that would do what you're looking for. But many/most WMS services are run through a wrapper script (php or server-side script of your choice). It would be pretty easy to put an if statement checking who the requesting machine is, and limit it to be a the host machine. You could also return a 403 error for requests you want to deny or re-direct to your application. This is how I would most likely tackle this. 

Alternatively, the easiest  option would be  to state the limitation in your access/usage constraints (Only to be viewed through http://your app.com) in the service metadata. The easiest, though possibly the least effective. 


I hope this helps, 

Josh




From: "Steve.Toutant at inspq.qc.ca" <Steve.Toutant at inspq.qc.ca>
To: mapserver-users at lists.osgeo.org
Sent: Tue, October 13, 2009 12:49:59 PM
Subject: [mapserver-users] Control access to WMS


Hi, 
I defined a WMS Raster layer that I
use in my OpenLayers/GeoExt apps, 
I would like to control the access to
this WMS, so people can use it via my application, but can not "call"
the WMS to use it in their client application. The reason is there is a
"context" that comes with this WMS. Without it the data can be
misinterpreted. 

I already posted this thread on OpenLayers
list. It seems that the solution could be on the server side with Apache.
Someone suggested to limit the access with a user and password or other
functionality with Apache. 

My application will be public so there
is no user and password but I still need to control the access to this
particular WMS layer. 
Is there something I can control using
MapServer? 

thanks for your help! 
Steve 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapserver-users/attachments/20091013/382516bb/attachment.htm>