RE: [mapguide-users] MapGuide Open Source 2.0 (Final)Possible SecurityIssue
I am experiencing the same problem. Any solution yet? Regards Andre _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kenneth, GEOGRAF A/S Sent: Tuesday, March 11, 2008 11:08 AM To: MapGuide Users Mail List Subject: Re: [mapguide-users] MapGuide Open Source 2.0 (Final)Possible SecurityIssue I have just tested this on my local machine (2.0 rc2), and I cannot log in with any unapproved user. I have multiple MapDefinitions. I agree that it would be a security bug, but if it is only present when there are no MapDefinitions in the repo, I would say it has almost no pratical relevance. Still, something must be wrong if it happens, and should be fixed. Regards, Kenneth, GEOGRAF A/S Jason Birch skrev: Seems nasty. Have you had a chance to submit this as a ticket? https://trac.osgeo.org/mapguide/wiki/SubmitTicket Jason From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rock Beans Sent: Wednesday, March 05, 2008 14:30 To: MapGuide Users Mail List Subject: [mapguide-users] MapGuide Open Source 2.0 (Final) Possible SecurityIssue I figured out how to reproduce this problem. If you have no maps defined or created yet and do the call below but use TYPE=MapDefinition it fails with default user Anonymous. Then it allows the user Administrator with no password to do any OPERATION=ENUMERATERESOURCES. You can also log into Studio using Administrator with any random password as long as it is not blank. I find this to be a huge bug. Can anyone else confirm this? Original: After pounding my head for 3 hours I figured out that that FCGI calls where allowing the user name of Administrator with no password. Studio was allowing me to log in to the site with the user name of Administrator and any password since it doesn't allow blank passwords. The strange thing is I can't log on to the Site Administrator PHP pages with out the proper password through. Anyone else encounter this or have any suggestions? I went into the Site Administrator and changed the password for the Administrator user as well. The really strange thing was the user Anonymous would not work as is should default out of the box! It seemed every 3rd attempt with the Anonymous user would allow me to get an XML list the others said bad user and password. Example URL (replace localhost with computer/dns name): http://localhost/mapguide/mapagent/mapagent.fcgi?OPERATION=ENUMERATERESOURCE S http://localhost/mapguide/mapagent/mapagent.fcgi?OPERATION=ENUMERATERESOURC ESVERSION=1.0.0LOCALE=enRESOURCEID=Library%3A%2F%2FTYPE=DEPTH=-1COMPUT ECHILDREN=1FORMAT=text%2FxmlUSERNAME=Administrator VERSION=1.0.0LOCALE=enRESOURCEID=Library%3A%2F%2FTYPE=DEPTH=-1COMPUTEC HILDREN=1FORMAT=text%2FxmlUSERNAME=Administrator Now I changed the password for the Administrator to something other than admin and back for testing and everything works fine. I have no clue what went wrong. I had a co-worker try the link above with localhost replaced with my work group computer name and he was able to get right in as explained above. Now after everything seems OK he cannot. So I am not sure what caused this or what fixed this but watch out for this one. The Rock _ ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users __ Information from ESET Smart Security, version of virus signature database 2937 (20080311) __ The message was checked by ESET Smart Security. http://www.eset.com ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
RE[mapguide-users] DHAT EL5
hi, Is anyone succeed in installing Mapguide Entreprise 2008 or mapguide open source 1.2 on REDHAT EL 5 ? for mapguide entreprise i have : Ne peut ouvrir '+195' en lecture: Aucun fichier ou répertoire de ce type thanks -- View this message in context: http://www.nabble.com/REDHAT-EL5-tp16000149s16610p16000149.html Sent from the MapGuide Users mailing list archive at Nabble.com. ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
Re: [mapguide-users] featurereader, tileservice, map.open() problem
When the viewer starts up, it does the following:
1. Create a new session. This implies creating a temporary empty repository
2. Compile information from the Library respository, regarding the map
(such as feature source names, etc) into a binary format.
3. Store this binary version in the session repository, at the root,
using the MapDefintion name as the name.
4. Display the map.
When you start by calling the CreateSession(), you redo step 1, and
thus have no runtime map.
When you call map.Create(), you replicate step 2 and 3.
This makes the two maps decoupled, and thus any changes to one is not
visible in the other.
You must login using the SessionID, obtained from the viewer, not with
username/password.
As for naming, it usually creates a bit of confusion.
If you MapDefinition has the path
Library://myfolder1/myfolder2/MyMap.MapDefinition, it becomes
Session:session-id//MyMap.Map.
If you need to modify a layer, you can copy it into the session
repository, and change the runtime map to point at the session path instead.
As for the feature reader, you might have to prefix the schema with the
schema name, like SDF_2:Voting.
Regards, Kenneth, GEOGRAF A/S
Áron Deák skrev:
Hello everybody,
I am new to mapguide. I am writing a java thick client map application
using MapGuide Open Source as map server. I query images from the map
server, this part works pretty well, not fast enought tough.
My problem is that I also need to be able to read the feature data in
order to be able to provide some simplified geocoding service as well,
but I can't get the feature reader to work, I also need the tile
service because rendering images takes a lot of time and even
implementing tile caching in the program is not enough, so I would
like to use MapGuide's tile service as well reading tile data through
MgByteReader in a similar way as reading arbitrary sized images.
I have problem running even the simplest sample codes, eg. map.Open()
function throws an exception so I have to use map.Create() to open a
map and I am thinking that this might be the root of my problems.
Here is how my code works: (simplified) I have followed instruction
from the GettingStartedGuide.pdf to the letter when installing the
MapGuide server
try {
MapGuideJavaApi.MgInitializeWeb
Tier(C:\\webconfig.ini);
MgUserInformation userInfo = new
MgUserInformation(Anonymous, );
mapDefid = new MgResourceIdentifier(
Library://Samples/Sheboygan/Maps/Sheboygan.MapDefinition);
MgSite site = new MgSite();
site.Open(userInfo);
String sessionId = site.CreateSession();
site.Close();
MgSiteConnection siteConnection = new MgSiteConnection();
siteConnection.Open(userInfo);
MgResourceService service = (MgResourceService) siteConnection
.CreateService(MgServiceType.ResourceService);
MgMap map;
map = new MgMap();
MgRenderingService renderingService = (MgRenderingService)
siteConnection
.CreateService(MgServiceType.RenderingService);
MgFeatureService featureService = (MgFeatureService)
siteConnection
.CreateService(MgServiceType.FeatureService);
MgTileService tileService = (MgTileService) siteConnection
.CreateService(MgServiceType.TileService);
MgResourceService resourceService = (MgResourceService)
siteConnection
.CreateService(MgServiceType.ResourceService);
map.Create(resourceService, mapDefid, MyMap);
/**
* Opening map throws exception
*/
//map.Open(resourceService, Sheboygan);
MgResourceIdentifier districtsId = new MgResourceIdentifier(
Library://Samples/Sheboygan/Data/VotingDistricts.FeatureSource);
/**
* Selecting features throws exception
*/
//featureService.SelectFeatures(districtsId,
VotingDistricts,
// new MgFeatureQueryOptions(), Sheboygan);
/**
* Reading a certain area of the map as an image file
stream works fine
*/
MgByteReader reader = this.mapGuideResourceManager
.getRenderingService().RenderMap(map,
this.mapGuideResourceManager.getSelection(), env,
(int) renderSpec.getImageSize().getWidth(),
(int) renderSpec.getImageSize().getHeight(),
new MgColor((short) 0, (short) 0, (short) 0xff),
JPG);
} catch (MgException ex) {
ex.printStackTrace();
}
Any help or ideas would be appreciated, now I am stuck with the
development because of these problems.
Thanks,
aron deak
RE: [mapguide-users] fusion selection events
Hi Jackie,
Both of these events are valid:
Fusion.Event.MAP_SELECTION_ON
Fusion.Event.MAP_SELECTION_OFF
The selection events are tied to the MAP so the following would work ...
In template context:
Fusion.getMapById('Map').registerForEvent(Fusion.Event.MAP_SELECTION_ON,
callback);
Fusion.getMapById('Map').registerForEvent(Fusion.Event.MAP_SELECTION_OFF,
callback);
(where 'Map' is the div id containing the map)
In widget context:
this.getMap().registerForEvent(Fusion.Event.EVENT,
this.CALLBACK.bind(this));
Regards,
Jason
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jackie Ng
Sent: Tuesday, March 11, 2008 9:38 PM
To: mapguide-users@lists.osgeo.org
Subject: [mapguide-users] fusion selection events
Hi All,
In fusion, how can I listen for a selection on the map? I think it's
something to do with Fusion.registerForEvent(), but I don't know what event
to listen for.
- Jackie
--
View this message in context:
http://www.nabble.com/fusion-selection-events-tp15996245s16610p15996245.html
Sent from the MapGuide Users mailing list archive at Nabble.com.
___
mapguide-users mailing list
mapguide-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapguide-users
___
mapguide-users mailing list
mapguide-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapguide-users
[mapguide-users] SelectFeatures and Joins
The SelectFeatures function of FeatureService seems to be broken for any joined features. I can put in filters which should return no features but at least one is returned. I am using the 2.0 release. Is anyone else seeing this issue? As it stands it breaks Fusion selections and disallows custom queries. -Greg ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
[mapguide-users] using ecw with webstudio
Hello, I'ld like to know how i can use the raster ecw with webstudio, the webstudio provides only access to sdf and shp.In the mapguideos webpages it's only explained the use od ecw with autodesk studio accordingly(in the joined text file). I would want to know the process to insert ecw files in the map of webstudio FDO 3.3.0 / MapGuide 2.0.0 ¶ This version uses the standard Visual C 2005 GDAL plugins: http://home.gdal.org/dl/gdal14_vc8/ There are three files in this directory: * ecw_plugin_gdal14_vc8.zip : ECW GDAL Plugin * mrsid_plugin_gdal14_vc8.zip : MrSID GDAL Plugin * gdal144_vc8_sdk.zip : Do NOT download, not required for MapGuide or FDO. Each file contains a gdalplugins folder, as well as some dlls in the root of the zipfile. To install these plugins into MapGuide, you need to: 1. Extract the zipfile to a temporary location 2. Copy the gdalplugins folder to the MapGuide installation directory under Server/Bin/ 3. Copy the dll files that unzipped into the root of the temporary location to the MapGuide installation directory under Server/Bin/Fdo/ The final location for the ECW files should look something like this: Server/Bin/Fdo/libecwj2.dll Server/Bin/gdalplugins/gdal_ECW.dll And for the MrSID files, like this: Server/Bin/Fdo/lti_dsdk_cdll.dll Server/Bin/Fdo/lti_dsdk_dll.dll Server/Bin/gdalplugins/gdal_MrSID.dll Using with Autodesk MapGuide Studio ¶ To publish rasters using the open source raster provider with Autodesk MapGuide Studio use the following steps: 1. Start Studio and connect to your MapGuide Open Source server. 2. Then do File New Data Connection... 3. In the Connect To Data dialog that comes up, select OSGeo FDO Provider for Raster, then press OK. An editor that says Configure a Feature Resource using the Generic Editor will display. 4. In the Connection Properties grid, there is a DefaultRasterFileLocation property. Click in the value column and enter the directory where your image files are. On Linux it has the form /home/thf/myimages and on Windows it has the form C:\myimages. 5. The configuration of the raster source is now complete, save the resource and start using it. ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
RE: [mapguide-users] using ecw with webstudio
WebStudio is not yet fully featured... if anyone wants to get hacking with JS, it's in need of some TLC. Currently, the only other alternative to Autodesk MapGuide Studio is MapStudio OS http://code.google.com/p/mapstudioos/ This requires either a Windows PC, or possibly Mono (untested). Jason From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of DIBUSI Xavier Sent: Wednesday, March 12, 2008 09:08 To: mapguide-users@lists.osgeo.org Subject: [mapguide-users] using ecw with webstudio Hello, I'ld like to know how i can use the raster ecw with webstudio, the webstudio provides only access to sdf and shp.In the mapguideos webpages it's only explained the use od ecw with autodesk studio accordingly(in the joined text file). I would want to know the process to insert ecw files in the map of webstudio ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
[mapguide-users] Labels problem
Hellow all, I would like to hide labels on some zoom, and show them on another, I havent found that option in layer definition , can any one help me? ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
Re: [mapguide-users] MG PHP query
Ok. I found the way to solve my problem. I need help in one thing. I've got my php query file and need SESSION id in hidden field. input type=hidden name=SESSION value= What should I write in value= to get it? Sorry I'm new in PHP ... :( Regards Tom Tomas PL wrote: Hi All, I've got my MG map (PHP and Appache) and everything is wright. I try to build a simple query in PHP (just like Sheboygan sample query but much more easiest) I need only sign value from one layer [buildings] and one field [key], just like search command but I need value as a list (not input ). List with values from field [key]. If some of You have seemless sample, I will be greatfull. Regards Tom -- View this message in context: http://www.nabble.com/MG-PHP-query-tp15990995s16610p16012544.html Sent from the MapGuide Users mailing list archive at Nabble.com. ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
RE: [mapguide-users] SelectFeatures and Joins
Greg, I verified your issue and have found the problem in the 2.0 code. I will create a trac ticket for this. The fix for this issue is a simple code fix and I will submit my code fix for it to the Trunk 2.0 code tomorrow. Thanks, Bruce From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Linforth Sent: Wednesday, March 12, 2008 8:03 AM To: mapguide-users@lists.osgeo.org Subject: [mapguide-users] SelectFeatures and Joins The SelectFeatures function of FeatureService seems to be broken for any joined features. I can put in filters which should return no features but at least one is returned. I am using the 2.0 release. Is anyone else seeing this issue? As it stands it breaks Fusion selections and disallows custom queries. -Greg ___ mapguide-users mailing list mapguide-users@lists.osgeo.org http://lists.osgeo.org/mailman/listinfo/mapguide-users
