Hi Ghulam,

I stumbled over this old question by 'accident', and noticed it was still 
unanswered..

Disabling authentication is actually quite easy. Just change the Appserver 
authentication setting to 'application-level' and select a default user with 
sufficient rights to do whatever you want to allow anyone to do through that 
appserver.

Be aware that if the appserver is accessible from internet, that you are 
publishing the content to the entire world. But as long as you refrain from 
using things like xdmp:eval, and xdmp:login, unless very well shielded in your 
xquery, there should be no real risk of allowing unsolicited changing of the 
MarkLogic configuration. Especially if the appserver is meant for publishing 
content only and does not allow any kind of updating..

Kind regards,
Geert

>


Drs. G.P.H. Josten
Consultant


http://www.daidalos.nl/
Daidalos BV
Source of Innovation
Hoekeindsehof 1-4
2665 JZ Bleiswijk
Tel.: +31 (0) 10 850 1200
Fax: +31 (0) 10 850 1199
http://www.daidalos.nl/
KvK 27164984
De informatie - verzonden in of met dit emailbericht - is afkomstig van 
Daidalos BV en is uitsluitend bestemd voor de geadresseerde. Indien u dit 
bericht onbedoeld hebt ontvangen, verzoeken wij u het te verwijderen. Aan dit 
bericht kunnen geen rechten worden ontleend.


> From: [email protected]
> [mailto:[email protected]] On Behalf Of
> Ghulam Baloch
> Sent: maandag 26 januari 2009 15:33
> To: [email protected]
> Subject: [MarkLogic Dev General] Serving images through Mark
> logic server
>
> Hello,
> So i read the tutorial "Serving a Smile" and was successfully
> with that. Now I have a .net web app and I want to show some
> images on this app. Image source would be a URL pointing to
> ML for getting the image. But when ever I click on URL ML
> server asks me for log in.
> Is the way to disable that and what is the best practice for
> that? also what are security risks?
>
> thanks
> Ghulam
>

_______________________________________________
General mailing list
[email protected]
http://xqzone.com/mailman/listinfo/general

Reply via email to