If the client does not support authentication, then it will be complicated
to provide restricted WMS. If you can't improve the client situation
(perhaps by providing a web application using OpenLayers, or using uDig
which is free and works with GeoServer in the Challenge mode) then you could
look into some security system which works "a layer above" the client, such
as putting geoserver behind a VPN or an HTTP proxy which restricts access
based on IP address, etc.
I wouldn't recommend the OpenPlans authentication extension as it is no
longer maintained, and anyway it was written to work with a specific wiki
software instead of being a general-purpose authentication system. It may
serve as a useful base for a cookie-based authentication system, but
GeoServer already has cookie-based authentication.
--
David Winslow
OpenGeo - http://opengeo.org/
On Mon, Dec 13, 2010 at 10:50 AM, Arnaud Vandecasteele <[email protected]
> wrote:
> David,
>
> Thank you for your answer.
> I will try to explain a little bit more my problems. Maybe you will
> find (I hope so) a solution.
>
> For one of our project I need to secure my WMS.
> So I create a rule where only the person with a login and a password
> can get the tiles.
> But for one of our partners I need to let the WMS open with no
> restriction. Indeed the software they have can't use restricted WMS.
> So do you think that I can manage this particular case with the
> geoserver security system ?
> Another solution could be to specify the login and the password inside
> the WMS request. Is it possible to do that with GeoServer ?
>
> Thank for your help.
>
> Regards
>
> Arnaud
>
>
>
> On Mon, Dec 13, 2010 at 4:14 PM, David Winslow <[email protected]>
> wrote:
> > LayerGroups in geoserver are a very thin construct; for most purposes a
> > layergroup is equivalent to listing out the layer names it contains in
> your
> > wms request. I don't think the security system provides a mechanism for
> > restricting access to layergroups directly (because in a sense they don't
> > really contain any information). However, restrictions for individual
> > layers will be applied when making requests for layergroups, so you can
> > simulate a restricted layergroup by making any one of the layers it
> > contains restricted.
> > Hope this helps.
> > --
> > David Winslow
> > OpenGeo - http://opengeo.org/
> >
> > On Mon, Dec 13, 2010 at 4:53 AM, Arnaud Vandecasteele <
> [email protected]>
> > wrote:
> >>
> >> Hi all,
> >>
> >> As I understand, GeoServer can secure a service (WMS, WFS) and/or the
> >> layers.
> >> But I would like to know if it's possible to secure a layer groups
> >> depending on a service.
> >> For example I have different layer groups :
> >> 1- layerGroup-Open
> >> 2- LayerGroup-Secure
> >> I would like that the first one can be accessed in WMS by everybody
> >> and the second one (also in WMS) only by people I trust (people with
> >> password).
> >>
> >> Do you know how can I do that ?
> >>
> >> Thanks you for your help
> >>
> >> Regards
> >>
> >> Arnaud
> >>
> >> --
> >> --------------------------------------------------------------------
> >> Van De Casteele Arnaud
> >> Mines Paris Tech - CRC
> >> Sophia-Antipolis
> >> 0698 24 25 29
> >> SIG - WebMapping - SOLAP - BI - GeoCollaboration
> >>
> >> Web Site
> >> http://geotribu.net/
> >> http://www.sismaris.org/
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Oracle to DB2 Conversion Guide: Learn learn about native support for
> >> PL/SQL,
> >> new data types, scalar functions, improved concurrency, built-in
> packages,
> >> OCI, SQL*Plus, data movement tools, best practices and more.
> >> http://p.sf.net/sfu/oracle-sfdev2dev
> >> _______________________________________________
> >> Geoserver-users mailing list
> >> [email protected]
> >> https://lists.sourceforge.net/lists/listinfo/geoserver-users
> >
> >
>
>
>
> --
> --------------------------------------------------------------------
> Van De Casteele Arnaud
> Mines Paris Tech - CRC
> Sophia-Antipolis
> 0698 24 25 29
> SIG - WebMapping - SOLAP - BI - GeoCollaboration
>
> Web Site
> http://geotribu.net/
> http://www.sismaris.org/
>
------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
