I did not test the combination GeoWebCache & Geoserver Security System but I think this will not work. AFAIK GeoWebCache has no access control logic, using GeoWebCache forces a proxy approach like GeoShield.
Please keep me informed about your experience. Thanks Christian Zitat von Garey Mills <[email protected]>: > Christian - > > An interesting idea, but we are using GeoWebCache. I try looking at > GeoShield. > > Garey > > On 8/18/2011 9:35 AM, [email protected] wrote: >> Perhaps this is of interest >> http://docs.geoserver.org/latest/en/user/services/virtual-services.html >> Maybe you can protect and authenticate based on URL Patterns. I >> never examined it, only an idea. >> >> About the time frame. Since I am a volunteer no exact roadmap is >> there because I cannot work full time on this project. But this >> work is part of my master thesis (Applied IT Security), as a >> consequence, I have to finish. My plan is to finish within this year. >> >> Hope this helps >> >> >> >> >> Zitat von "Stephen V. Mather" <[email protected]>: >> >>> :) Care to elaborate? I'm looking to put into place some >>> authentication in >>> place for some of our datasets. I'm trying to decide whether 'tis >>> better to >>> play with an OGC services aware proxy, such as GeoShield, or use GeoServer >>> security... . I like the idea of controlling things on the services level >>> rather that the layer level, but don't know the roadmap/timeframe for >>> GeoServer security related developments. >>> >>> Thanks, >>> Steve >>> >>> Stephen Mather >>> Geographic Information Systems (GIS) Manager >>> (216) 635-3243 >>> [email protected] >>> clevelandmetroparks.com >>> >>> >>> >>> >>> -----Original Message----- >>> From: [email protected] [mailto:[email protected]] >>> Sent: Thursday, August 18, 2011 11:25 AM >>> To: Andrea Aime >>> Cc: [email protected]; [email protected] >>> Subject: Re: [Geoserver-users] Using CAS an option with Geoserver? >>> >>> I am currently working on the security subsystem and additional >>> authentication possibilities are on my TODO list. (including CAS). >>> This will not help at the moment but perhaps this information is >>> interesting. >>> >>> Cheers >>> Christian >>> >>> Zitat von Andrea Aime <[email protected]>: >>> >>>> On Wed, Aug 17, 2011 at 11:24 PM, Garey Mills >>>> <[email protected]> wrote: >>>>> >>>>> I am setting up a GeoServer in the context of a university campus. >>>>> I would like to hide the reading of some layers behind a CAS Single Sign >>>>> On authentication. There is a Java CAS client that consists of a set of >>>>> filters that install in the web.xml of an application. Could using CAS >>>>> with GeoServer in this way be as simple as adding the filters to >>>>> GeoServer's web.xml and filtering on, for example, a workspace name? >>>> >>>> At the moment we don't have a clean way to plug in other authentication >>>> subsystems other than basic authentication, but Camp2Camp did integrate >>>> CAS once as a replacement for it (changing GS from basic auth only >>>> to CAS only) and they documented their changes in the wiki: >>>> >>>> http://geoserver.org/display/GEOSDOC/GeoServer+Security+with+CAS >>>> >>>> Unfortunately that page is no more available since we switched to Sphinx >>>> as the documentation system, but there might still be a backup somewhere. >>>> Mike, cc'ed, helped in the switch, hopefully he knows how to get those >>>> contents back. >>>> >>>> In any case, be warned, it was a heavy set of modifications in a >>>> GeoServer file >>>> (a xml one though) >>>> >>>> Cheers >>>> Andrea >>>> >>>>> Garey Mills >>>>> Library Systems Office >>>>> UC Berkeley >>>>> >>>>> >>> ---------------------------------------------------------------------------- >>> >>> -- >>>>> Get a FREE DOWNLOAD! and learn more about uberSVN rich system, >>>>> user administration capabilities and model configuration. Take >>>>> the hassle out of deploying and managing Subversion and the >>>>> tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 >>>>> _______________________________________________ >>>>> Geoserver-users mailing list >>>>> [email protected] >>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>>>> >>>>> >>>> >>>> >>>> >>>> -- >>>> ------------------------------------------------------- >>>> Ing. Andrea Aime >>>> GeoSolutions S.A.S. >>>> Tech lead >>>> >>>> Via Poggio alle Viti 1187 >>>> 55054 Massarosa (LU) >>>> Italy >>>> >>>> phone: +39 0584 962313 >>>> fax: +39 0584 962313 >>>> >>>> http://www.geo-solutions.it >>>> http://geo-solutions.blogspot.com/ >>>> http://www.youtube.com/user/GeoSolutionsIT >>>> http://www.linkedin.com/in/andreaaime >>>> http://twitter.com/geowolf >>>> >>>> ------------------------------------------------------- >>>> >>>> >>> ---------------------------------------------------------------------------- >>> >>> -- >>>> Get a FREE DOWNLOAD! and learn more about uberSVN rich system, >>>> user administration capabilities and model configuration. Take >>>> the hassle out of deploying and managing Subversion and the >>>> tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 >>>> _______________________________________________ >>>> Geoserver-users mailing list >>>> [email protected] >>>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>>> >>> >>> >>> >>> ---------------------------------------------------------------- >>> This message was sent using IMP, the Internet Messaging Program. >>> >>> >>> ---------------------------------------------------------------------------- >>> -- Get a FREE DOWNLOAD! and learn more about uberSVN rich >>> system, >>> user administration capabilities and model configuration. Take >>> the hassle out of deploying and managing Subversion and the >>> tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 >>> _______________________________________________ >>> Geoserver-users mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/geoserver-users >>> >>> >>> >>> >> >> >> >> ---------------------------------------------------------------- >> This message was sent using IMP, the Internet Messaging Program. >> >> > ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. ------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 _______________________________________________ Geoserver-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
