Hello, that's old news. Good new news is you don't have to do (almost) anything special to enable security on integrated layers (at least for WMS-C). Just grab a recent version of GeoServer (like in a nightly 2.1.x build or 2.1.2 when it comes out next week) and proceed as follows: - Configure your layer security - Go to the GeoWebCache GeoServer configuration page - Disable the WMS-C, WMTS, TMS services - Enable "direct WMS integration" - done.
From that on, instead of pointing your GetMap requests to /geoserver/gwc/service/wms, point them to /geoserver/wms, and just make sure the requests contain the TILED=true parameter (as mandated by the WMS-C spec). Same thing for GetCapabilities. Cheers, Gabriel On Fri, Sep 30, 2011 at 6:22 AM, Andrea Aime <[email protected]> wrote: > On Fri, Sep 30, 2011 at 10:59 AM, Micka <[email protected]> wrote: >> >> Hi everyone, >> >> I would like to know if the problem of GWC security have been fixed ? >> Or do you have a solution to fix it ? What should I do ? > > As far as I know nobody worked on securing GWC. > What I normally do is to get rid of GWC from GeoServer, keep it in a > separate > install, and make it cache only non secured layers (which are normally the > ones that drive the most traffic). > Securing GWC is a topic that pops up every now and then, but so far I > haven't found > a work project that could fund that work. > Cheers > Andrea > > -- > ------------------------------------------------------- > Ing. Andrea Aime > GeoSolutions S.A.S. > Tech lead > > Via Poggio alle Viti 1187 > 55054 Massarosa (LU) > Italy > > phone: +39 0584 962313 > fax: +39 0584 962313 > > http://www.geo-solutions.it > http://geo-solutions.blogspot.com/ > http://www.youtube.com/user/GeoSolutionsIT > http://www.linkedin.com/in/andreaaime > http://twitter.com/geowolf > > ------------------------------------------------------- > > ------------------------------------------------------------------------------ > All of the data generated in your IT infrastructure is seriously valuable. > Why? It contains a definitive record of application performance, security > threats, fraudulent activity, and more. Splunk takes this data and makes > sense of it. IT sense. And common sense. > http://p.sf.net/sfu/splunk-d2dcopy2 > _______________________________________________ > Geoserver-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/geoserver-users > > -- Gabriel Roldan OpenGeo - http://opengeo.org Expert service straight from the developers. ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2dcopy2 _______________________________________________ Geoserver-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-users
