Re: [mapserver-users] MapServer .map file security question

2013-02-19 Thread Martin Kofahl
Hello, with Apache you can set MS_MAPFILE pointing to the desired mapfile and MS_MAP_NO_PATH in order to disallow overriding it with &map= in the url. Using this, you even don't have to use &map= at all. Kind regards, Martin 2013/2/19 Mark Volz > Hi, > > I have a server that I would like to ru

Re: [mapserver-users] MapServer .map file security question

2013-02-19 Thread Stephen Woodbridge
On 2/19/2013 10:45 AM, Mark Volz wrote: Hi, I have a server that I would like to run both internal and external applications on it. I know I can use apache to limit who can access internal web pages. However, is there any mechanism to stop an external user from drawing an internal actual .m

Re: [mapserver-users] MapServer .map file security question

2013-02-19 Thread Lime, Steve D (MNIT)
It's tricky though using the same webserver instance. If you have separate instances (e.g. different ports, names or whatever) on the same box you can use the MS_MAP_PATTERN environment variable (given as a regex) to restrict allowable mapfile patterns. If you had in separate directories (e.g.

Re: [mapserver-users] MapServer .map file security question

2013-02-19 Thread Basques, Bob (CI-StPaul)
We do some stuff with Apache re-write rules for specially named files. Only certain naming conventions can be seen on the outside. This leaves the permissions aspects up the data owners to administer. Bobb >> -Original Message- >> From: mapserver-users-boun...@lists.osgeo.org [mai

Re: [mapserver-users] MapServer .map file security question

2013-02-19 Thread Jörg Thomsen
Hello Mark, have a look at http://mapserver.org/ogc/wms_server.html#changing-the-online-resource-url If using 'Apache SetEnvIf' you could redirect to different cgi-directories and there use allow-from / deny-from rules. Regards, Jörg Am 19.02.2013 16:45, schrieb Mark Volz: > Hi, > > I have a s

[mapserver-users] MapServer .map file security question

2013-02-19 Thread Mark Volz
Hi, I have a server that I would like to run both internal and external applications on it. I know I can use apache to limit who can access internal web pages. However, is there any mechanism to stop an external user from drawing an internal actual .map file? For example, what would stop som

Re: [mapserver-users] mapserver-users Digest, Vol 61, Issue 23

2013-02-19 Thread Mark Volz
Bob, Just curious how do you know that guy climbing in the tree? Mark Volz GIS Specialist Lyon County, MN (507) 532-8218 > -Original Message- > From: mapserver-users-boun...@lists.osgeo.org [mailto:mapserver-users- > boun...@lists.osgeo.org] On Behalf Of mapserver-users- > requ...@list