Re: [mapserver-users] SLD with Mapserver 5.4.2

2009-07-30 Thread Michael Schulz
Hi Andrea,

to use SLD you won't need very special mapfile configuration. You
should pay attention to setting the imgpath parameter of the web
section correctly, i.e. accessible and writable by mapserver-cgi,
since the sld's are stored there temporarily while/after downloading
them from the specified URL. I am not aware of any other special
configuration, but very helpful are the debugging outputs, that you
can enable with the keyword DEBUG "on" at map or layer level. I find
it most convenient to specify an errorfile path via CONFIG
"MS_ERRORFILE" "/ms4w/tmp/ms_error.txt" at map level.

Be sure to set the SLD's NamedLayer Name tag value exactly the same as
your mapfile's layer name you want to style.

Cheers, Michael


2009/7/30 Andrea Dessì :
> Hi,
>
> i've started using Mapserver few days ago and i cannot apply SLD styles.
>
> i'm using  MapServer version 5.4.2
> OUTPUT=GIF OUTPUT=PNG
> OUTPUT=JPEG OUTPUT=WBMP
> OUTPUT=SVG
> SUPPORTS=PROJ
> SUPPORTS=AGG
> SUPPORTS=FREETYPE
> SUPPORTS=ICONV
> SUPPORTS=WMS_SERVER
> SUPPORTS=WMS_CLIENT
> SUPPORTS=WFS_SERVER
> SUPPORTS=WFS_CLIENT
> SUPPORTS=WCS_SERVER
> SUPPORTS=FASTCGI
> SUPPORTS=THREADS
> SUPPORTS=GEOS
> INPUT=EPPL7
> INPUT=POSTGIS
> INPUT=OGR
> INPUT=GDAL
> INPUT=SHAPEFILE
>
> under Ubuntu 9.04.
>
> I want to user mapserver as WMS Server and the apply SLD styles on the
> fly... the common query is:
> http://localhost/cgi-bin/wms?SERVICE=WMS&;
> VERSION=1.1.1&
> REQUEST=GetMap&
> BBOX=-74.012362,40.752314,-73.948216,40.791051&
> SRS=EPSG:4326&
> WIDTH=500&
> HEIGHT=500&
> LAYERS=myground,myroads&
> FORMAT=image/gif&
> TRANSPARENT=TRUE&
> SLD=http://localhost/mysld.xml
>
> But sld is not applying.
>
> The question is: there are specific parameters for using SLD in mapfile?
> I'm feeling a bit confused about this.
>
> Thank You,
> --
> Andrea
>
> ___
> mapserver-users mailing list
> mapserver-users@lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/mapserver-users
>



-- 
~~~
Aufwind durch Wissen!

Qualifizierte Open Source Schulungen bei der
http://www.foss-akademie.de/
~~~

---
Michael Schulz
msch...@webgis.de

in medias res
Gesellschaft für Informationstechnologie mbH

+++ Bitte beachten Sie unsere neue Adresse und Durchwahl +++

Schwimmbadstraße 2
D-79100  Freiburg i. Br.

Tel:  +49 (0)761 705798-102
Tel:  +49 (0)761 705798-0
Fax: +49 (0)761 705798-09

+++ Bitte beachten Sie unsere neue Adresse und Durchwahl +++

http://www.webgis.de / http://www.zopecms.de
--
Geschäftsführer: Stefan Giese, Dr. Christof Lindenbeck
Eingetragen im Handelsregister HRB 5930 beim Amtsgericht Freiburg
___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


Re: [mapserver-users] label SIZE parameter

2009-07-30 Thread Steve Lime
Yup, a documentation error. Doubles have been supported for label size, and 
style size/width
since 5.2 I believe. If you would, please file a documentation ticket in trac. 

  trac.osgeo.org/mapserver

Steve

>>> On 7/30/2009 at 7:36 AM, in message <4a7193d0.1040...@dmsolutions.ca>, 
>>> Christy
Nieman  wrote:
> Good morning,
> 
> I was just playing around with the sizes of some labels, and, after 
> checking the mapfile documentation, I'm a little confused with the 
> results I've seen.  In the documentation it says that SIZE takes an 
> integer for truetype fonts, but I was able to specify "SIZE 5.5" which 
> did not give the same result as "SIZE 5" (which is what I would have 
> expected) or "SIZE 6" with MapServer 5.4.2.  Is this an error in the 
> documentation?
> 
> Thanks,
> Christy
> ___
> mapserver-users mailing list
> mapserver-users@lists.osgeo.org 
> http://lists.osgeo.org/mailman/listinfo/mapserver-users

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


Re: [mapserver-users] label character spacing and curves

2009-07-30 Thread Stephen Woodbridge

Jennifer Shanks wrote:

Hello,

I'm having trouble with labels that follow a curve.  When the curves
are tight,  the letters are too close together and appear in a
jumble.  I'm using a true type font arial.  I'd like to space the
characters but don't see an option for that.  What have others done
to solve this problem?  Are there suggestions for other true type
fonts that have a wider spacing?  Any other ideas?


Hi Jennifer,

Unfortunately, I'm unaware of any current way to work around this 
problem, but Thomas would be the expert on this.


There are couple of issues in dealing with this problem in the code but 
they have not been implemented mostly because they would have an impact 
on performance and require time/effort of a developer.


Hi Thomas,

I'm not sure if you have thought about this at all, but here are a few 
ideas:


1) check that the bbox of the character being placed against the prior 
character and increase the space between the character if they collide.
2) on segments that double back on themselves, like bowties, you might 
need to perform the above check on all prior characters, taking more 
time, to avoid these type of collisions.


These checks might be dynamically enabled/disabled doing a quick scan of 
the part of the line segment that is being labeled and checking the 
angle between segments and maybe the length of the segments to see if 
there may be a need to do additional checking.

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] label character spacing and curves

2009-07-30 Thread Jennifer Shanks

Hello,

I'm having trouble with labels that follow a curve.  When the curves are tight, 
 the letters are too close together and appear in a jumble.  I'm using a true 
type font arial.  I'd like to space the characters but don't see an option for 
that.  What have others done to solve this problem?  Are there suggestions for 
other true type fonts that have a wider spacing?  Any other ideas?

Thanks,
Jennifer

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] SLD with Mapserver 5.4.2

2009-07-30 Thread Andrea Dessì

Hi,

i've started using Mapserver few days ago and i cannot apply SLD styles.

i'm using  MapServer version 5.4.2
OUTPUT=GIF OUTPUT=PNG
OUTPUT=JPEG OUTPUT=WBMP
OUTPUT=SVG
SUPPORTS=PROJ
SUPPORTS=AGG
SUPPORTS=FREETYPE
SUPPORTS=ICONV
SUPPORTS=WMS_SERVER
SUPPORTS=WMS_CLIENT
SUPPORTS=WFS_SERVER
SUPPORTS=WFS_CLIENT
SUPPORTS=WCS_SERVER
SUPPORTS=FASTCGI
SUPPORTS=THREADS
SUPPORTS=GEOS
INPUT=EPPL7
INPUT=POSTGIS
INPUT=OGR
INPUT=GDAL
INPUT=SHAPEFILE

under Ubuntu 9.04.

I want to user mapserver as WMS Server and the apply SLD styles on the 
fly... the common query is:

http://localhost/cgi-bin/wms?SERVICE=WMS&;
VERSION=1.1.1&
REQUEST=GetMap&
BBOX=-74.012362,40.752314,-73.948216,40.791051&
SRS=EPSG:4326&
WIDTH=500&
HEIGHT=500&
LAYERS=myground,myroads&
FORMAT=image/gif&
TRANSPARENT=TRUE&
SLD=http://localhost/mysld.xml

But sld is not applying.

The question is: there are specific parameters for using SLD in mapfile?
I'm feeling a bit confused about this.

Thank You,
--
Andrea

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


RE : [mapserver-users] Impossible to draw SDO Geom etries fromOraclewhen SDO_GTYPE is 2007 and the interpre tation is2(connectivity by arcs : SDO_ELEM_INF O(1, 1003, 2, [...]) )

2009-07-30 Thread Julien Collaer

Hello Steve,

I'm currently using AGG driver. 
OUTPUTFORMAT
 NAME jpeg
 DRIVER "AGG/JPEG"
 MIMETYPE "image/jpeg"
 IMAGEMODE RGB
 EXTENSION "jpg"
 FORMATOPTION "QUALITY=80" 
 TRANSPARENT TRUE
END

I've just tested with GD and there is no change... the problem is still there.
I've put an attachment to this email : the png image from Oracle Mapviewer : 
the difference is that with Mapserver only the non circular geometries are 
drawed (These geometries are of interpretation 1 (vertex joined by lines and 
not arcs)).

Thanks,

Julien Collaer

 Message d'origine
De: Steve Lime [mailto:steve.l...@dnr.state.mn.us]
Date: jeu. 30/07/2009 17:22
À: mapserver-users@lists.osgeo.org; Julien Collaer
Objet : Re: [mapserver-users] Impossible to draw SDO Geometries fromOraclewhen 
SDO_GTYPE is 2007 and the interpretation is2(connectivity by arcs : 
SDO_ELEM_INFO(1, 1003, 2, [...]) )
 
Does it matter if you're using GD vs. AGG? They have slightly different 
transformation routines... Could
you post a picture of how it's supposed to look?

Steve

>>> On 7/30/2009 at 9:38 AM, in message
<38fffa96be9c224893b3559563614bea12c...@begemsrv01.sodiplan-begem.local>,
"Julien Collaer"  wrote:
> Hello list,
> 
> I'm using Mapserver CGI 5.0.2 (and i'v tried with the 5.4.x too) to render a 
> layer from an Oracle Spatial database (SDO geometries). 
> Everything is working fine except for some geometries : multipolygons with 
> interpretation 2 (vertex connected by arcs).
> 
> Here is an example of such geometry :
> MDSYS.SDO_GEOMETRY(2007,26273,null,MDSYS.SDO_ELEM_INFO_ARRAY(1,1003,2,11,100
> 3,2,21,1003,2),MDSYS.SDO_ORDINATE_ARRAY(83933,89879.010577196,83936.989422804
> ,89883,83933,89886.989422804,83929.010577196,89883,83933,89879.010577196,8334
> 5,89445.010577196,83348.989422804,89449,83345,89452.989422804,83341.010577196
> ,89449,83345,89445.010577196,82793,89490.010577196,82796.989422804,89494,8279
> 3,89497.989422804,82789.010577196,89494,82793,89490.010577196))
> The layer is rendered but no feature are displayed.
> 
> The geomtries are correct (verified with the Oracle MapViewer).
> 
> If someone knows a solution for this case it will be very useful...
> 
> Thanks in advance,
> 
> Julien Collaer




<>___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


RE : [mapserver-users] Impossible to draw SDO Geom etries fromOraclewhen SDO_GTYPE is 2007 and the interpre tation is2(connectivity by arcs : SDO_ELEM_INF O(1, 1003, 2, [...]) )

2009-07-30 Thread Julien Collaer
Hello Bob,

thanks for your fast response.

These geometries are generated by Oracle : SDO_Buffer function on multipoints 
geometries.

When i look to the SDO_GEOM example,there are three geometries (polygons) 
composed of five points with the first point being the same of the last one :

MDSYS.SDO_GEOMETRY(2007,26273,null,
MDSYS.SDO_ELEM_INFO_ARRAY(
1,1003,2,
11,1003,2,
21,1003,2),
MDSYS.SDO_ORDINATE_ARRAY(

--Geom 1 :
83933,89879.010577196,
83936.989422804,  89883,
83933,89886.989422804,
83929.010577196,  89883,
83933,89879.010577196,

--Geom 2 :
83345,89445.010577196,
83348.989422804,  89449,
83345,89452.989422804,
83341.010577196,  89449,
83345,89445.010577196,

--Geom 3 :
82793,89490.010577196,
82796.989422804,  89494,
82793,89497.989422804,
82789.010577196,  89494,
82793,89490.010577196
))

So i suppose that the problem must be something else.

Other thing : If i change manually (but, of course, it's not a solution for the 
production version) the interpretation of the vertex from 2 to 1 (arcs to 
lines) Mapserver is able to draw the rectangles.

Thanks,

Julien Collaer 


 Message d'origine
De: Bob Basques [mailto:bob.basq...@ci.stpaul.mn.us]
Date: jeu. 30/07/2009 16:57
À: Julien Collaer
Objet : Re: [mapserver-users] Impossible to draw SDO Geometries fromOraclewhen 
SDO_GTYPE is 2007 and the interpretation is 2(connectivity by arcs : 
SDO_ELEM_INFO(1, 1003, 2, [...]) )
 
Julien, 

Looking at the SDO description in the Oracle MAN for . . . 


--- 
1003 or 2003 2 

Polygon made up of a connected sequence of circular arcs that closes on itself. 
The end point of the last arc is the same as the start point of the first arc. 

Each circular arc is described using three coordinates: the start point of the 
arc, any point on the arc, and the end point of the arc. The coordinates for a 
point designating the end of one arc and the start of the next arc are not 
repeated. For example, five coordinates are used to describe a polygon made up 
of two connected circular arcs. Points 1, 2, and 3 define the first arc, and 
points 3, 4, and 5 define the second arc. The coordinates for points 1 and 5 
must be the same (tolerance is not considered), and point 3 is not repeated. 
--- 


It looks like the first and last points need to be the same and your record 
shows different points for the first and last entries.  You may have one extra 
point on the end as well (I think), or maybe you are just missing the last 
point on the end . . . 

bobb 

+

>>> "Julien Collaer"  wrote:


Hello list,

I'm using Mapserver CGI 5.0.2 (and i'v tried with the 5.4.x too) to render a 
layer from an Oracle Spatial database (SDO geometries).
Everything is working fine except for some geometries : multipolygons with 
interpretation 2 (vertex connected by arcs).

Here is an example of such geometry :
MDSYS.SDO_GEOMETRY(2007,26273,null,MDSYS.SDO_ELEM_INFO_ARRAY(1,1003,2,11,1003,2,21,1003,2),
 
MDSYS.SDO_ORDINATE_ARRAY(83933,89879.010577196, 
83936.989422804,89883, 
83933,89886.989422804, 
83929.010577196,89883, 

83933,89879.010577196, 
83345,89445.010577196, 

83348.989422804,89449, 
83345,89452.989422804, 

83341.010577196,89449, 
83345,89445.010577196, 

82793,89490.010577196, 
82796.989422804,89494, 

82793,89497.989422804, 
82789.010577196,89494, 

82793,89490.010577196))
The layer is rendered but no feature are displayed.

The geomtries are correct (verified with the Oracle MapViewer).

If someone knows a solution for this case it will be very useful...

Thanks in advance,

Julien Collaer 


___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


Re: [mapserver-users] Impossible to draw SDO Geometries from Oraclewhen SDO_GTYPE is 2007 and the interpretation is 2(connectivity by arcs : SDO_ELEM_INFO(1, 1003, 2, [...]) )

2009-07-30 Thread Steve Lime
Does it matter if you're using GD vs. AGG? They have slightly different 
transformation routines... Could
you post a picture of how it's supposed to look?

Steve

>>> On 7/30/2009 at 9:38 AM, in message
<38fffa96be9c224893b3559563614bea12c...@begemsrv01.sodiplan-begem.local>,
"Julien Collaer"  wrote:
> Hello list,
> 
> I'm using Mapserver CGI 5.0.2 (and i'v tried with the 5.4.x too) to render a 
> layer from an Oracle Spatial database (SDO geometries). 
> Everything is working fine except for some geometries : multipolygons with 
> interpretation 2 (vertex connected by arcs).
> 
> Here is an example of such geometry :
> MDSYS.SDO_GEOMETRY(2007,26273,null,MDSYS.SDO_ELEM_INFO_ARRAY(1,1003,2,11,100
> 3,2,21,1003,2),MDSYS.SDO_ORDINATE_ARRAY(83933,89879.010577196,83936.989422804
> ,89883,83933,89886.989422804,83929.010577196,89883,83933,89879.010577196,8334
> 5,89445.010577196,83348.989422804,89449,83345,89452.989422804,83341.010577196
> ,89449,83345,89445.010577196,82793,89490.010577196,82796.989422804,89494,8279
> 3,89497.989422804,82789.010577196,89494,82793,89490.010577196))
> The layer is rendered but no feature are displayed.
> 
> The geomtries are correct (verified with the Oracle MapViewer).
> 
> If someone knows a solution for this case it will be very useful...
> 
> Thanks in advance,
> 
> Julien Collaer

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


Re: [mapserver-users] Mapserver Security [SEC=UNCLASSIFIED]

2009-07-30 Thread Bill Thoen

Roppola, Antti - BRS wrote:

That's because it's not Apache reading the content in the directory.
Apache is running the CGI and the CGI is accessing the directory
directly. The CGI is already "behind" the access policy layer.

As the CGI is usually running as the Apache user, it has the same access
level as the Apache user (i.e. everything that any Apache process can
see).
  
I think I've got this now, but for a newbie to CGI, this is a subtlety 
that's easy to miss. I was so focused on preventing unauthorized  
browser access (because I kept seeing MapServer in a browser context 
only) that I completely forgot that there's plenty of other vectors into 
the data to consider.


And in this case, even protecting the WMS image of the data is 
important. It would be bad news if an attacker could get to the raw 
data, but it would be just as bad if they got a look at maps made from 
it, too. I like the idea of virtual hosts; I think I'll look more into 
that. 


- Bill Thoen


___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] How to enter the projected coordinates in Postgis

2009-07-30 Thread Suman Chatterjee
Hi,

I have created 2 tables in postGIS and POSTGreSQL  - in one, I am
storing the GPS coordinates which are in the form of say lat= 32.4 and
longitude = 72.45 ( which are in degrees) with SRID 2276

And in another I am capturing the user defined points from a projected
map in mapserver. So here the points are having the projected
coordinates like 2479589   7037631.  The projection of the map has
epsg=2276

 

Now I want to find the distance between the GPS points and the user
defined point. For that I require the projected coordinates for both.

So how can I store the projected coordinates of the GPS points in the
table? Is there any function for that?

 

Any help will be great!

 

Thanks

Suman

 


***
This e-mail and any files or attachments transmitted with it contains 
Information that is confidential and privileged. This document may contain 
Protected Health Information (PHI) or other information that is intended only 
for the use of the individual(s) and entity(ies) to whom it is addressed. If 
you are the intended recipient, further disclosures are prohibited without 
proper authorization. If you are not the intended recipient, any disclosure, 
copying, printing, or use of this information is strictly prohibited and 
possibly a violation of federal or state law and regulations. If you have 
received this information in error, please delete it and notify Hamid 
Khaleghipour at 972-450-2868 immediately. Thank you.

***


___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] Impossible to draw SDO Geometries from Oracle when SDO_GTYPE is 2007 and the interpretation is 2 (connectivity by arcs : SDO_ELEM_INFO(1, 1003, 2, [...]) )

2009-07-30 Thread Julien Collaer
Hello list,

I'm using Mapserver CGI 5.0.2 (and i'v tried with the 5.4.x too) to render a 
layer from an Oracle Spatial database (SDO geometries). 
Everything is working fine except for some geometries : multipolygons with 
interpretation 2 (vertex connected by arcs).

Here is an example of such geometry :
MDSYS.SDO_GEOMETRY(2007,26273,null,MDSYS.SDO_ELEM_INFO_ARRAY(1,1003,2,11,1003,2,21,1003,2),MDSYS.SDO_ORDINATE_ARRAY(83933,89879.010577196,83936.989422804,89883,83933,89886.989422804,83929.010577196,89883,83933,89879.010577196,83345,89445.010577196,83348.989422804,89449,83345,89452.989422804,83341.010577196,89449,83345,89445.010577196,82793,89490.010577196,82796.989422804,89494,82793,89497.989422804,82789.010577196,89494,82793,89490.010577196))
The layer is rendered but no feature are displayed.

The geomtries are correct (verified with the Oracle MapViewer).

If someone knows a solution for this case it will be very useful...

Thanks in advance,

Julien Collaer
___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] label SIZE parameter

2009-07-30 Thread Christy Nieman

Good morning,

I was just playing around with the sizes of some labels, and, after 
checking the mapfile documentation, I'm a little confused with the 
results I've seen.  In the documentation it says that SIZE takes an 
integer for truetype fonts, but I was able to specify "SIZE 5.5" which 
did not give the same result as "SIZE 5" (which is what I would have 
expected) or "SIZE 6" with MapServer 5.4.2.  Is this an error in the 
documentation?


Thanks,
Christy
___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


Re: [mapserver-users] Intervalls for EXPRESSION in CLASS object

2009-07-30 Thread Andreas Albarello

On 30.07.2009 11:45, CoFIS Web wrote:


Can I do something like

EXPRESSION ( ([value] = 'all values in 100 intervals')


Nils,

you might want to try something like this using the modulo operator:

EXPRESSION ( ([value] % 100) = 0 )


Best regards,
--

Andreas Albarello
Analysis & SW Development

Territorium Online srl/GmbH
Via Buozzi Str. 12
I 39100 Bolzano/Bozen

Phone:  +39 0471 068611
Fax:+39 0471 068619

email: andreas.albare...@territoriumonline.com
web:   http://www.territoriumonline.com

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


[mapserver-users] Intervalls for EXPRESSION in CLASS object

2009-07-30 Thread CoFIS Web

Hello,
I have a shape file with isohyets and want to draw only certain values 
at different map scales. The larger the scale, the more detail I want.


Currently I use

CLASS
 EXPRESSION ( ([value] = 250) OR ([value] = 500) OR ([value] = 750)...)
 MAXSCALEDENOM 100
 MINSCALEDENOM 50   
..
END

CLASS
 EXPRESSION ( ([value] = 100) OR ([value] = 200) OR ([value] = 300) ...)
 MAXSCALEDENOM 50
 MINSCALEDENOM 25   
..
END

which becomes a pretty long list in large scale class definitions, since 
I got precipitation values up to 3000mm intervals.


Can I do something like

EXPRESSION ( ([value] = 'all values in 100 intervals')

Thanks,
Nils

--
Center for Development Research
Department of Ecology and Resource Management

Walter-Flex-Strasse 3
53113 Bonn (Germany)

Tel.:   +49 (0) 228 - 73-1793
FAX:+49 (0) 228 - 73-1889

E-Mail: cof...@uni-bonn.de

Web:http://www.cofis.info/atlas
http://www.coffee.uni-bonn.de
___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users


RE: [mapserver-users] Mapserver Security [SEC=UNCLASSIFIED]

2009-07-30 Thread Roppola, Antti - BRS
Hi Bill,

That's because it's not Apache reading the content in the directory.
Apache is running the CGI and the CGI is accessing the directory
directly. The CGI is already "behind" the access policy layer.

As the CGI is usually running as the Apache user, it has the same access
level as the Apache user (i.e. everything that any Apache process can
see).

It's not *that* great a problem as you can only interact with content
using methods supported by the Mapserver CGI. For example, "draw".
Mapserver is unlikely to have any methods that will enable wholesale,
unaltered transfer of raw content, using mapserver to access most files
is unlikely to elicit a useful response.

Some ideas:
 - Wrap your CGI and use _established_ tools to test/assert canoncial
paths on inputs
* Within the CGI wrapper i.e. Might Perl's bless/taint be
applicable?
* using server level tools like mnodern equivalents to
"mod_security"?
* Home brew regexp style security tools are probably always
faulty
 - Your CGI wrapper could use sudo to contain different contexts to
different roles/permissions
 - Put sensitive data into a database (like PostGIS) and use RDBMS
roles/permssions (with login details kept out of the map file!)
 - Use security frameworks like SELinux or AppArmor to assert contexts
(example below)

The last option makes it easy to restrict particular CGIs to particular
paths and is probably easiest to manage. Say put a sensitive map ito a
separate VirtualHost with its own CGI and use SELinux or AppArmor to
restrict each VirtualHost to its own content. In a single host system,
you could keep two CGIs and place a context policy on the generic
mapserv.exe that keeps it out of "theDir". Here's a sample snippet from
an AppArmor context that could be applied:
1) Allow that conext to execute object as in a specified
location ("bin/*.sh", think "mapserv.exe")
2) Those executables are only allowed to read .jar files (think
"path/*.map") from another specified location

/data/some/app {
...
  /data/some/app/bin/*.sh rix,
  /data/some/app/common/**.jar r,
...

By no means a "ready rolled" solution, but rather some avenues to
explore.

Cheers,

Antti

-Original Message-

It works fine, but I don't know why it works because it accesses the
mapfile in /theDir/, and /theDir is supposed to be password protected
now by Apache. To make sure that I didn't already have a valid user in
my browser, I shut it down and then tried again. When I ran that wrapper
it picked up its info from the mapfile and then happily drew the map
using the web template file that's also in that "protected" directory. 
It's as if there was no security at all!


--
IMPORTANT - This message has been issued by The Department of Agriculture, 
Fisheries and Forestry (DAFF). The information transmitted is for the use of 
the intended recipient only and may contain sensitive and/or legally privileged 
material. It is your responsibility to check any attachments for viruses and 
defects before opening or sending them on. 

Any reproduction, publication, communication, re-transmission, disclosure, 
dissemination or other use of the information contained in this e-mail by 
persons or entities other than the intended recipient is prohibited. The taking 
of any action in reliance upon this information by persons or entities other 
than the intended recipient is prohibited. If you have received this e-mail in 
error please notify the sender and delete all copies of this transmission 
together with any attachments. If you have received this e-mail as part of a 
valid mailing list and no longer want to receive a message such as this one 
advise the sender by return e-mail accordingly. Only e-mail correspondence 
which includes this footer, has been authorised by DAFF 

--

___
mapserver-users mailing list
mapserver-users@lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/mapserver-users