Re: [Geoserver-users] Secure Layer Groups

2010-12-15 Thread Arnaud Vandecasteele
David, I already set the mode to CHALLENGE in the user.properties. It was set before the tests. I will retry tomorrow or in the end of the week with OpenJump as Rahkonen Jukka suggest me. Thank you both for your help Arnaud On Mon, Dec 13, 2010 at 7:25 PM, David Winslow wrote: > Some clients

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread Rahkonen Jukka
[mailto:dwins...@opengeo.org] Lähetetty: ma 13.12.2010 20:25 Vastaanottaja: Arnaud Vandecasteele Kopio: geoserver-users@lists.sourceforge.net Aihe: Re: [Geoserver-users] Secure Layer Groups Some clients (in fact, all I've tried, aside from curl and gsconfig.py where I had to put in some custom cod

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread David Winslow
Some clients (in fact, all I've tried, aside from curl and gsconfig.py where I had to put in some custom code for it) will not send user/passwd information unless the server requests it (by returning a 401 Login Required response to the initial HTTP request.) By default, GeoServer will not send th

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread Arnaud Vandecasteele
Just to be sure about the WMS restriction I've made a quick test : - 2 layers can be accessed by anybody - 2 others are protected by a password (Data Security) When I try to read (in WMS) them from QGIS the only one I can see are the none restricted layers. The others doesn't appear in the list e

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread Arnaud Vandecasteele
> you could > look into some security system which works "a layer above" the client, such > as putting geoserver behind a VPN or an HTTP proxy which restricts access > based on IP address, etc. I think I will do that I haven't got another option. Thank you David and Ronoel for your help. Arnaud

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread David Winslow
If the client does not support authentication, then it will be complicated to provide restricted WMS. If you can't improve the client situation (perhaps by providing a web application using OpenLayers, or using uDig which is free and works with GeoServer in the Challenge mode) then you could look

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread Arnaud Vandecasteele
David, Thank you for your answer. I will try to explain a little bit more my problems. Maybe you will find (I hope so) a solution. For one of our project I need to secure my WMS. So I create a rule where only the person with a login and a password can get the tiles. But for one of our partners I

Re: [Geoserver-users] Secure Layer Groups

2010-12-13 Thread David Winslow
LayerGroups in geoserver are a very thin construct; for most purposes a layergroup is equivalent to listing out the layer names it contains in your wms request. I don't think the security system provides a mechanism for restricting access to layergroups directly (because in a sense they don't real

[Geoserver-users] Secure Layer Groups

2010-12-13 Thread Arnaud Vandecasteele
Hi all, As I understand, GeoServer can secure a service (WMS, WFS) and/or the layers. But I would like to know if it's possible to secure a layer groups depending on a service. For example I have different layer groups : 1- layerGroup-Open 2- LayerGroup-Secure I would like that the first one can b