[Fwd: [Cartoweb-users] Cartoweb and AUTH]

[Sylvain Pasche]

Just an additional information:

You can also create a plugin dedicated to perform authentication based
on specific credentials. The attached sample uses user and role set 
through http headers. This can't be used with auth plugin at the same
time. This example requires a proxy which sets the http headers,
otherwise any user could use fake credentials.


Le vendredi 17 février 2006 à 17:08 +0100, Arnaud Saint Léger a écrit :
> Hello,
> 
> To define the authentification in Cartoweb : 
>         You have to write into the client_conf/auth.ini : 
>         securityContainer = db
>         
>         dbSecurityDsn = pgsql://user:pwd@host/database
>         
>         dbSecurityQueryUser = "SELECT * FROM user WHERE username='%s'
>         AND password=md5('%s')"
>         dbSecurityQueryRoles = "SELECT roles FROM multi_user_role
>         WHERE username='%s'"
> 
> To send the authentification data by session, you can use the method
> getAuth of Pear/Auth.
> Enclosed an example of file
> 
> Regards
> 
> > 
> > -------- Message original -------- 
> > Sujet: [Cartoweb-users] Cartoweb and AUTH 
> > Date: Fri, 17 Feb 2006 12:52:36 +0100 
> > De: Sébastien PETITEAU <sebastien.petiteau at ago.fr> 
> > Organisation: ATLANTIDE 
> > Pour: cartoweb-users at lists.maptools.org 
> > 
> > Hello 
> > 
> > I have some questions 
> > 
> > I want use the authentification (with DB) with another application. 
> > I have an application which contains cartoweb. The authentification 
> > depends of the main application 
> > I want send to cartoweb, the username, password for security. 
> > 
> > How do I make for this ??? 
> > i don't want use the cartoweb's auth form but I want use the
> > cartoweb's 
> > security. 
> > 
> > if I use the class DBSecurityContainer and the method 
> > CheckUser(username,password) in php, the authentification is made
> > or 
> > it's just a verification? 
> > 
> > Thanks for your help 
> > 
> > Sebastien PETITEAU 
> > 
> > 
> 
> 
> -- 
> Arnaud SAINT LEGER
> Associé - Concepteur SI / SIG
> 
> Camptocamp France SAS
> Savoie Technolac, BP 352
> 73377 Le Bourget du Lac, Cedex
> 
> Tel : 00 33 4 79 44 44 94
> Mail : arnaud.saintleger at camptocamp.com
> http://www.camptocamp.com
> _______________________________________________
> Cartoweb-users mailing list
> Cartoweb-users at lists.maptools.org
> http://lists.maptools.org/mailman/listinfo/cartoweb-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ClientSecProxyAuth.php
Type: application/x-php
Size: 1669 bytes
Desc: not available
Url : http://lists.maptools.org/pipermail/cartoweb-users/attachments/20060217/fc1edf24/ClientSecProxyAuth.bin