The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction

learn more… | top users | synonyms

1
vote
1answer
90 views

Arcgis 10.2.2 soap API Error {401 - Unauthorized}

I'm trying to consume secured map service via arcgis 10.2.2 soap api. I've configured my web adapter to negotiate windows domain security and everything looks fine when I check over the rest api. ...
5
votes
1answer
382 views

Create custom Authentication filter in GeoServer 2.3.0

Context In my current project, I've the requirement to validate that requests coming to GeoServer (2.3.0) are allowed. The project holds those facts: the GS client cannot provide the principal ...
0
votes
0answers
26 views

Locked out of all instances of Geoserver due to password problem

I beginning to deploy Geoserver (2.6.1), Tomcat 7 on Windows Server 2008 and everything was going just fine until I changed the master password but I now find that I am completely locked out of my ...
1
vote
1answer
27 views

Connecting FME Server to Active Directory - Failed to create credential

I'm trying to use FME Server's Active Directory integration to authenticate users. The connection works but fails soon after (and single sign on fails). The account has permission to log on as a ...
0
votes
2answers
68 views

Non-standard WMS parameters not sent in GetMap requests via QGIS?

I am coding a python plugin to QGIS that connects to the UK National Biodiversity Network (NBN) Web Mapping Service (WMS). In general, I don't have any problems doing this with the QgsRasterLayer API ...
2
votes
1answer
41 views

How do I change geoserver admin password?

I was wondering how can change the default password of geoserver admin from geoserver to something else? I have tried two different things, but none worked. First thing I tried following the online ...
0
votes
1answer
22 views

Locking feature service without affecting its map service

Is there a way to lock a feature service published by ArcGIS Server. For example: When I publish a service with feature access capability, I get two URLs; one for a map service, and the other for the ...
1
vote
1answer
271 views

Saved maps in geoexplorer (geoserver layer security)

I am a bit confused with the save maps function in geoexplorer. I have a vps server with the opengeo suite 3.1, I added a table to the vps local postgis db server to the geoserver.public database. I ...
3
votes
2answers
64 views

is OpenLayers proxy access secured?

I have secured my layers on Geoserver. Users can not access my layers without authenticated username and password. Now I created a proxy script with PHP. Proxy script sends request with username ...
0
votes
0answers
43 views

Geoserver secure layer assess issue via PHP proxy

I have a PHP script that sends request to geoserver layers. My layers are like this: topp:layer_unsecured topp:layer_secured layer_unsecured is unsecured layer and layer_secured is secured. I ...
0
votes
2answers
209 views

Web based spatial data editor

Is possible to set up web access to GIS data such that a user could login and see the collected data and be allowed to suggest/draw changes but not be able to edit the data files? My idea is that ...
5
votes
1answer
36 views

Is it possible to set the permissions Geoserver creates new directories with?

I'm trying to automate the process of pushing from a server to Github as a way of tracking Geoserver changes, and pulling from Github as a way of deploying new work. The push side works fine, but if I ...
1
vote
1answer
33 views

geoserver's geowebcache watermark setting

anyone here has used watermarking in geoserver? I have successfully set watermark to my WMS layer, but in my OpenLayers 3 project, I use 'Tiled': true WMS setting and my GeoWebCache doesn't display ...
0
votes
0answers
46 views

Accessing secure Geoserver layer with username password

I created Users, Groups and Roles in geoserver. And I set the user roles for my workspace. user1 can read user2 can write And I want to access my layers as anonymous like this: ...
6
votes
1answer
135 views

Best practice for managing content for multiple users within ArcGIS Collector App

I have a hundreds of people collecting data. Each user has an ArcGIS Online login. I want to be able to filter content visible in the ArcGIS Collector App based on the logged in user, but don't want ...
0
votes
1answer
84 views

Current logged on user does not have administrative access to Web server of ArcGIS for Server?

I am using ArcGIS Server Manager to create Web Applications. I cannot access the applications and the error is: The current logged on user does not have administrative access to the Web server. ...
19
votes
4answers
4k views

How to put GeoServer layers behind authentication?

I want to publish map layers using OpenLayers and GeoServer. While this is easy enough to set up, I'm a bit lost when it comes to authentication possibilities. What I want is to create different users ...
0
votes
1answer
44 views

Geoserver security and application security separation

I am using geoserver that publises WMS, WFS services to clients. I am using geoserver services in an OpenLayers application. My application will requiere username and password authentication. 1 - ...
0
votes
0answers
61 views

Cause of invalid token error from ArcGIS Server?

I'm using ArcGIS to display map on my ASP.net web forms applicaion.Now in Development environment i generate token using this form that come with the ArcGIS Now i choose "Request IP" when i ...
0
votes
0answers
40 views

GeoExplorer secure using https

I am using Geoserver 2.5.2 and geoexplorer. I need secure authentication in GeoExplorer. As I configure https? Thanks
2
votes
1answer
47 views

Posting UserCredentials with AsyncTask of ArcGIS for Android?

My problem is that I want to get JSON data from ArcGIS for Server For example: http://xxxx.com/arcgis/rest/services/Map/MapServer/legend?f=pjson I can get and read JSON data from this URL but if ...
1
vote
0answers
39 views

ArcGIS Server - Secured Services

Is there any way to tell, via the SOAP or REST APIs, if an ArcGIS Server map service requires an authenticated user? I have set an application to use a token service for accessing secured map ...
0
votes
0answers
32 views

How to configure a write only layer on Geoserver?

This is probably a wrong way of doing it, but I was exploring this option only because I do not know how to implement the right solution. We have a layer to which features are added using WFS-T. We ...
0
votes
0answers
61 views

Return features based on users credentials Geoserver WFS

We are using LDAP based authentication with geoserver which is connected to a PostGIS database. Users insert rows (features) into the table (layer) using WFS-T after authentication. Now when users ...
2
votes
1answer
50 views

Identifying user triggering ArcGIS Server invalid username or password error

Can anyone tell me if there is a way to identify the culprit of an "Invalid Username or Password" error in ArcGIS Server logs? For source, it just says 'Admin' for source, and nothing for User. Is ...
0
votes
1answer
91 views

Upgrading to ArcGIS 10.2 for Server and security vulnerability?

I have ArcGIS 10.1 Installed on my CentOS server and I have also installed "ArcGIS-101SP1-S-SSEC-Patch-lx" security patch. Do I need to upgrade ArcGIS for Server to 10.2? If I don't install the ...
1
vote
1answer
115 views

(MapServer Osm) Map Accessibility

I have a tile server (MapCache) with a personalized map. For client side's rendering I use OpenLayers. I'd like my personalized cache to be accessible only on my web site, i.e. I don't want another ...
1
vote
2answers
356 views

Does ArcGIS for Server support others using own credentials (Single Sign On) for Federated Services?

I have a number of secured ArcGIS 10.2 for Server (AGS) services which a number of other companies use as well. At the moment we have created domain accounts on our domain which they need to access ...
1
vote
0answers
42 views

Consuming secured ArcGIS for Server services in Google Earth?

I am able to easily consume unsecured ArcGIS for Server (AGS) services in Google Earth (GE), but not secured services. I have created a KML Link in AGS Manager with no luck, and added the service ...
1
vote
1answer
67 views

HTTPS and working with non-secure services - ESRI jsAPI

Situation: I am currently working with an app that is required to be delivered over HTTPS because of an organizational security requirement. I currently do not have access to this servers ...
1
vote
0answers
100 views

Implement security to qGIS Server (for windows)

I have few map services running on QGIS Server(v 2.2.X on Windows 7 32 bit) and anyone can connect or access those services (WMS & WFS). Is there any way to implement security in QGIS Server? So ...
30
votes
11answers
2k views

USA geocoding that's anonymous, good, and free - does it exist?

For a one-time project, I need to geocode a few thousand addresses. In the past I've used various online resources for this kind of thing (e.g., Google Maps API), but the addresses I'm working with ...
3
votes
1answer
2k views

Where is connection file used to connect ArcMap to ArcSDE?

In ArcMap 10.0, how do I find where the connection file is that is being used to connect to ArcSDE 10 on Sql Server 2008? Some non administrative users are hooking up to SDE as the user 'sde' with db ...
4
votes
1answer
175 views

Data Security for Geoserver - Users errantly seeing Workspaces not assigned to them

I'm having trouble with Data Security in my Geoserver 2.5 application. Let me preface my situation. I am using Geoexplorer composer which is making GeoServer API calls through ows and wms. I have ...
3
votes
0answers
139 views

ArcGIS Server 10.1 Integrated Windows Authentication with Token based

In ArcGIS Server 10.1 on Windows 7 and IIS, if wanting to secure services within an Intranet with Active Directory is that Integrated Windows Authentication ...
0
votes
0answers
28 views

Credential Dialog, disabling default Realm information messages disclosing password

I'm using the QgsCredentialDialog for determining user access to the database. When a user is failing to log in correctly the log in credentials are shown in the dialog (Fig. 1). (success, uname, ...
1
vote
1answer
217 views

Secure credentials for scheduled python script targeting ArcSDE 10.1 on AWS

I have a python script that will be used as a scheduled task. Our dba team is wanting the credentials to be as secure as possible. I would say that using the os security system as far as locking ...
2
votes
2answers
343 views

Active Directory AND integrated user store on ArcGIS Server 10.2

We have one License for ArcGIS Server 10.2. We need to publish Services for internal use with Active Directory authentication and for external use (internet) with username/password authentication. ...
1
vote
4answers
130 views

What GIS applications and services have been affected by the Heartbleed vulnerability?

Heartbleed is the name given to a recent, very severe security vulnerability in the OpenSSL library, used in a large number of websites and applications. It is being called one of the worst computer ...
4
votes
2answers
492 views

Data security for GIS Data (Esri shape files,Auto-cad files)

This is regarding security for GIS Data (in Esri & open source) (Esri shape files,Auto-cad files etc.) Does anyone know how to assign a password to or encrypt shapefiles OR CAD Data? I have ...
18
votes
10answers
755 views

Would you consider online geocoding a breach of privacy?

Suppose I have a bunch of addresses of individuals participating in a certain study (most likely - health related, where privacy and ethical considerations are always important issues). Nowadays, ...
2
votes
2answers
240 views

How to ensure that only my application has access to ArcGIS Server services

I'm making a web map based on the ArcGIS Server JS API. How can I ensure that users must use my front-end to access the ArcGIS Server layers? That is, I want anyone visiting MyDomain.com/index.html ...
1
vote
1answer
275 views

How to prevent data scraping in a web map?

I would like to use Leaflet or a Leaflet-like mobile-friendly library to produce a web map of points of interest, but I am concerned with how easy it is to just scrape the data from the javascript. Is ...
1
vote
1answer
109 views

GeoServer; Blocking GeoServer-users' access to specific folders on host drives

Is it possible to adjust GeoServer in a way to block GeoServer-users' access to specific folders in the data directory? (I mean the actual folders on the computer drive where the shapefiles are ...
0
votes
1answer
145 views

Trouble implementing Key authentication in geoserver

I'm trying to implement key authentication in geoserver 2.3.3. The steps I followed are: Added the authkey plugin Created the authkey filter Secured the layers by assigning workspaces to different ...
3
votes
2answers
1k views

How to share a hosted feature service with an application on ArcGIS Online?

According to the ESRI REST API documentation on authentication, a registered application can log in to AGOL via an App ID and App Secret and will then have access to the data that has been shared with ...
2
votes
0answers
34 views

Protect our WMS map tiles to only accessible from our site [duplicate]

We are using geoserver (2.3) to serve WMS map tiles generated from mapping data we licenced. We use leaflet on the client side to show the map (part of a ruby on rails site running on heroku). Because ...
4
votes
1answer
224 views

about token based authentication security

I am reading the authenticated services with token. I understand that a user have to get a token to using arcgis services. Example: https://domain.com/arcgis/rest/services/myMap/MapServer is my ...
2
votes
1answer
135 views

QGIS and SpatiaLite database: Setting user access permissions

SpatiaLite databases seems to match all my desires to store GIS layers and table. But an important question is: is it possible to limit writing to only one user ? If yes, what is the way to do it? I ...
2
votes
0answers
74 views

ArcGIS Server Security related justification

We just installed ArcGIS server(JAVA) and the network security has a few policy that requires us to provide justification on our setting. Does anyone have any reference document for the following ...