Questions tagged [security]
The processes and mechanisms by which computer-based equipment, information and services are protected from unintended or unauthorized access, change or destruction
143
questions
0
votes
0answers
37 views
Allowing ArcGIS Server accessing our Geodatabase Enterprise over the web
In my organization there is an installation of ArcGIS Server that is linked with an Enterprise geodatabase (PostgreSQL) in a DMZ for editing only over the web.
However, we have another installation ...
0
votes
1answer
109 views
Data security under WebGIS by QGIS [closed]
We would like to offer our Client a webGIS solution for showing/Monitoring their data. Based on my Knowledge WebGIS by ESRI would be helpful and provide the user with the Login Information and it is ...
1
vote
0answers
36 views
Is there any open source implementation of GeoXACML based access control mechanism for OGC Web Services?
I am looking for an open source implementation of GeoXACML PEP, PDP to provide access control to my OGC web services. I have already set-up SAML based authentication. I found a non-opensource ...
1
vote
1answer
94 views
Unauthenticated sensitive Information Disclosure - ArcGIS REST services
Recently a security audit has been done on our servers and applications which has ArcGIS enterprise installed on it.
Our Architecture setup :
We have ArcGIS installed on the server, ArcGIS exposes ...
1
vote
0answers
117 views
Is there an advantage to installing an arcgis web adaptor in the DMZ
I'm trying to architect a new ArcGIS Portal site. I see ESRI has instructions on configuring a reverse proxy to work with a web adapter installed on the network. However I have also seen sources ...
0
votes
1answer
415 views
Getting a token access to feature layer using Postman and Python
I am trying to query a feature server using postman as ESRI'S documentation:
https://developers.arcgis.com/labs/rest/get-an-access-token/
I have succesfully added the Authorization to the body of the ...
1
vote
1answer
65 views
Stop ArcGIS 'Geodatabase Adminstration' Reporting Connection as 'DBO' Instead of My Username?
We are running ArcGIS 10.5.1 and MS SQL Server, and using an SDE connection file which is configured to use 'Operating System' credentials.
When most users connect, the 'Geodatabase Administration' ...
1
vote
1answer
87 views
Is it possible to migrate users from one ArcGIS Server instance to different one
We are planning to consolidate 2 ArcGIS Server instances, by migrating all services and users from one into the other.
So users are stored in json files:
{
"username": "foo",
"password": "...
0
votes
1answer
322 views
Security of GeoServer WMS layer URL
How can I secure my WMS layer URL on GeoServer as whenever a WMS layer is loaded from GeoServer than the layer URL can be easily seen in the browser console?
1
vote
0answers
109 views
Securing one single WMS layer on GeoServer
My aim is to secure one specific layer (ex. topp:states) with username and password.
I tried a couple of combinations in the layer.properties file.
*.*.r=*
*.*.w=GROUP_ADMIN,ADMIN
topp.states.r=...
12
votes
3answers
1k views
Is licensed file geodatabase really secure?
I am planning to deliver our geo data in Licensed File Geodatabase format. This option was quite impressive as customer can have good look of the data with limitation and expiry date before purchasing....
2
votes
1answer
146 views
Geoserver JDBC User Group Services Problem
I use the Geoserver 2.11.4 version in Windows.I am adding the JDBC service to the PostgreSQL database using JDBC Users and Group Services. Next, I add a Provider for JDBC that I created using the JDBC ...
0
votes
1answer
28 views
Enabling service sharing in ArcGis Online?
I am an admin for my organization. I enabled both Allow Anonymous Access and Member can share content publicly under the security panel. I am trying to connect a webservice we host that is in an ...
1
vote
0answers
97 views
How can I block WMTS GetCapabilities Link
I want to block to below link like WMS services.
http://localhost:8080/geoserver/gwc/service/wmts?REQUEST=GetCapabilities
In services, WMS method's has "GetCapabilities" and selected roles only "...
1
vote
1answer
1k views
openlayers 4 method forEachLayerAtPixel() throws SecurityError: The operation is insecure
Working with GeoExt 3.1.0, ExtJS 6.2.0 and Open Layers 4.4.1.
I am trying to select a layer on my map with the singleclick event so I can use layer.getSource().getGetFeatureInfoUrl and display the ...
2
votes
1answer
253 views
Configuring security for WFS layer
We are using GeoServer 2.8, PostgreSQL 9.6 & QGIS 2.16 on our side. We have certain WFS layers.
As per documentation disabled Anonymous WFS access and looking more settings for Web part.
However ...
2
votes
0answers
220 views
Restrict access to geoserver's web administration interface [closed]
I am a bit worried because the web administration interface for my geoserver is open to everybody. Of course there is a password set, but I wonder if it is reasonable to block access to the padel from ...
2
votes
0answers
81 views
Boundless Suite - Composer Security Permissions [closed]
I’m having trouble getting users-roles-data access rules correctly configured in the Boundless Suite 4.9.1. The issue appears to be with Composer, not Geoserver.
BLUF: I want 2 separate editors for ...
3
votes
1answer
505 views
Adding a security layer to my tile server [closed]
I have a tile server (apache2 + mod_tile serving OpenStreetMap data) that I'm going to use via Leaflet. Everything's working fine but before putting this public, I have a big concern about the ...
0
votes
1answer
645 views
How to Access Secured ArcGIS Online Services from a Custom JS Web app?
I have some Layers Hosted on my company's ArcGIS Online Account. I want to make a Custom WebMapping Application hosted on our public server, which General Public can use without Logging in.
I'm ...
0
votes
1answer
127 views
Setting SSL Cipher Suites in Portal Admin
I am trying to update the SSL cipher suites (to be in compliance with my org security requirements) at '/portal/portaladmin/security/sslCertificates/update'
according to this page
I am getting: ...
1
vote
0answers
459 views
Password protected WMS in Openlayers 4
I would like to use OpenLayers to access a Wms, which is protected by a password. Unfortunately, I find no solution to this problem. My problem is in particular that I want to prevent that password ...
4
votes
1answer
243 views
Parametrized queries for ArcGis?
Since our ArcGis applications are developed as desktop and as server applications, I'm looking for a way create our SQL-queries in a safe way. The state of the art to mitigate SQL-injection is, to use ...
1
vote
1answer
204 views
Geoserver/Geofence - Trigger Authentication
Geoserver Catalog MIXED mode in Data Security section is perfect for my purposes since I want to trigger an alert for authentication whenever a specific layer is requested.
Since I need to create ...
2
votes
1answer
825 views
Openlayers 3 getting 401 error from geoserver with secured layers
I have an OL3 webmap that is attempting to access services from Geoserver that is running on a server on our internal network that uses LDAP logins using windows credentials. I found this link (...
33
votes
4answers
29k views
Windows security warning (ActiveX) when clicking into fields in ArcToolbox tool?
I have been running ArcGIS 10.5 on my PC (Windows 10 Home) since December with no issues. This past week I have started to get ActiveX Security Warnings when I click into a parameter field in any ...
2
votes
1answer
293 views
Disabling access to ArcGIS Server Manager externally?
The background of my server
I installed the ArcGIS server 10.3.1 (No Web Adaptor installed)
I have Windows 2012 Server x64 with SQL Server 2012 R2.
I'm also using IIS 8 as a web server on the same ...
0
votes
1answer
181 views
Geoserver layers access
I need to change the layer visibility for users in my application. Layers are served by OL 3 by a wms/wfs request. The problem is that when I change the accessibility for users, banning someone to see ...
2
votes
1answer
241 views
Is it recommended to change Geoserver admin username?
The docs and a bunch of other questions on here are circulated around changing the default password for admin on GeoServer. I know it's highly recommended to change the default password for the admin ...
8
votes
2answers
822 views
Kaspersky Dangerous Object when installing QGIS 2.18
When I install QGIS 2.14 and 2.18, Kaspersky gives me a Dangerous Object message. Below is a screen shot of the quarantine.
Is this something I need to worry about?
1
vote
0answers
98 views
Keeping properties secure within mapbox-gl
Simply put, how could one develop a mapbox-gl application where the properties are secured ?
For example, take a look at this simple mapbox-gl map with properties:
http://jsbin.com/hovawa/edit?...
1
vote
0answers
361 views
ArcGIS Server getToken Encrypted Password with Python
I originally posted this in the geonet, but unfortunately got crickets.
I'd like to fetch an ArcGIS Server token with a python web service and an encrypted password. I have it working nicely with ...
2
votes
0answers
293 views
GeoServer 2.7.4 admin/geoserver password remains the same [closed]
This solution presented here: How do I change geoserver admin password? doesn't work.
I have GeoServer 2.7.4 up and running, I went into the admin pane/ users, changed the default password, still no ...
1
vote
1answer
708 views
Kaspersky Problem when opening ArcMap
It seems as if Desktop 10.4 is not compatible with Kaspersky Endpoint Security 10: Whenever I want to open a saved mxd (or the application itself) the loading time is increased from the normal 10 to ...
1
vote
2answers
869 views
how secure is data on qgis? [closed]
What is the safety guarantee using the QGIS platform for data storage?
I want no data loss and easy access to data when stored. Can passwords be used to safeguard data and how do I give permissions to ...
1
vote
0answers
92 views
Locking shapefiles from editing by ArcGIS for Desktop? [duplicate]
How we can lock or protect a shapefile from editing in arcgis?
I want another person to be able to view the data/attributes in the shapefile, but don't want them to be able to change or edit the data....
1
vote
1answer
156 views
How to add more allowed values to the Headers of Geoserver
I am aware that GeoServer comes with the feature of 'Configuring HTTP Header Proxy Authentication'. However, I only understand how to customize the 'Header attribute', but the not the 'Header value'.
...
1
vote
0answers
119 views
GeoFence: How to secure its REST API?
GeoFence is securing GeoServer quite nicely, but I can't find how to secure the GeoFence REST API. I've been able to access the REST API without any authentication.
0
votes
1answer
29 views
ArcGIS API for Silverlight & Microsoft Active Directory Security
I am trying to get a Silverlight app working with an Esri map service, secured with Active Directory authentication.
I found an example online of how to get the app working when using User Store ...
4
votes
1answer
923 views
Geoserver authkey configuration question
I'm running geoserver 2.8.0 in tomcat7 on Ubuntu 14.04.
Could anybody help me with the security configuration?
I want to serve WMS and WFS from a specific workspace using authorization based on a ...
1
vote
0answers
128 views
Is disabling CORS on map tiles service security risk?
I would like to know what security issues or security risk would prevent disabling Cross-Origin Resource Sharing (CORS) on map tiles service.
Most of public tiles services, such OSM, Google, Bing or ...
2
votes
1answer
2k views
Access secured WMS server in Leaflet?
I browsed regarding this question and I couldn't find any better solution. This link has some information for OpenLayers but not for Leaflet.
How do I access a secured WMS via Leaflet in with ...
3
votes
5answers
195 views
Restricting Access to a Webapp
I have created a Webapp with sensitive information that I would like to password protect. Is this at all possible? I know you can keep it private within your ESRI Organization but I would like to ...
2
votes
0answers
25 views
Can Geoserver pass visibility information to Accumulo
I have created a plug-in which allows my Geoserver to retrieve data from an Accumulo datastore. I want to enable the visibility cell in Accumulo to only return data based on information that the ...
1
vote
0answers
204 views
How to parameterize query sent with arcpy.ArcSDESQLExecute class [closed]
I have been developing a geoprocessor which takes user inputs as strings to develop a dynamic sql statment sent to MSSS from an ArcSDESQLExecute class. The app will only allow for controlled input, ...
3
votes
0answers
1k views
How to create services with session tokens in geoserver?
I have a multi-tenant web mapping application running on ArcGIS server. I am trying to replace with geoserver. Identity of the users for tenants are maintained through another identity api. After ...
3
votes
2answers
406 views
Web Service level IP restriction with ESRI Web Adaptors?
In order to restrict service usage when sharing a REST endpoint I'm looking for a way to control access of service based on an IP range with the ESRI web adapter. I know that this can be done with a ...
2
votes
1answer
788 views
ArcGIS Server 'HTTP and HTTPS' security switching back to HTTP on reboot
I have an Amazon EC2 instance running ArcGIS server 10.3.1. It has been running with security set https. I recently had to change security to mixed mode http and https. Now when the server reboots ...
3
votes
1answer
179 views
ESRI add-in not installed automatically after build (locked-down environment)
We are using Microsoft Visual Studio 2010 to compile ESRI ArcMap 10.0 add-ins. Generally it works without problems. But we have some PC with very high security policies. For example they have (beside ...
4
votes
0answers
1k views
QGIS Server WFS/WMS user and pass authentication
I configured a QGIS project as follows:
As you can see, QGIS Server is now serving two layers using WFS or WMS service. These two layers don't have the user/pass parameters saved in their layer ...
