shrug-l: Restricting access to Map Services
Brian D. Pierce
pierceb@doacs.state.fl.us
Tue, 19 Mar 2002 16:07:02 -0500
This is a multi-part message in MIME format.
--------------A56C078FD39C8B42394AA71F
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
SHRUGers and SHRUGettes:
<p>I am about to try to restrict access to an <b>Intranet </b>map service
and have
<br>read information (from ArcOnline and Manuals) on three different methods.
<p>My setup is: Windows 2000, IIS 5, New Atlantic ServLetExec 4, ArcIMS
3.1,
<p>Method 1 is "Enabling authentication with a file-based ACL" as described
<br>by ESRI. Some users say this has bugs - in that when using the
ActiveX
<br>connector "ASP_Template" allows any user to see and viewing any map
<br>service on the host. This one basically uses a file-based list
of users
<br>and passwords to authenticate through ESRI's servlet.
<p>Method 2 is using NT authentication to restrict access to the
<br>appropriate virtual directory. Is this one too simple to be true?
<p>Method 3 is using the security components of the Servlet engine (New
<br>Atlanta's ServLetExec).
<p>Does anyone have any experience with restricting access to map services?
<p>Does anyone know which method works best? Your opinions, comments and
suggestions are welcomed.
<p>Thanks
<br>Brian</html>
--------------A56C078FD39C8B42394AA71F
Content-Type: text/x-vcard; charset=us-ascii;
name="pierceb.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Brian Pierce
Content-Disposition: attachment;
filename="pierceb.vcf"
begin:vcard
n:Pierce;Brian D.
tel;pager:709-3718
tel;fax:(850) 245-1075
tel;work:(850) 245-1061
x-mozilla-html:FALSE
org:DACS;AGMIC
version:2.1
email;internet:pierceb@doacs.state.fl.us
title:GIS Project Administrator
adr;quoted-printable:;;407 S. Calhoun St.=0D=0AMayo Bldg., Room B-11=0D=0A;Tallahassee;FL;32399-0800;US
fn:Brian D. Pierce
end:vcard
--------------A56C078FD39C8B42394AA71F--