List Info

Thread: Security Of Access to GSA Search




Security Of Access to GSA Search
country flaguser name
United States
2007-07-19 06:10:57
Hi All,

Im in a strange position at the moment. We need to be able
to block
off the GSA search to various users of our network. We can't
do IP
blocking through a firewall as people can move desks so I
was
wondering if there is a way maybe include a file which
performs our
checks within the XSL. I know a few of the commands have
been taken
away from the XSL so not sure if it can be done.

Any ideas?


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "Google Search Appliance" group.
To post to this group, send email to
Google-Search-Appliancegooglegroups.com
To unsubscribe from this group, send email to
Google-Search-Appliance-unsubscribegooglegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Search-Applian
ce?hl=en
-~----------~----~----~----~------~----~------~--~---


Re: Security Of Access to GSA Search
country flaguser name
United States
2007-07-19 06:18:36
How do you plan (or need) to identify the affected users?

Thor.

On Jul 19, 12:10 pm, "dil...googlemail.com"
<dil...googlemail.com>
wrote:
> Hi All,
>
> Im in a strange position at the moment. We need to be
able to block
> off the GSA search to various users of our network. We
can't do IP
> blocking through a firewall as people can move desks so
I was
> wondering if there is a way maybe include a file which
performs our
> checks within the XSL. I know a few of the commands
have been taken
> away from the XSL so not sure if it can be done.
>
> Any ideas?


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "Google Search Appliance" group.
To post to this group, send email to
Google-Search-Appliancegooglegroups.com
To unsubscribe from this group, send email to
Google-Search-Appliance-unsubscribegooglegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Search-Applian
ce?hl=en
-~----------~----~----~----~------~----~------~--~---


Re: Security Of Access to GSA Search
country flaguser name
United States
2007-07-19 13:35:28
You might try going to Administration > System Settings
and enter the
URL of your 404 page.  This will make it look like your GSA
has an
error to anyone trying to access the device directly.

Then you could build an HTML form that submits a search
query to the
GSA.  You could password-protect this page.

This is simply security through obscurity and will not stop
anyone who
knows how to conduct a search using the querystring.

The GSA wasn't really designed for this (or any) kind of
security so
I'm not sure an elegant solution will be easy to implement.

On Jul 19, 7:10 am, "dil...googlemail.com"
<dil...googlemail.com>
wrote:
> Hi All,
>
> Im in a strange position at the moment. We need to be
able to block
> off the GSA search to various users of our network. We
can't do IP
> blocking through a firewall as people can move desks so
I was
> wondering if there is a way maybe include a file which
performs our
> checks within the XSL. I know a few of the commands
have been taken
> away from the XSL so not sure if it can be done.
>
> Any ideas?


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "Google Search Appliance" group.
To post to this group, send email to
Google-Search-Appliancegooglegroups.com
To unsubscribe from this group, send email to
Google-Search-Appliance-unsubscribegooglegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Search-Applian
ce?hl=en
-~----------~----~----~----~------~----~------~--~---


Re: Security Of Access to GSA Search
country flaguser name
United States
2007-07-20 12:50:21
Actually this would work well if you placed the GSA behind a
router or
firewall that only allowed the webserver to connect to it.
We use a
custom web application to perform all of our searches and
format the
results. Users can't get to the GSA directly. Security could
be added
to such an application easily.

Phil.

On Jul 19, 1:35 pm, "7lay...gmail.com"
<7lay...gmail.com> wrote:
> You might try going to Administration > System
Settings and enter the
> URL of your 404 page.  This will make it look like your
GSA has an
> error to anyone trying to access the device directly.
>
> Then you could build an HTML form that submits a search
query to the
> GSA.  You could password-protect this page.
>
> This is simply security through obscurity and will not
stop anyone who
> knows how to conduct a search using the querystring.
>
> The GSA wasn't really designed for this (or any) kind
of security so
> I'm not sure an elegant solution will be easy to
implement.
>
> On Jul 19, 7:10 am, "dil...googlemail.com"
<dil...googlemail.com>
> wrote:
>
> > Hi All,
>
> > Im in a strange position at the moment. We need to
be able to block
> > off the GSA search to various users of our
network. We can't do IP
> > blocking through a firewall as people can move
desks so I was
> > wondering if there is a way maybe include a file
which performs our
> > checks within the XSL. I know a few of the
commands have been taken
> > away from the XSL so not sure if it can be done.
>
> > Any ideas?


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "Google Search Appliance" group.
To post to this group, send email to
Google-Search-Appliancegooglegroups.com
To unsubscribe from this group, send email to
Google-Search-Appliance-unsubscribegooglegroups.com
For more options, visit this group at http://groups.google.com/group/Google-Search-Applian
ce?hl=en
-~----------~----~----~----~------~----~------~--~---


[1-4]

about | contact  Other archives ( Real Estate discussion Medical topics )