CWP XML Authentication

[laurentades]

All,

 

Getting my hands dirty with CWP XML for the first time. Running FMS13

 

What i want in the end to for FMGo to exchange data with FMS13 via xml rather than having to open a FileMaker session as such on FMS13 from FMGo : very shaky internet connection on both ends...

 

So i'm finding that activating cwp xml is not so terrible in the end and even getting to like the way it works. The only thing i cant get to understand is authentication:

 

>tests from a web browser accessing a URL in the vein of http://someHost/fmi/xml/fmresultset.xml?-db=someDB_db&-lay=myLayout&-findallworks okwhen granting xml permissions to guest account

 

> expectably, disabling permissions on guest account and granting on some  named users (or directory based group) prompts Basic HTTP Authentication to bring the usual login dialog up; Works fine when inputing adequate credentials: the xml feed displays as it should.

 

> Now, what if the client was not a manned web browser but a scripted application ? I have tried a very basic script in FileMaker Pro to "Insert from URL" the very same feed: if Guest account is xml enabled, it works a snap.. If guest is xml disabled and named acocunt is xml enabled, then i get an error : 1631| Connection failed.

 

So..... How the heck does one specify credentials along to open some kind of a secured session, as - of course - leaving the ******* guest account open for free browsing is just not an option...

 

Is it feasible or is the feature simply limited and I should turn to paid products such as restFM or 360Works-MirrorSync ?

 

Many thanks ahead!

[Bob Minteer]

Ok, so you've gotten the hard part out of the way.  You will just slap yourself in the head and say, "Aw man... I should've thought of THAT".

 

Let's say I add user permissions to my database (directly or via Active Directory or Open Directory).   

 

I will create a privilege set (let's call it 'webprivs') specifically for accessing CWP stuff, making certain that that includes XML extended privs (fmxml).

 

Then I will create a Filemaker user account that uses the new 'webprivs' priviliege set.   You may use a locally create user/password or if you are externally authenticating to the Active Directory or Open Directory, this will be the "Security Group" name (for AD... I've never used OD).

 

If the user account (or externally authenticated group name) is named "webacct", then my URI will look something like:

http://webacct:webpass@myfmserver.com/fmi/xml/FMPXMLRESULT.xml?-db=mydatabase&-lay=mySpecialLayout&personID.op=eq&personID=2690

or

 

http://webacct:webpass@192.168.123.101/fmi/xml/FMPXMLRESULT.xml?-db=products&-lay=sales&-findall

 

 

Does that make sense ?

 

regards...

 

Bob Minteer

[Bob Minteer]

I almost forgot to mention that you may find SeedCode's GoZync of interest.  

 

http://www.seedcode.com/filemaker-sync-gozync/

 

It is a well done, well documented means of creating and synchronizing tables (or subsets thereof) intelligently between mobile devices and a Filemaker Server.    

 

There are cost per seat amounts to consider, but it works well for users who may venture in and out of cellular data coverage areas.

[Wim Decorte]

  On 12/15/2014 at 7:29 PM, Bob Minteer said:

http://webacct:webpass@

 

With the obvious caveat that you are passing credentials in clear-text... you may not want to do that.

[laurentades]

Hi thanks for your replies,

 

@bob: tried that but failed. Surely i must have done somehting wrong along the line. Will try again as this should work.

@wim: yes totally aware of that. Will see how i can work around that...

 

Thanks!