From: "NAKAMURA, Hiroshi" <nahi@...>
Date: 2002-10-23T11:49:40+09:00
Subject: Re: XMLRPC and IP authentication

Hi,

> From: Daniel Berger
> Sent: Wednesday, October 23, 2002 5:58 AM

> I want to implement some very basic security for an XMLRPC server.  My
> first filter was going to be to restrict access by IP 
> address.  Is there
> a way to snag the client's IP from an XMLRPC::Server object 
> from wthin a
> service hook?  I listed the object methods, but nothing stood 
> out at me.

GServer(which is a base of HttpServer which is a base
of XMLRPC::*Servers) does not have functionalities about
authentication/authorization (same as standaloneServer
of SOAP4R, BTW).

Can you run your server with XMLRPC::CGIServer on WEBrick,
Apache or some httpd?  Those httpds have IP-based/BasicAuth
authentication/authorization functionalities.

Doubt me... WEBrick might not have IP-based restriction
function by default.

> If not, I'd like to see that functionality added.

MNeumann: how do you think?

Regards,
// NaHi