Release 10.1A: OpenEdge Application Server:
Administration

Enabling authentication for Web services

When you install the WSA, you can choose to enable security. In this case, WSA security is preset so that users who try to access Web service applications are not authenticated. This authentication can be enabled.

To enable authentication for Web services:

Choose an authorization role name to identify users who get access to all of a WSA instance’s Web service applications.
Using a text editor, edit the WSA instance’s web.xml file as follows:
Uncomment or add a <security-constraint> element for the URL path for Web service applications. The security-constraint might appear as follows:

<!--   <security-constraint>     <web-resource-collection>       <url-pattern>/wsa1/</url-pattern>     </web-resource-collection>   </security-constraint> -->

To the <security-constraint> element, add a <role-name> element to hold the authorization role name you chose. A <role-name> element has the following syntax:

Syntax

<auth-constraint> <role-name>name</role-name> </auth-constraint>

For example, after you add the role names webservicesrole1 and webservicesrole2, the <security-constraint> element might appear as follows:

<security-constraint>   <web-resource-collection>     <url-pattern>/wsa1/</url-pattern>       <auth-constraint>         <role-name>webservicesrole1</role-name>         <role-name>webservicesrole2</role-name>       </auth-constraint>   </web-resource-collection> </security-constraint>

Modify the JSE to add your user’s accounts and grant them membership to the chosen role.
Modify the WSA instance’s properties to enable authorization for Web services. Use one of the following techniques:
If the WSA instance is local (the WSA resides on the AdminServer machine), using Progress Explorer, select the WSA instance, right-click, and choose Properties. Select Security to bring up the Security panel. In the WSA instance’s Security panel, enable authentication for Web services.
If the WSA instance is remote (the WSA instance does not reside on the AdminServer machine), use a text editor.
In the ubroker.properties file, in the properties for the WSA instance, set appAuth to 1 (one). The possible values for appAuth are listed in Table 7–7.

Table 7–7: Setting the appAuth property

Set appAuth to ...	To ...
1 (one)	Enable authentication for users of Web services.
0 (zero)	Disable authentication for users of Web services.

For example:

[WSA] . . . appAuth=0