Exposing anonymous WS

[Former Member]

Hi,

I would like to expose a webservice using XI

without the need for using user + pswd

How do i do it?

[Former Member]

Hi Udi,

please go thru the link below and see if u have followed the steps mentioned in it while defining the web service. if it still doesn’t help you, please do give a little more detail about the scenario you are doing...

http://help.sap.com/saphelp_erp2004/helpdata/en/31/daa0404dd52b54e10000000a1550b0/content.htm

http://help.sap.com/saphelp_erp2004/helpdata/en/54/048d40e802ce62e10000000a155106/frameset.htm

You can create SOAP Request from WSDL using the following tool.

http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=65a1d4ea-0f7a-41bd-8494-e916e...

You've to expose your outbound message interface as a WSDL which can be used by say EP.

Also go thru the following threads

In any B2B scenario, you're going to have stricter security requirements. XI and other SAP applications in the vast majority of cases reside within the internal network of a company, as I'm sure it does for your company A. It is recommended to have some kind of reverse proxy/web switch hardware/software residing in the DMZ to intercept the external request. Direct requests (especially HTTP) by most, if not all, companies will not be allowed to freely pass to applications within a company's intranet.

SAP has something called the Web Dispatcher that is commonly used for such a purpose. You can find more info on it at the following link:

http://help.sap.com/saphelp_nw04/helpdata/en/42/5cfd3b0e59774ee10000000a114084/frameset.htm

You'll also find some visuals and more security related topics at the following link:

http://help.sap.com/saphelp_nw04/helpdata/en/d9/ef2940cbf2195de10000000a1550b0/frameset.htm

In addition, you'll probably require a more secure transport protocol like HTTPS/SSL as well.

I hope the info helps

Regards,

Abhy

[sam_raju]

Hi Udi,

Refer to the solution proposed in the following thread:

/message/116692#116692 [original link is broken]

Rgds,

Sam Raju

[Former Member]

Hi Sam'

i get an authorization error when trying to open the link.

[sam_raju]

Hi Udi,

okay. then see the content of the post below:

>>>>>>

SDN Post(Question) by Hans Dumbrajs:

Hi!

After we installed SP4 for XI3, the Integration Engine SOAP adapter has started to require authorization. XIAPPLUSER works fine as credentials for the SOAP adapter, and we were also able to crete a new user for soap calls.

Our system administrator has howerver not succeeded in restoring the pre-SP4 setting of anonymous SOAP calls (no authorization at all).

Can someone point us in the right direction for disabling http-authentication for the Integration Engine SOAP Adapter?

Thanks in advance!

-Hans

Response(Solution proposed) to this post by Holger Kunitz

Hi Hans,

You can try the following in a test/dev-system: Extract the SOAP-adapters WAR-file from the corresponding sda. Then extract the deployment-descriptor from the war-file and delete there the related security-constraint, login-config and security-role sections (makes absolutely sense to save the original descriptor beforehand). ZIP the files again with the new deployment descriptor and deploy the SDA via SDM.

Obviously, there seems not to be any mechanism to carry out a similar action via the J2EE Admin.

Best regards, Holger

<<<<<<<<<<

Rgds,

Sam Raju

[Former Member]

thanks!

[sam_raju]

Hi Udi,

No Problem.

Rgds,

Sam Raju