SOAP Sender ADAPTER 401 No Authorisation

[Former Member]

Hi all,

we want to make a PUBLIC webservice on our XI system. The problem is that we always need to give credentials when we do a post (XI username/password).

We don't want that, we've read info on SAP concerning this issue (SAP note 856597):

<i>The user authentication of the SOAP adapter is not part of the SOAP adapter but of the web container of the J2EE engine. The default authentication setting is defined in the web.xml descriptor file of the SOAP dapter web application. This setting may be modified from Visual Administrator with some restriction. Please refer to the security documentation for the J2EE engine.</i>

Does anyone of you knows how we can make our Web service a PUBLIC web service (without username/password credentials)...

TIA

[former_member109058]

Hi,

Is there anybody know how to do

set up a user id for this Web Service when you generate the WSDL in the Integration Builder.

Many thanks,

[bhavesh_kantilal]

Peter,

You can also post this question on WAS forum..

Regards,

Bhavesh

[Former Member]

Hi Bhavesh,

posted it on WAS forum but they also don't seem to know.

Regards,

Peter

[bhavesh_kantilal]

Hi Peter ,

I wish I knew..!! Lets hope somebody on XI forum is able to help you..!!

Regards,

Bhavesh

[Former Member]

Hi,

1. View the web.xml file which can be sourced from

/usr/sap/SXP/DVEB***/j2ee/cluster/server0/apps/sap.com/com.sap.aii.af.soapadapter/servlet_jsp/XISOAPAdapter/root/WEB-INF.

At the end of this file you will see this section :

- <!-- login-config

-->

- <login-config>

<auth-method>BASIC</auth-method>

<realm-name>XISOAPApps</realm-name>

</login-config>

I would recommend this remains the same in the very least as SAP do not recommend turning off authentication altogether.

To get authentication working, set up a user id for this Web Service when you generate the WSDL in the Integration Builder.

Then when people call your web service it will have this format :

http://username:password@ then followed by the normal URL information expected by the SOAP adapter.

Does this help at all ?

Cheers

Colin.

[Former Member]

And the user MUST have a role as per defined in the role assignment for xi_adpater_soap_message in the VA under Security Provider and the groups assigned are as follows:

SAP_XI_ADMINISTRATOR_J2EE

SAP_XI_APPL_SERV_USER

SAP_XI_DEVELOPER_USER

SAP_XI_IS_SERV_USER

Cheers

Colin.

[Former Member]

Thanks Colin for the input but the part of username:password@... I allready knew. I didn't knew that SAP had problems with the fact of making the web service public on XI. As I remember you can easily make a web service public on an R3 system via anonymous logon in SICF(?)...

Anyway thanks for the help guys.

[Former Member]

Colin .. how do you do this?

set up a user id for this Web Service when you generate the WSDL in the Integration Builder.

[Former Member]

Hi Colin,

I am also facing the similar problem. I don't want to enter the username and password exclusively, instead of that i want to pass along with the URL, which will hit the SOAP adapter.

I have done the same way you suggested. But still it is poping login screen. Below is my URL:

http://xisuper:welcome@xihost:<j2eeport>/XISOAPAdapter/MessageServlet?channel=:BS_EmployeeData:CC_Em...

Can you please suggest me, Still i need to do any settings..??

Thanks.

Muna.