Take a look at WS-Policy
(http://www-106.ibm.com/developerworks/library/ws-polfram/) and
WS-SecurityPolicy
(http://www-106.ibm.com/developerworks/webservices/library/ws-secpol/).
The former defines the framework to add service policy information to the
WSDL or UDDI entry of a web service.
The lat
The standard servlet container way of doing it is to modify the web.xml to
force HTTPS for certain URLs.
Check the servlet spec for more detail, but you can edit the web.xml of Axis
(when deployed in tomcat) and add something like that:
Axis SecondService
Authentication required for
You can try the Microsoft Web Service behavior
(http://msdn.microsoft.com/library/default.asp?url=/workshop/author/webservi
ce/webservice_node_entry.asp)
This is a Jscript library allowing you to call web services.
I am not sure about the support from Microsoft on that one, it has been in
beta2 fo
As I said before I have no or very little
experience with .NET web service and I never tried SOAP headers in this
context. Sorry.
Thomas
-Original Message-
From: Sateesh Ayyagari
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 18, 2003
11:24 PM
To: [EMAIL PROTECTED]
Subject:
Good question J
What is the client side you are using?
.NET? Axis? Something else?
For sure, the SessionHandler used on the
server side must be updated if you change this namespace, but I do not recall
that the .NET client (what I used at the time) required a different namespace
(also I m
I have no experience with server side .NET
Web Service, so there is not that much I can do to help.
The only thing I can advise you to do (if
not already done as I suspect by reading your message) is to use the tcp
monitor of Axis to see what is exchanged between your server and your clien
I will need to get back to the code that I
have to make it work with the latest Axis version, but here is the modification
that I did to the SimpleSessionHandler.java to wrapped the session id into a
type. I recall (it was a while ago), that this is all I had to do (beside
adding it to the
With cookies, the session id is sent
between the client and the server in the HTTP headers, meaning that it is bound
to the transport protocol. Change the protocol (for example, use JMS) and it
does not work anymore.
If you look at the SOAP specification
(from w3c.org), a SOAP message is c
Title: RE: help with proxy
Forget about that one, miss-configuration on my side.
My Axis client is now talking to the web service through the Microsoft ISA server proxy with basic authentication without any problems.
I guess one possible improvement to Axis would be to have Digest authenticat
I have an issue along the same lines of that ones.
I am accessing my web service through a proxy.
All the right system properties are correctly set, but the issue seems to
come from a different interpretation of the HTTP spec between my client
(Axis) and my proxy server (Microsoft ISA server).
The
Title: Excel axis call example
I do not think so. Actually, I think you
need Office XP (which can run on W2K), but the OS itself does not need to be
XP.
The nice thing about the toolkit is that
it can parse the WSDL and generate VB classes for it that you use in an Excel
macro.
You can t
Title: Excel axis call example
If you are on XP, download the office web
service toolkit from Microsoft, the documentation says it all.
Thomas
-Original Message-
From: Ricardo Coutinho
[mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003
5:08 AM
To: '[EMAIL PROTECT
If you are using Axis for your web
service, setting the scope to session will turn cookie handling on from the
server side point of view (Axis will use the HTTPSession features of the
servlet container). On the C# client side, you have to create the cookie
container for your service object
I had a discussion with some of those guys
some times ago about this issue.
The problem is when you look at the
SOAP/WSDL spec, the exact way of producing the SOAP body in a doc/lit with
multiple parts is weird/wrong (some statements in the spec make it really weird
by saying that the soa
We have been using JBoss 2.4.4 with Tomcat
and JBoss 3.0 with Jetty (JBossWeb) and in both case, no problem to deploy
Axis.
Thomas
-Original Message-
From: Praveen Peddi
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 05, 2003
9:28 AM
To: [EMAIL PROTECTED]
Subject: Ax
Title: RE: Axis and security
If you do a little bit of research in the mailing list archive, you will find plenty of information on this subject (which is more specific to the servlet container and HTTP server that are hosting Axis than Axis itself).
Thomas
-Original Message-
From:
Title: RE: Stateful Web Services
I understand your point of view, but for an Axis user I think it is also important to understand what is behind "session.maintain=true".
The user can choose this way and the day he has a requirement to support SOAP over JMS for example, he needs to have a diff
I agree with Anne comments for sure. JAX-RPC is even representing only one
specific type of Web Service interface (SOAP/HTTP). When you look at the
different activities around Web Services (SOAP over JMS, WSIF with native
binding to EJB/JCA/JMS/) you realize quickly that the scope is bigger
tha
Title: RE: Stateful Web Services
As usual it is always a little bit more complicated than that .
There is not a lot of "standard" API interface to Web Services.
Sun has a standard API called JAXRPC which can be used as a standard web service client API, where the notion of session is def
Title: Message
Yes.
Axis provides its own session object that is stored in the servlet http session
but you could use the servlet session as well (there is a way to get it, check
in the mailing list archive) also this might cause some interoperability issue
(using the axis object instead is
Title: Message
This
is exactly what is happening if you deploy your web service in Axis with a
session scope.
-Original Message-From: Chris Forbis
[mailto:[EMAIL PROTECTED]] Sent: Friday, January 10, 2003
12:15 PMTo: [EMAIL PROTECTED]Subject:
HTTPSession/Tomcat and Axis
Title: RE: Axis + HTTP Get & Post Binding
As far as I know, there is no support for HTTP Get & Post binding in Axis.
-Original Message-
From: Wilfred Springer [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 10, 2003 6:47 AM
To: [EMAIL PROTECTED]
Subject: Axis + HTTP Get & Post Bind
If you download axis sources or if you access the CVS repository, you will
find one in src\org\apache\axis\client
-Original Message-
From: McCaslin Orion [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 09, 2003 11:32 AM
To: [EMAIL PROTECTED]
Subject: client-config.wsdd ?
Hi,
Anyone
Title: Message
Take a
look at the enclosed java file. It is a modified version of the
SimpleSessionHandler class (it was a prototype version I wrote some times ago.
It might not compile anymore, but if you compare it with the current
SimpleSessionHandler class it should give you some hints o
Title: Message
If you
WSDL contains the corresponding SOAP header information at the right place, then
.NET will pick it up automatically and the generated code when adding the web
reference will take care of it automatically (check WSDL spec to see how SOAP
headers are declared in the WSDL)
Ok, forget about problem 1, I am the one adding the header back in every
response (I kind of miss-read my code ).
After fixing that, problem 1 and 2 are now gone, although I suspect that
problem 2 is still an issue. I need to do more testing around that, but
repeating the header for each time i
I am trying to understand how SOAP headers are handled by Axis.
I admit that I can find the answer to my question by looking into the source
code, but in the case someone as a quick answer, I will appreciate.
The sequence of operation call to my web service is the following:
1) Login operation.
It can be argued, I guess, but according to SOAP1.1 spec, for an RPC style
web service, the SOAP Action header is required:
6.1.1 The SOAPAction HTTP Header Field
The SOAPAction HTTP request header field can be used to indicate the intent
of the SOAP HTTP request. The value is a URI identifying th
Title: Message
Using
the Connector Property means that you rely on the HTTP basic authentication
mechanism, meaning that you will not be the one validating the user and password
but your HTTP Server/Servlet container will do it for you. According to which
HTTP Server/Servlet container you ar
Title: Message
Sure.
There it is (zipped in case .htc file are considered as security
issues).
Not
that much comments on the modification, but if you have any questions, feel
free.
Not
extensively tested against all type of Axis web service, but at least a couple
for sure.
Thomas
PS: i
Title: Message
We
did, but we had to fix some bugs in the webservice.htc beta 2 (something related
to an hardcoded prefix for the soap encoding namespace, or something like
that).
Thomas
-Original Message-From: Urban, Patrick
[mailto:[EMAIL PROTECTED]] Sent: Monday, Novembe
Title: Message
I
think it is a bug that was discovered when the automatic build of Axis started
to use JDK1.4.
If you
build Axis using JDK1.3, you do not have this problem
anymore.
I
think it has been fixed in latest CVS.
Thomas
-Original Message-From: Volkmann, Mark
[mai
Title: Message
There
was no changes in what you already have.
My
certificate was something I generated myself using the java keystore tool. It
seems to be the only difference at this point.
Thomas
-Original Message-From: Naresh Bhatia
[mailto:[EMAIL PROTECTED]] Sent: Sunday
Title: Message
I do
not have any specific ideas.
I know
that I played around with the different certificate stores from IE (Other
people, Intermediate Certification Authorities, ) and only by using the
Trusted Root Certification Authorities worked.
This
other thing is that my sample was
Title: Stderr output when using Axis client API
It might sounds stupid, but I tried everything I could to avoid the following type of messages on the stderr console when running a Web Service Axis client program.
Any suggestions?
Thanks.
Thomas
Sep 26, 2002 12:58:37 PM org.apache.axis
Title: Message
As
extra information, I found two limitations in the current MSSOAP Toolkit and the
Office Web Services Toolkit:
- If
your web service is state-full (cookies are used to maintain a session on the
server side, scope="session" in the axis wsdd), if any errors are returned by
Title: Message
The IE
certificate database is actually not IE specific. It is shared with any other
Microsoft application, including .NET ones. So it should
work.
Here
is an extract of a readme file from a sample I wrote some times
ago:
If HTTPS is enabled (see How
do I make HTTPS work?)
Title: Message
Can
you send the piece of VB code you are using to call your
operation?
If you
have a machine with Office XP, I also recommend that you install the Office XP
Web Services Toolkit. This toolkit will generates, from the WSDL, all the VB
classes that you need in order to call th
Title: Message
According to WSDL 1.1 spec, you can not.
Stype
(rpc or document) is defined at the operation level.
At the
input or output message you can decide if it is encoded or literal, but not if
it is rpc or document style.
-Original Message-From: Shashi, Kiran
[mailt
Title: Message
I
think you are making a mistake in the way you use
tcpmon.
The
port to listen to must be an unused port. tcpmon will expect request coming
through this port, then it will display it and forward it to the real http
server (in your case tomcat). 8081 is the port to forward the
Title: RE: Axis EJB example
Try this.
Quite an extensive example, involving security and a bunch of other thing. But it uses EJBs.
-Original Message-
From: Michael Klem [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 01, 2002 4:45 PM
To: [EMAIL PROTECTED]
Subject: Axis EJB example
Title: RE: axis client question
There is even one delivered with Axis. Have a look in axis documentation, it is referenced somewhere and it is working quite fine.
Thomas
-Original Message-
From: Alexander L. [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 27, 2002 12:44 AM
To: [EMAI
Title: RE: Enabling HTTP Coookies (was J2EE Container Manages Security)
I manage to have something like that working with Axis and Tomcat/JBoss, but I am not 100% sure that this is the same setup as yours. What is confusing me is the setup described:
http http
HT
Title: RE: Exposing EJBs as web services...
I played with the EJB as web service quite a bit with Axis. Here is the result of my findings:
1) With Axis you can configure which methods are exposed when you deploy the web service. In the EJB case, what you expose to the web service client is
Title: RE: how to get an exist session
I assume that what you call "another service" is another web service deployed in the same Axis server.
With this assumption, if both service are deployed with a session scope (see Axis doc, specific property to use in the WSDD file), and if they are both
Title: RE: Access query string from web service class?
((HttpServletRequest)msgContext.getProperty (HTTPConstants.MC_HTTP_SERVLETREQUEST)).getQueryString()
-Original Message-
From: Frank Xia [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 12, 2002 7:06 PM
To: '[EMAIL PROTECTED]'
S
Title: RE: .Net Client for Axis Service
You
can also try to confirm what I experienced if you do not do something like
service.PreAuthenticate = true.
Without doing the PreAuthenticate, every request from the client will
first do a request without the auth header, get a 401 and then send the
Title: RE: Exposing EJBs as web services...
Exception messages can just be serialized and passed form one client to another.
May be trying to write an independent EJB client and making it work first can be a good idea. It will remove the Axis piece. This EJB client should be able to work only
From
Axis or from the EJB container? If both output are logged at the same place you
might not be able to make the difference.
Thomas
-Original Message-From: Hurst, Cyrus
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, June 12, 2002
5:24 PMTo: '[EMAIL PROTECTED]'Subject: RE:
E
In the
case of a web service implemented using EJBs, the Axis server will behave as an
EJB client. Only the EJB client classes are required for the web service to work
(meaning the Remote and Home interface).
-Original Message-From: Hurst, Cyrus
[mailto:[EMAIL PROTECTED]]Sent: W
Title: RE: .Net Client for Axis Service
That should be fine. Thanks for the pointers, which is all I really needed.
Thomas
-Original Message-
From: Vidyanand Murunikkara [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 7:08 PM
To: [EMAIL PROTECTED]
Subject: RE: .Net Client f
Title: RE: .Net Client for Axis Service
I think that returning 401 is not enough. You need to return 401 and the WWW-Authenticate header so the .NET client understands that it has to retry by sending authentication information.
Vidyanand, I will be interested to understand what you mean by ch
Title: RE: How TO get the IP address of the client that sent the request?
HTTPServletRequest req = msgContext.getProperty(HTTPConstants.MC_HTTP_SERVLETREQUEST);
req.getRemoteAddr();
-Original Message-
From: dev [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 07, 2002 6:14 AM
To: [E
Title: RE: Session ID from Axis
The HttpRequest object is stored "as is" in the message context property bag. See org/apache/axis/transport/http/AxisServlet.java line 273:
msgContext.setProperty(HTTPConstants.MC_HTTP_SERVLETREQUEST, req)
So, something like:
((HttpServletRequest)msgContex
Title: Another EJB Question
You
are correct.
The
only issue I found is that the EJBProvider is not doing any cleanup (like
calling remove on the EJB from time to time).
Thomas
-Original Message-From: Adams, Christopher
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, May
29, 200
Title: RE: Deployment with WSDD without SOAP request
Have a look to org/apache/axis/utils/Admin.java.
This is the implementation of the Admin service (which is taking care of the deploy).
There is even a main program that might do exactly what you are asking for.
Thomas
-Original Messa
Title: RE: Calling a secure Axis web service with .net client
I had
similar problem with the .NET client because in by back-end server (JBoss, web
service implemented as an EJB) I enabled a default identity to be used for
unauthenticated user.
To
make it short, it seems that the .NET clien
Title: RE: How do I access a webservice via HTTPS?
Right (unless multiple keys/certificate in your client keystore, then you need some code to be able to send the right one).
Thomas
-Original Message-
From: Nuno Guerreiro [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 24, 2002 4:49 AM
Title: RE: How do I access a webservice via HTTPS?
It has nothing to do with Axis.
This is a feature of your servlet container (for example Tomcat).
The JSSE is required if you use JDK 1.3 and older. With JDK1.4 you do not need JSSE.
With Tomcat and JDK1.4, no custom code to write. Tomcat conf
Title: Web Service and EJB with Axis and JBoss
It
seems that a couple of people got a corrupted zip.
I
suspect that this is coming from the .vbs file included in the zip and some
mailers trying to remove it (considered as a virus).
There
is a new zip with a .vbscript instead of .vbs. That sh
Title: RE: an access to a MessageContext
Is it not what org.apache.axis.MessageContext.getCurrentContext() is for?
-Original Message-
From: Martin Senger [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 23, 2002 4:12 AM
To: [EMAIL PROTECTED]
Subject: an access to a MessageContext
I
Title: Message
look
at the javadoc of the process method of the AdminClient class in the API doc of
Axis.
-Original Message-From: Jim Dibble
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, May 21, 2002 12:26
PMTo: [EMAIL PROTECTED]Subject: RE: Changing the
target URL for an Axis w
Title: Message
The
AdminClient accepts multiple option. One of them is -l where you can specify the
URL of the admin servlet.
In the
web.xml, if you changed the URL pattern for /services only, then the other URLs
should be still usable, except that the URL base will always be tutorial (name
Title: RE: Calling a secure Axis web service with .net client
Have a look to what I sent earlier in the mailing list but something like that should do it (FirstServiceService is the C# generated for my service when I do the add web reference):
FirstService.Fir
Title: Web Service and EJB with Axis and JBoss
I just
realized that my zip file contains a .vbs file (since I am providing a VBScript
client application). Seems that some mail server will reject it all together
thinking that this is infected (even if it is not). Sorry for
that.
-Origi
Title: RE: Web Service and EJB with Axis and JBoss
The axis.war contains the EJB client classes.
The EJB server classes are deployed separately.
But the EJB client classes are the implementation of my web services and they are part of the axis.war. I am not addressing what you are trying to do
Title: Web Service and EJB with Axis and JBoss
Here is a zip file containing some code and documentation to build and run some web services implemented as EJBs. The EJBs are deployed in JBoss, the web services are deployed into Axis. Axis is deployed into Tomcat (which is bundled with JBoss).
Title: RE: Using Axis Beta2 in JBoss/Tomcat
The name of your war is used as the base path forth web application.
If you jar name is am-war, then the correct URL to use is http://localhost:8080/am-axis/services
And you will need to use extra command line options in the AdminClient to specify th
Title: RE: Using Axis Beta2 in JBoss/Tomcat
Even before trying to get your service working, you need to make sure that the Axis servlet is correctly deployed.
Something is wrong in the way you deploy it in JBoss/Tomcat since you can not even access it. Double check the structure of your war fi
Title: RE: Using Axis Beta2 in JBoss/Tomcat
If you use the JBoss_Tomcat bundle, when starting JBoss, tomcat is also started.
Dropping axis.war in the JBoss deploy directory will actually deploy Axis in the bundled Tomcat servlet engine and the Axis servlet is accessible like in a standalone To
Title: RE: Using Axis Beta2 in JBoss/Tomcat
They way I have been doing so far is the following:
1) The code of my services is included in the Axis war file.
2) Nothing specific in the wsdd file or the way the AdminClient is used.
Thomas
-Original Message-
From: [EMAIL PROTECTED]
Title: RE: how to implement session in axis
In the case of an HTTP transport, for axis, it means handling cookies.
-Original Message-
From: Provencher, Samuel [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 16, 2002 10:10 AM
To: '[EMAIL PROTECTED]'
Subject: RE: how to implement sessio
Title: RE: Axis sessions using non-Axis client?
In axis-beta2, the setMaintainSession method call which is required to have the client maintaining the session is on the Call class, not the Service one.
The Call class is part of the jaxrpc spec, but the setMaintainSession is Axis specific, I b
Title: Message
Our
application is working in two different steps.
The
first step is where the end-user is specifying which web service he wants to
call. In this step, we retrieve the WSDL and we analyze it (mainly an analysis
of the complex type definitions). This analysis allows us to bui
Title: Message
The
only way we found so far is by using some low level interface in Axis to build
the SOAP message by hand. No very pretty especially since it relies a lot of a
deep analysis of the WSDL file.
If you
get any good suggestions, I am interested. I saw a couple of things in the
Title: Session full web service with ejb provider and JAAS security
Thanks
for the answer.
We
might have to develop something like that for our own needs, but we will be
happy to give it to Axis.
Anybody already working on that? Any thoughts on the best way of doing
that? A new EJBProvider?
Title: RE: Perhaps there will be a form for invoking the service here...
Any news on this area?
The last answer posted on April 12 was talking about something available in nightly build in a week or so. I can see the list of the services using axis-beta2, but no details on the operation para
Title: Session full web service with ejb provider and JAAS security
I
figured out the answers to my questions.
Let me
reply to myself, just in case somebody else is interested.
1) The
stateful bean stopped to be maintained by the ejb container in the following
cases:
- timing out in th
Title: Session full web service with ejb provider and JAAS security
I have been playing with axis beta1, jboss2.4.4 with tomcat4.0.1 bundled together in order to create a web service with an ejb implementation.
It is working quite well. By doing a stateful ejb, I also played with the request
Title: RE: Axis and Tomcat 4.0.3 Installation
I confirm this as well. No later than yesterday I experienced exactly this problem, copying only jaxrpc.jar fixed it.
-Original Message-
From: OBRADOVIC,PETAR (HP-Vancouver,ex1) [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 18, 2002 12
80 matches
Mail list logo